►
From YouTube: Hyperledger In-depth: An hour with Thales: Increasing Cybersecurity for Hyperledger Fabric
Description
In 2019, 7.9 billion data records were breached. And yet, 39% of companies aren’t using robust data security measures because deployment complexity is a barrier. Security is not a nice-to-have feature. It’s not an opt-in. It’s a must. No one will buy your solution if they cannot trust it. It’s no wonder companies are exercising diligence when choosing a solution, ideally one that is system agnostic, automated, and simple. In this discussion, Hyperledger member company Thales, a leader in data protection, will discuss how storing certificates and private keys in a Thales Luna HSM adds critical levels of security and when both are incorporated into the blockchain, the integrity of the blockchain is heavily assured and protected. They’ll discuss the recent Hyperledger Case study with DigiCert and how working together, they serve secure solutions using Hyperledger Fabric.
In the “Hyperledger In-depth: An hour with… .” series, Hyperledger members share learnings from their projects and try to answer all the hard questions about the pains of working with DLTs. It is not yet another webinar: participants will be encouraged to take part, come with prepared questions and voice opinions. Expect live demos and tutorials, stories from the battle field and hopefully some heated discussions. Let’s get out of the zoom fatigue and engage to share experiences and build a stronger community.
Speakers:
Blair Canavan
Director of Alliances,
Digital Identity & Security
Thales
Avesta Hojjati
Head of R&D
DigiCert
----
Hyperledger – Open Source Blockchain Technologies
Hyperledger is an open source community focused on developing a suite of stable frameworks, tools and libraries for enterprise-grade blockchain deployments.
It serves as a neutral home for various distributed ledger frameworks including Hyperledger Besu, Fabric, Sawtooth, Indy, as well as tools like Hyperledger Avalon, Cactus and libraries like Hyperledger Aries, Ursa. Learn more about Hyperledger projects: https://www.hyperledger.org/use
Case Studies: https://www.hyperledger.org/learn/case-studies
Training & Certification: https://www.hyperledger.org/learn/training
Tutorials: https://www.hyperledger.org/use/tutorials
Webinars: https://www.hyperledger.org/learn/webinars
Events: https://www.hyperledger.org/events
Vendor Directory: https://www.hyperledger.org/use/vendor-directory
Subscribe to the Hyperledger Newsletter: https://www.hyperledger.org/newsletter
Follow-us on Twitter @Hyperledger
Learn about Hyperledger Membership: https://www.hyperledger.org/about/join
#Hyperledger #Blockchain
A
A
A
Wonderful
well
welcome
everyone.
Thank
you
for
joining
us
for
today's
hyperledger
in-depth
hour
with
hyperledger
member
talus
on
increasing
cyber
security
for
hyperledger
fabric.
Today
we
have
two
distinguished
speakers.
We
have
blair
canavan
who's,
the
director
of
alliances
and
digital
identity
and
security
at
phallus
and
avesta
hojati,
who
is
the
head
of
r
d
at
digicert,
a
partner
of
phallus
today's
session
is
our
ongoing
hyperledger
member
community
sessions
to
help
us
share
and
let
the
community
know
how
hyperledger
technology
is
being
used
in
production,
use
cases
and
other
innovative
ways.
A
So
a
couple
of
housekeeping
activities
just
a
reminder
that
the
session
is
being
reported,
and
we
also
have
to
follow
our
antitrust
policy.
All
linux
foundation,
meetings,
presentations,
webinars
that
involve
industry
competitors
is
has
to
follow
the
antitrust.
If
there's
any
question
about
what
you
should
share
or
not
share,
please
do
raise
your
hand
and
one
of
the
staff
members
will
assist
you
once
again.
A
A
The
slides
will
also
be
available
for
download
after
the
session,
via
our
hyperledger
library,
member
webinar
library,
where
you
can
find
the
video
recording
and
the
sessions
as
well.
So
a
couple
of
other
things.
We
want
to
make
sure
that
all
the
participants
here
on
the
webinar
get
the
most
out
of
the
session.
A
So
if
you
have
a
question,
there's
multiple
ways
that
you
can
communicate
with
the
speakers
number
one
is
using
the
raised
hand
feature
in
zoom
and
we
can
go
ahead
at
the
appropriate
time
and
open
up
the
audio
for
questions
directly
to
the
speakers
today.
We
also
will
enable
the
ask
questions
box.
