TL;DR: EV charging infrastructure needs availability, interoperability, and digital trust, with PKI and ISO 15118-2 certificates enabling authenticated Plug & Charge connections between vehicles and chargers, according to DigiCert. For identity teams, the lesson is that device trust and lifecycle control matter as much in physical infrastructure as they do in NHI programmes.
Editorial analysis by NHI Mgmt Group, based on content published by DigiCert: “The keys to unlocking secure, sustainable EV charging”.
Key questions
Q: How should organisations govern device identity in shared charging infrastructure?
A: Treat every charger and vehicle certificate as part of a governed identity lifecycle.
Q: Why does interoperability create identity governance risk in EV ecosystems?
A: Because interoperability multiplies the number of organisations that must trust the same authentication model.
Q: What breaks when IoT certificates are not lifecycle-managed?
A: When IoT certificates are not lifecycle-managed, devices can keep trusted access long after business ownership, vendor relationships, or security intent has changed.
Practitioner guidance
- Map charging assets to a trust inventory Document every charger, vehicle interface, issuer, and certificate chain involved in the charging flow so you can see where trust is anchored and where it is delegated.
- Govern certificate lifecycle end to end Define issuance, renewal, revocation, and retirement processes for charger and vehicle certificates, including who can approve exceptions and what triggers recovery.
- Standardise trust boundaries across partners Require common identity and certificate expectations for automakers, charger operators, and platform providers so interoperability does not rely on ad hoc trust exceptions.
Bottom line: EV charging trust depends on more than connectors and app workflows. It depends on certificate-based device identity that can be issued, validated, and revoked across multiple organisations.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
EV charging is becoming a device identity problem before it is a user convenience problem. The article shows that charging only scales when chargers, vehicles, and payment systems can trust each other across organisational boundaries. That shifts the control question from physical access alone to certificate governance, device authentication, and lifecycle management. For practitioners, the lesson is to model EV charging as a federated identity ecosystem, not a standalone IoT deployment.
A question worth separating out:
Q: What is the difference between plug compatibility and trusted charging interoperability?
A: Plug compatibility is physical or electrical matching. Trusted charging interoperability adds identity proof, certificate validation, and mutual trust between organisations before a charging session is allowed to proceed. One solves connection mechanics, while the other solves whether the connection should be trusted at all.
👉 Read our full editorial: EV charging trust depends on PKI, interoperability, and identity