Ownership Changes in PKI Shake Up Vendor Landscape: Securetron Positions Self-Hosted CLM as Continuity Play


Posted October 17, 2026 by securetron

As ASSA ABLOY agrees to sell HID's PKI business unit to Vista Equity Partners, enterprises re-examine vendor risk in their certificate strategy.

 
TORONTO, Oct. 17, 2026 -- On October 16, ASSA ABLOY announced it has signed an agreement to sell HID's PKI business unit -- including the IdenTrust and HydrantID PKI SaaS brands, credential management, and ZeroSSL -- to Vista Equity Partners, with closing expected in the fourth quarter of 2026. The unit, which provides digital trust, identity, authentication, encryption, and certificate management, did approximately USD 58 million in 2025 sales.

Ownership changes of this kind are a natural moment for enterprises to review the continuity risk in their certificate infrastructure. When a trust provider moves under new ownership, customers reasonably ask how roadmaps, pricing, and support will evolve. For certificate lifecycle management -- a function where outages are public and costly -- continuity planning matters more than speculation.

"Every ownership transition in the trust ecosystem is a reminder that certificate infrastructure needs a continuity strategy of its own," said Sarah Reid of Securetron. "Enterprises should be able to answer one question: if our CA or managed-PKI vendor changes direction tomorrow, does our automation keep working?"

Securetron points to four elements of a continuity-ready certificate strategy:

- Multi-CA support: a single pane of glass across ADCS, Microsoft CA, Let's Encrypt, DigiCert, ACME, and more, so no single vendor is a single point of failure.
- Independent, self-hosted operation: software that runs in the enterprise's own environment and keeps enforcing policy regardless of vendor portfolio decisions.
- Open enrollment standards: native ACME, SCEP, and EST support -- including a built-in RFC 8555 ACME server -- so certbot, acme.sh, win-acme, and network devices keep enrolling automatically.
- Complete lifecycle automation: continuous discovery of certificates, automated issuance and renewal, configurable expiry alerting, and full audit trails for every action.

Securetron PKI Trust Manager delivers these capabilities today: automated issuance, renewal, and monitoring for the entire certificate lifecycle; continuous discovery of certificates and expiring assets across the enterprise; a built-in ACME server with external account binding plus SCEP and EST enrollment; AI-driven onboarding runbooks through the Boltron-AI module; and compliance and audit visibility across mixed-CA estates.

PKI Trust Manager is available as a Community Edition free for up to 500 certificates, self-hosted or as the PKI Trust Cloud service.

About Securetron: Securetron builds infrastructure security products including PKI Trust Manager for certificate lifecycle management, Boltron-AI for AI-driven PKI operations, and AI-FW, the self-hosted AI firewall and governance gateway for AI agents (aifw.io).

Press contact: Sarah Reid, Securetron, 1 Yonge St, Toronto, ON M5E 1E6, Canada, +1 (438) 927-8036, [email protected]
 
Contact Email [email protected]
Issued By Securetron
Phone +1 (438) 927-8036
Business Address 1 Yonge St, Toronto, ON M5E 1E6, Canada
Country Canada
Categories Computers , Security , Software
Tags pki , certificate lifecycle management , hid , vista equity partners , cybersecurity
Last Updated October 17, 2026