So
if
you're
shy-
and
you
just
want
to
do
a
text
box
q,
a
I
go
ahead
and
enter
the
questions
and
myself
along
with
the
panelists-
will
be
reviewing
and
getting
to
those
questions
when
the
time
permits.
A
Last
but
not
least,
please
go
ahead
and
talk
and
comment
in
the
chat
room,
be
respectful
and
follow
our
our
standard
guidelines
community
guidelines,
but
please
you
know,
introduce
yourself.
Let
us
know
who
is
here
and
perhaps
an
interesting
fact
about
yourselves,
for
example,
what
location
you're
dialing
in
from
today.
A
So
once
again,
I
want
to
thank
our
speakers.
We
have
blair,
canavan
who's,
the
director
of
alliances
at
digital
identity
and
security
at
phthalas,
and
also
avesta
hajelty
at
head
of
r
d
at
digicer.
So
blair
welcome.
Thank
you
so
much
for
taking
the
time
today
to
talk
about
what
alice
has
been
doing.
You
have
been
a
member
of
the
hyperledger
community
for
many
years
and
also
have
had
leaders
within
our
technical,
open
source
communities
in
the
past.
So
we
are
looking
forward
to
the
session.
B
C
B
Everyone's
everyone's,
assuming
that
your
picture
is
representative-
and
I
will
attest
to
that
fact-
it
is
so
thanks
for
joining
us
today.
Thank
you
for
having
me
hey.
Let's
before
we
kick
off
and
thanks
again
daniella
for
inviting
us
today,
I'm
I'm
quite
excited
to
talk
about
this
subject,
I'm
not
all
that
experienced
in
blockchain,
but
I've
been
spending
some
time
in
this
role.
B
I
spent
a
lot
of
time
with
the
former
digicert,
the
the
verisign
days
with
my
colleagues,
some
of
them
that
I'm
still
working
with
today
back
in
the
mid
90s
and
I'm
very
proud
to
say
that
I
was
one
of
the
very
first
luna
or
chrysalis
employees,
which
now
is,
is
owned
and
operated
by
the
by
the
bigger
and
much
bigger
talus.
We
were
10
people
in
1996
and
safe
to
say.
B
We're
over
80
000
employees
now
in
2021,
so
things
have
changed
dramatically,
but
the
fundamentals
still
apply
in
in
those
years
that
I
spent
in
the
cryptographic
space
and
introducing
hardware
security
modules
to
this
entire
world.
Little
do
we
know
that
these
fundamentals
still
apply
and
they
continue
to
affect
all
of
our
businesses
today.
So
I'm
hoping
that
today,
by
the
end
of
this
conversation
with
ufs,
that
we
can
describe
a
little
bit
about
how
this
affects
the
world
of
blockchain
and
how
it
interoperates
within
the
specific
world
of
hyperledger.
B
But
before
I
drawn
on
and
say
over
the
last
I
guess
30
years
I've
been
in
the
crypto
in
the
security
space,
I'm
glad
to
say
that
I'm
now
in
the
alliance's
side
here
at
talos,
working
with
our
partners
such
as
digicert
in
its
newer
format
and
bigger
and
better
and
smarter
way
so
I'll.
Let
you
it's
introduce
yourself
of
essa
and
talk
a
little
bit
about
what
you
do
with
with
digit.
C
Absolutely
again,
thanks
for
having
me
here
very
exciting
times,
my
name
is
avesta.
I've
been
part
of
tg
cert
for
the
past
five
years.
I
currently
manage
the
r
d
department
at
dg
serge,
which
is
quite
extensive.
My
team
is
in
charge
of
doing
anything
from
optimizing
consensus
protocols,
which
is
quite
related
to
our
conversation
today
to
work
on
post-quantum
crypto,
as
well
as
automation
when
it
comes
to
certificates,
I
think
is,
is
worth
mentioning.
C
What
is
it
that
is
specifically
cert
does
for
the
audience
to
understand
its
relevancy
to
our
conversation
today,
digicert
is
a
public
key
infrastructure.
We
provide
basically
identity
for
public
and
private
trust,
the
public
trust
many
of
you
have
probably
dealt
with
it.
If
you
have
gone
to
a
website,
you
see
the
lock
on
top
of
the
browsers.
