Migrating a public financial institution's public key infrastructure

The challenge

The IT department of a French public financial institution had to modernise the management of its private certificates, which carry trust across its whole estate (strong authentication, signing, encryption), and automate their lifecycle, with no service break before the old certificates were revoked in August 2025.

• Scope the work among 350 business and IT applications.
• Keep the certificates of 140 applications running across every environment, more than 700 servers and 5,000 workstations.
• Coordinate the security, integration, operations and infrastructure teams.

What we did

• Selected the solution against the IT department’s requirements: tender, vendor negotiation, purchase and installation.
• Migration and internal communication plan; tracking tools and dashboards.
• Coordinated more than 700 person-days of external effort and 400 days of internal effort.
• Technical workshops and organisation of the test phases.
• Led the integration of the new PKI (EverTrust), the migration of application certificates from the old one (ADCS), then its decommissioning.

What changed

• Every certificate migrated with no service interruption, on schedule.
• Compliance with ANSSI recommendations.
• Operational risk sharply reduced, under the planned budget.

This is the Migrate activity of Trusted Integration: delivering the designed security through to go-live, and proving that it works.