Nexus Group issues and manages certificate-based digital identities for employees, citizens, applications, devices and IoT equipment. Part of IN Groupe, it serves governments, municipalities and businesses that need strong, verifiable identities for both physical and digital access.
The problem it solves is trust in who or what is connecting: passwords and shared secrets do not scale to fleets of devices or to identities that must open both a door and a laptop.
At A Glance
| Vendor | Nexus Group (part of IN Groupe) |
|---|---|
| Category | PKI, certificate lifecycle management and workforce identity |
| Identities covered | Employees, citizens, applications, IoT devices and servers, smart cards, mobile ID badges, FIDO passkeys |
| Deployment | As a service, on-premises or hybrid |
| Customers | Volkswagen, STIHL, Fortum, Sweco, Inera |
| Certifications | Common Criteria EAL4+ (Smart ID PKI), ISO 27001, TISAX, approved Matter Product Attestation Authority |
| Market classification | Identity Verification |
What Nexus Group Does
Organisations need to prove who or what is connecting, whether that is an employee badging into a building, a sensor on a factory floor or a car talking to roadside infrastructure. Nexus answers this with certificates. For staff, identities are most often carried on corporate ID cards, and they can also live on smart cards, phones and laptops. For IoT, Nexus issues cryptographically secure and unforgeable identities for devices and applications. The same PKI platform serves both, and Nexus can run it as a fully managed, sovereign service for organisations that would rather not operate their own certificate authority.
Products
Nexus Smart ID PKI
The core platform issues certificate-based identities stored on mobile phones, smartcards, corporate devices and IoT devices, and it is Common Criteria EAL4+ certified. It is built from components including:
- Certificate Factory, Certificate Issuing System and Key Generation System
- OCSP Responder and Timestamp Server
- Protocol Gateway, supporting ACME, CMC, CMP, EST, EST-coaps, SCEP, WinEP and a REST API
- PKCS#11 connections to HSMs for CA keys, TLS keys, key archiving and user keys
Certificate Lifecycle Management
Expired or forgotten device certificates cause outages and security gaps. This module automates issuing, renewal and revocation of device certificates, and it can set up and operate a Matter-compliant PKI for smart home device makers.
Nexus PQC PKI
Teams preparing for quantum-safe cryptography can use the post-quantum PKI to test against the NIST FIPS 203, 204 and 205 algorithms, namely ML-KEM, ML-DSA and SLH-DSA, before committing to a migration.
GO Services
The GO range packages Nexus capabilities as cloud services:
| GO IoT | Device identities with a Factory CA and an Operational CA, rated at a reported 10,000 certificates issued per second |
|---|---|
| GO Workforce and GO Workforce LoA3 | Workforce identities as a service, including LoA3 eIDs |
| GO Cards | Access card management in the cloud |
| GO Workplace, GO MDM and GO Authentication | Workplace, mobile device and authentication services |
Workforce Identity
For HR and security teams onboarding and offboarding staff, the workforce offering handles FIDO and passkey enrolment and removal, remote ID verification, and corporate ID badges on Samsung smartphones. It ties physical ID and physical access to digital ID and digital access, so one identity covers both the door and the laptop.
How It Works
Smart ID PKI can be run three ways.
| Component | What it does |
|---|---|
| As a service | Nexus develops, installs and operates the platform; GO IoT runs from a compliant, certified data centre with a guaranteed SLA. |
| On-premises | The customer’s team deploys and manages the platform and keeps data stored locally. |
| Hybrid | Responsibilities are split, for example Nexus runs the online CA while the customer manages identities locally. |
In every mode, devices and clients enrol through the Protocol Gateway using standard protocols, and keys stay in HSMs reached through PKCS#11.
Identities And Systems Covered
| Workforce | Employees and politicians on corporate ID cards, virtual smart cards, mobile ID badges and FIDO passkeys |
|---|---|
| Devices and IoT | Device and server identities, from simple sensors to complex equipment, plus signed firmware |
| Applications | Certificate-based identities for applications and TLS |
| Automotive | IEEE 1609-2 and ETSI TS 103 097 (V2X) certificate formats and ISO 15118 for plug and charge |
| Citizens | EIDs and national PKI trust roots |
Integrations
| Area | Integrations |
|---|---|
| Directories | Microsoft Active Directory (MSAD) |
| Physical access | Siemens SiPass |
| Service management | ServiceNow |
Company Background
| Headquarters | Stockholm, Sweden |
|---|---|
| Employees | 300 |
| Ownership | Acquired by IN Groupe in 2020 |
Note: This overview is compiled from Nexus Group’s publicly available information as of 4 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.