Topic starter
11/07/2026 8:28 pm
TL;DR: Shorter certificate lifetimes turn PKI into a continuous governance function rather than a periodic maintenance task, GlobalSign notes. Certificate lifecycle work then depends less on occasional renewals and more on steady ownership, visibility and policy enforcement.
Editorial analysis by NHI Mgmt Group, based on content published by GlobalSign: “6 tendencias de PKI y ciberseguridad para 2026”.
Key questions
Q: Why do short-lived certificates increase governance risk?
A: Short-lived certificates increase governance risk because they compress the time available for manual review, approval, and replacement.
Q: How do teams know whether certificate automation is actually working?
A: Look for fewer human-mediated renewals, cleaner ownership records, lower expiry-driven outage rates, and reliable reporting across hybrid systems.
Q: What breaks when certificate discovery is not tied to lifecycle automation?
A: Discovery alone creates a report, not control.
Practitioner guidance
- Map the full certificate estate Build a single inventory of TLS, code-signing and service certificates across cloud and on-prem environments, with owners, renewal dates and downstream dependencies.
- Automate renewal before enforcement dates Replace spreadsheet-driven renewals with policy-based automation for issuance, renewal and revocation so the team can absorb shorter validity windows without outages.
- Separate PQC planning from routine operations Create a migration plan that tests hybrid certificate paths, algorithm agility and rollback options without waiting for a production crisis.
Bottom line: Shorter certificate lifetimes turn PKI into a continuous governance function rather than a periodic maintenance task.
Glossary terms: Certificate Automation, Identity Assurance, Cryptographic agility, Certificate Lifecycle Management
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 6 hours ago by NHI Mgmt Group
11/07/2026 8:58 pm
Certificate automation is now an identity governance control, not a back-office efficiency project. Once certificate validity shrinks, renewal failures become access failures and assurance failures at the same time. That means PKI inventory, ownership and rotation discipline sit inside the identity programme, not outside it. Practitioners should treat certificate lifecycle governance as part of access governance.
A few things that frame the scale:
- 48% of organisations cite cloud-based services as a driver for PKI deployment, according to the 2023 State of Machine Identity Management report.
A question worth separating out:
Q: Should organisations prioritise PQC readiness or certificate automation first?
A: In practice, certificate automation usually comes first because cryptographic change is much harder when the lifecycle is manual. Automation creates the repeatable control layer needed for hybrid certificates, algorithm swaps and rollback. Without that foundation, PQC planning becomes theoretical and operational risk rises during migration.
👉 Read our full editorial: 2026 puts certificate automation and identity assurance under pressure