C
You
click
on
that
you
will
see
x,
509
certificates
and
those
are
certificates
that
publicly
trusted
ca,
such
as
dgcert
are
able
to
issue
the
private
portion
of
it
mostly
focuses
on
identity
for
iot
devices,
identity
for
embedded
devices,
things
such
as
code
signing,
and
it
is
relevant
for
us
as
part
of
this
conversation
today
to
issue
certificates
on
blockchain
platforms
such
as
hyperledger
fabric,
a
little
bit
more
personal.
From
my
perspective,
I've
been
introduced
to
blockchain
since
june
2011
when
bitcoin
came
out.
C
B
Luda
thought
that
we'd
be
at
this
stage
in
terms
of
blockchain.
That's
a
great
segue
to
our
conversation
today
to
talk
a
little
bit
about
blockchain.
I
know
that
most
of
the
people
on
this
phone-
if
not
everybody,
I'm
sorry
on
this
call
today
know
what
blockchain
is,
but
maybe
let's
pop
into
some
of
the
slides
talk
a
little
bit
about
that,
give
a
little
bit
of
background,
and
I'm
going
to
make
this
as
conversational
as
I
possibly
can.
This
is
just
an
hour
with
talus.
B
This
is
an
hour
with
two
companies
that
are
invested
in
hyperledger
and
why
do
we
partner
not
only
within
the
hyperledger
consortium,
but
why
are
we
also
partners
outside
of
this
for
the
grand
grander
good
or
for
whatever
that
might
be,
so
I
have
paige
moving
the
slides
for
us,
so
I
apologize.
If
thank
you
very
much.
Let's
talk
to
the
next
slide.
B
Next
one
please
and
again
investor.
I
will
I'll
probably
ask
you
some
questions,
but
let's,
let's
start
from
the
very
beginning,
and
really
what
is
blockchain
so
for
those
who
are
again
brand
new
to
this
and
I'm
sure
there
are
one
one
or
two
on
the
call
today,
it's
an
open
distributed,
ledger
of
course,
transactions
between
two
parties
officially
and
verifiable
and
permanent
way.
It
is
a
very
trusted
infrastructure,
a
very
trusted
manner
by
which
transactions
can
occur,
but
it's
across
decentralized
networks
and
using
digitally
signed
transactions.
B
So
really
what
you're
talking
about
and
if
you
click
one
more
time
page
you're
talking
about
a
blockchain,
that's
made
up
not
only
a
database,
it's
highly
distributed,
but
it's
also
secured
by
design
but
even
blockchain,
although
it's
as
cryptographically
bound
and
fundamentally
you
know,
driven
by
its
core
like
with
crypto.
There
are
elements
within
the
crypto
that
are
absolutely
essential
that
they
protected
a
certain
way
avasta.
C
B
C
B
And
I'll
try
and
follow
along
on
my
slide
deck
here
as
well,
just
to
make
sure
if
we
lose
a
connection,
so
blockchain
has
has
been
in
some
respects
denoted
as
an
emerging
technology
or
something
relatively
new,
and
not
the
entire
world
isn't
resting
within
or
working
within
the
blockchain
infrastructure
or
or
strata.
That's
not
entirely
true.
It's
it's
it's
sitting
behind
the
scenes
in
so
many
industries
and
being
used
and
incorporated
into
so
much
more
mainstream
applications
on
a
regular
basis.
B
The
underwriting
aspects
of
that
is
such
that
there's
been
some
false
starts
in
that
area,
but
because
some
of
the
larger
banks
are
now
investing
heavily
into
the
blockchain
infrastructure,
they're
underwriting
this
and
they're,
providing
all
the
fundamentals
that
you
would
expect
from
what
typical
traditional
banking
would
be,
but
now
they're
putting
in
this
aspect
of
blockchain.
With
these
fundamentals,
we'll
talk
about
today
to
provide
assurance
to
those
that
are
looking
at.
You
know
sharing
information
or
exchanging
actual
finances
and
blockchains
themselves
or
crypto
currencies
themselves.
B
This
is
where
you're
starting
to
see
the
emergence
across
a
lot
of
these
industries
with
more
confidence
and
like
everything
else.
Typically,
when
something
is
built,
it
takes
time
for
some
of
the
other
areas
to
be
shored
up
a
little
bit
more
security,
and
we
see
this
in
almost
every
industry
in
history.
We'll
show
you
that
when
we
started
with
digicert
back
in
the
day
they
were,
they
were
the
only
certification
authority
in
the
world
that
actually
had
its
certificates,
their
root
keys
in
hardware.
The
only
problem
was
those
hardware
devices
that
they
had.
B
They
couldn't
copy
those
on
to
backup
hardware
devices
and
that's
where
the
chrysalis
luna
product
came
in.
That's
a
little
history
for
you.
It
wasn't
until
that
point
in
time
that
they
were
backed
into
a
corner
that
we
provided,
that
ability
to
not
only
move
those
keys
into
those
devices,
but
also
back
those
keys
up
accordingly
across
a
very
large
large
infrastructure,
avesta
I'll.
Let
you
comment
if
there's
anything
in
there
that
you'd
like
to
add.
C
No,
I
think
personally,
it
is
a
greater
slide.
You
know
it
talks
about
different
use
cases
that
blockchain
is
able
to
assist
with-
and
I
think
one
thing
is
very
important
to
understand-
is
that,
depending
on
the
use
case-
and
we
see
those
with
the
bullet
points
illustrated
under
each
one
of
these
pillars-
are
going
to
be
different
right.
Sometimes
we
want
to
make
sure
that
everybody
has
access
to
the
data.
At
the
same
time,
we
are
able
to
limit
the
utilization
of
that
data.
C
Often
we
want
to
make
sure
that
the
identity
of
the
specific
individuals
who
are
interacting
either
being
a
data
provider
or
being
a
data
consumer
to
some
sense,
has
been
protected.
So
again,
these
are
different
portions
that
I
think
blockchain
is
able
to
help
with,
and
the
sky
is
is
limit
right.
There
are
many
different
use
cases
that
we
have
not
discovered
yet
specifically
when
it
comes
to
manufacturing
when
it
comes
to
tracing
specific
parts
and
make
sure
that
they
are
coming
from
the
right
supply
chain
and
they
have
not
been
modified
throughout
that
process.
B
So
the
integrity
of
the
blockchain
assures
us
or
provides
assurance
that
it
is
intact
and
that
it
is
legit,
and
I
know
that
there's
a
lot
of
backroom
buzz.
That
blockchain
has.
There
is
used
for
nefarious
reasons
by
you,
know,
state
actors
and
so
on
any
thoughts
on
that
best
in
your
experience
and
how
you
would
respond
to
that
comment.
C
Absolutely
I
think
this
is
an
area
that
we
have
seen
many
compromises
in
the
past.
Many
of
us
are
familiar
with
the
hardware.
Hacks
chips,
that's
being
manufactured
in
a
different
country
coming
over
here,
united
states
and
being
compromised,
and
I
think
this
is
one
area
that
the
traceability
portion
of
blockchain,
as
well
as
the
auditability.
C
It's
going
to
assist
with
solving
this
a
specific
problem,
depending
on
the
platform
of
blockchain,
that
you
have
either
being
public
private
or
a
hybrid
model.
Both
of
them
are
able
to
assist
with
the
supply
chain,
traceability
use
case,
but
what
matters
here
is
to
be
able
to
minimize
the
risk
when
we
are
considering
a
non-oem
device
or
considering
changes
in
a
specific
process
that
previously
we
have
agreed
on.
But
at
the
end
of
the
day,
that
process
has
been
compromised
again
by
nation
actors
or
being
a
large
supported
number
of
attackers.
B
Rail
systems,
our
business,
digital
identity
and
security
is
very
much
a
part
of
all
of
those
businesses
and
blockchain
is
being
moved
into
all
of
our
businesses.
So
we
not
only
provide
with
our
what's
called
talus
6
systems,
integration
capabilities.
We
will
actually
provide
solutions
in
blockchain
and
if
you
go
to
our
website,
you'll
find
all
sorts
of
examples.
Of
that
specific.
B
What
you
said,
investors
in
the
supply
chain,
especially
the
manufacturing
and
in
large
banking
organizations
having
talus,
is
part
of
that
gives
great
comfort
that
a
large
organization
with
this
much
presence
in
the
world
and
no
different
from
digital
that's
been
putting
that
little
lock
in
your
browser.
Since
the
beginning
of
time,
these
organizations
give
these
companies
great
comfort.
B
So
let's
go
to
the
next
slide,
because
I
think
this
is
a
great
opportunity
to
talk
about
adoption,
good
segue,
I'm
going
to
let
you
talk
a
little
bit
to
this
slide
of
us.
I
know
we
didn't
rehearse
this
if
anybody's
wondering
this
is
just
us
having
a
conversation.
So
if
you
want
to
pass
it
back
to
me
by
all
means,
but
I
thought
that
you
of
all
people
would
have
seen
the
growth
in
the
enterprise
adoption
so
I'll.
Let
you
speak
to
this
slide.
C
I
already
have
it's
it's
interesting.
Actually,
I
I
switch
my
phone
every
year
for
security
reasons
and
obviously
for
technology
perspective,
and
I
was
going
through
some
pictures
and
in
2018
I
was
in
japan
and
they
had
a
sign
that
the
store
receives
bitcoin
and
this
was
a
grocery
store.
So
I
went
online
to
find
this
store
and
it's
a
completely
japanese
store.
So
I
had
to
use
translation
and
I
saw
from
2018
where
they
were
taking
bitcoin
in
person.
C
They
have
moved
to
take
bitcoin
actually
on
their
website,
so
now
they
will
give
you
an
address
if
you
want
to
buy
anything
you're
able
to
utilize,
bitcoin
or
other
type
of
cryptocurrencies,
such
as
z,
cash
and
pay.
For
for
the
item
that
you
are
acquiring,
I
think
the
function
of
utilizing
bitcoin
and
other
cryptocurrencies
is
not
the
question
here.
B
A
Blockchain
projects
have
been
in
the
r
d
in
the
poc
stages
for
a
long
time
and
really,
as
you
see,
issues
and
the
questions
around
security
right
that
it
comes
into
when
these
networks
are
starting
to
move
into
production.
So
I
would
love
to
maybe
hear
a
little
bit
more,
and
maybe
you
have
some
of
these
in
later
slides
and
feedback
from
you
and
invest
on
that
specific.
A
B
There's
an
essential
demand
to
to
build
these.
These
applications
within
the
blockchain
and
hyperledger
fabric.
For,
for
obvious
reasons,
what
was
missing.
It
could
be
as
simple
as,
for
example,
an
aes
signing
mechanism-
that's
not
fully
supported
by,
for
example,
the
hsm
at
this
particular
time
they
don't.
In
other
words,
they
don't
want
to
compromise
what
they
could
have
or
have
traditionally
built
in
previous
platforms,
especially
in
the
financial
circles,
and
they
do
not
want
to
compromise
from
a
regulatory
point
of
view
on
any
of
those
things.
B
So
there's
a
bit
of
a
catch
up.
This
is
our
experiences.
There's
a
bit
of
been
a
bit
of
a
catch
up
for
some
of
our
technologies,
not
just
ours,
but
others
to
all
work
together,
and
this
is
the
beauty
of
of
integrating
with
the
likes
of
digicert.
Is
that
we've
been
working
together
for
over
25
years
and
we
have
to
stay
in
in
step
to
move
these
into
production.
So
there's
been
a
lot
of
like
like
you
see
here.
B
Pocs
is,
of
course,
the
the
death
of
many,
because
sometimes
they
just
never
get
off
the
ground,
but
we
are
seeing
at
a
fairly
bright
net
pace
as
an
example,
one
of
the
cryptocurrency
exchanges
being
built
in
eastern
europe
that
we're
involved
with
actually
started
at
the
very
bottom
in
essence
and
saying
we're
building
foundationally,
something
that
we
we
understand
from
what
we
did
in
this:
a
large
value,
transaction
system
or
or
currency
traditional
other
currency
exchanges.
How
do
we
do
that
from
a
cryptocurrency
exchange
point
of
view?
B
C
Yeah,
I
think
you
touched
on
very
great
points.
Blair,
two
specific
elements
that
are
shining
one
is
regulations
and
compliance
here
right
majority
of
these
pocs
are
being
conducted
in
in
controlled
environments,
right
they're,
not
in
production
they're,
not
really
dealing
with
less
api.
This
is
personal.
B
Absolutely
absolutely
thanks!
So,
let's
get
to
the
next
slides,
because
I
want
to
really
get
to
the
meat
and
sandwich
which
is
the
use
of
pki
and
how
you
and
and
digital
provide
that
capability.
So
let's
go
to
the
next
slide,
which
should
pretty
much
just
let's
wrap
up
the
the
the
whole
aspect
of
where
we
are
in
terms
of
acceptability
and
as
you
described,
moving
from
poc
to
production.
B
This
is
what
a
lot
of
people
live
and
die
by
is
the
gartner
height
cycle
or
in
some
the
jeffrey
moore
aspect
that
that
trough
of
disillusion
disillusionment
if
you're
familiar
with
that
where
we
saw
blockchain
primarily
if
you
can
see
in
that
tiny
font,
you'll
find
it
about
halfway
up
the
curve.
But
when
you
move
to
and
if
you
click
through
to
the
next
bullet
for
me,
page
you'll
actually
start
to
see
that
the
maturity
based
on
again
gartner
in
2025,
which
not
too
far
away
from
here.
B
And
if
you
click
on
the
final
box
here,
you're
starting
to
see
that
you
know
what
by
2023
two
trillion
dollars
worth
of
goods
annually.
I
think
that's
well
under
and
invest
I'll
leave
you
to
speak
to
this
and
and
and
tell
me
your
thoughts
on
on
the
hype
curve
or
where
you
see.
I
know
we've
covered
a
little
bit
of
in
our
previous.
You
know
couple
minutes,
but
if
you
have
any
thoughts
on
this
I'd
love
to
hear
it.
C
Supply
chain
supply
chain,
and
the
reason
for
that
is
supply
chain
is
a
distributed
model
as
its
core,
and
this
is
something
that
again,
a
properly
designed,
developed
and
deployed
blockchain
platform
is
going
to
assist
with
you
know,
I
mean
if
you
look
at
the
latest
gartner
report
that
that
you
have
here,
I
think,
not
even
by
2023,
but
if
you
look
at,
I
usually
like
to
look
at
it
from
five
and
ten
years
plans.
We
can
look
at
this
market
by
itself
to
be
so
expensive.
C
It's
so
expandable
that
the
lack
of
having
the
traceability
and
auditability
that
blockchain
provides
for
goods
and
services.
It's
going
to
probably
be
double
the
number
that
we
are
seeing
here
in
a
case
that,
if
you
don't
have
it
you're,
actually
losing
revenue
and
customers
and
obviously
you're
not
able
to
expand
your
services.
B
I
agree
wholeheartedly
and,
like
you
said,
10
years
in
this
space,
I
know
maybe
it
feels
like
100
to
you,
but
30
years
in
the
crypto
space
it
does
feel
like
200
years.
Let's
go
to
the
next
slide,
which
is
just
to
capture
again.
Why
we're
chatting
here
together
we're
long-standing
partners
of
esta
when
I
mentioned
again
my
career
starting
to
32
years
ago.
I
think
that's
a
couple
years
before
you
were
born,
the
speed
of
things
that
have
have
progressed
is
staggering.
B
Yet
some
of
the
fundamentals,
still
you
know,
are
still
there,
like.
I
said
the
beginnings
of
the
of
the
verisign
days
and
the
fundamentals
of
public
key
infrastructure,
the
the
quiet,
silent
infrastructure
by
which
we
all
commerce,
electronically
lives
and
eats
and
breeds,
but
you'll
see
here,
as
this
is
related
to
the
case,
study
that
we
just
did
with
you
and
hyper
ledger
avesta.
B
It
talks
about
the
value
proposition
and
the
fact
that
you
need
to
to
build
these
things
with
all
those
core
fundamentals,
but
at
what
cost
and
how
much
time,
and
is
it
really
really
difficult
to
do?
Well,
it
was
a
lot
more
difficult
to
do
this
in
the
past.
Having
crypto
people
just
hanging
around
was
was
something
not
any
company
just
had
had
them.
You
know
hanging
around
in
the
hallways.
B
We've
had
to
rely
on
so
many
of
these
people
that
have
that
deep,
crypto
expertise,
but
what
you're
starting
to
see
now
is
you're
moving
this
into
the
cloud.
You're
digitally,
transforming
everything
in
your
business
and,
of
course,
blockchain
is-
is
no
exception.
So
one
of
the
things
that
we're
seeing
as
an
organization
is
a
lot
of
our
customers
have
not
just
completely
shifted
to
the
cloud
but
they're
providing
based
on
the
application
use
case
the
means
to
get
there
or
the
means
to
use
a
hybrid
approach.
B
So
all
of
those
things
again
must
have
that
level
of
trust
and
certificate
management
and
assurance,
and
that's
where
digicert
and
talis
come
together
that
you
might
not
think
about
it.
But
what
keeps
people
up
at
night
from
an
I.t
or
from
a
fundamental
crypto
or
a
security
or
ciso
or
anybody
in
those
roles
and
responsibilities,
is
if
any
of
those
things
are
compromised.
B
The
entire
blockchain
is
dead
and
that's
where
we
would
like
to
to
make
sure
that,
when
you're
building
these
things
or
thinking
about
these
things
from
the
devsecops
point
of
view,
that
we're
making
things
much
easier
to
to
embed
into
your
applications,
we're
making
it
much
more
cloud
savvy
and
cloud
easy.
So
I
just
wanted
to
to
again
that
the
hyper
ledger
digital
talus
relationship
provides
that
the
means
to
do
those
things.
So
that's
all
that
you
you
you
clear
up
what
I
might
have
said.
C
No,
no,
those
were
all
on
point.
One
thing
I
want
to
mention
is
as
much
as
it
is
important
to
utilize
blockchain
for
certain
use
cases.
I
think
the
vast
majority
of
focus
should
be
on
properly
designing
this
platform,
and
that's
where
this
alliance
between
hyperledger
dg
cert
and
talus
is
very
important
from
the
perspective
of
hyperledger
and
I've
been
around
this
project
for
a
while
hyperledger
fabric.
C
Being
an
open
source
code
has
many
advantages.
Others
are
able
to
look
at
it.
I
often
look
at
the
pull
request
on
github
and
I
see
many
activities
that
are
pushing
this
platform
specifically
again
hyperledger
fabric
that
I
have
dealt
with
to
to
be
not
only
capable
but
be
a
stable
for
for
enterprise
use
cases
from
taos
and
digicert
perspective.
C
The
same
scenario
right:
it's
if
you're
not
able
to
secure
your
public
and
private
keys
if
you're
not
able
to
have
those
keys,
properly
managed
within
compliant
hsms
doesn't
really
matter
if
you
have
a
stable
blockchain
platform
or
no
you're
still
at
the
risk
of
being
compromised.
If
you
don't
have
a
proper
management
for
your
certificates,
if
you're
deciding
to
have
each
certificate
to
be
issued
for
specific
transactions,
make
sure
that
the
notes
who
are
part
of
this
platform
are
properly
validated
and
vetted.
C
Then
again,
you
are
at
the
risk
of
weakness
where
the
identities
are
at
the
risk
of
being
compromised.
So,
overall,
if
you
look
at
it,
this
alliance
by
itself
provides
all
three
different
factors
from
the
platform
to
components
to
the
identity
of
the
individuals
who
are
going
to
utilize.
These
these
services.
B
Excellent
and
there's
an
aspect
that
I'm
sure
a
lot
of
people
will
think
about
which
is
the
right
to
left
thinking,
which
is
when
we
want
to
deliver
this
service
to
this
application.
If
we
move
back
to
the
left,
our
starting
point
is
often
a
lot
sooner
or
a
lot
earlier
than
you
think.
You
can't
leave
things
to
the
last
minute
and
one
of
the
things
that
we've
experienced
all
of
us
in
this
industry
is,
let's
build
it
and
they
shall
come
and
then
we'll
fix
those
problems
later.
B
This
is
not
one
of
those
circumstances
where
you
can
do
that.
All
these
fundamentals
and
best
practices.
All
of
these
things
cannot
be
have
to
be
legitimately
concerned
and
they
have
to
be
built
into
your
project
plan.
That
being
said,
a
lot
of
this
is
encapsulated
into
standard
operating
procedures.
That
digital
provides.
B
B
What
we've
done
here
is
this
is
probably
more
of
a
takeaway,
but
these
are
things
that
you
can
find
very
easily
on
our
website
under
the
blockchain
just
type.
You
know
talus,
blockchain
and
you'll
get
to
all
of
these
things,
which
is
a
leave
behind
after
the
presentation
today
and
then
the
last
one,
of
course,
not
least,
is
our
most
current.
If
you
click
one
more
time,
page
it'll
bring
up
the
talus
and
digicert
case
study
that
we've
just
completed
and
thanks
to
avesta's
input
and
soulcades
from
our
cto
office.
B
C
Sounds
great,
I
think,
generally
the
way
that
I
try
to
describe
pki
and-
and
my
audience
often
will
be.
I
need
to
be
able
to
describe
pk
to
my
grandma.
That's
how
often
she
asks
you
know
what
is
pki
and
where
do
you
work
and
what
I
describe
is
you
use
it
without
knowing
that
and
obviously
to
be
relevant
to
blockchain?
The
goal
essentially
will
be
the
same
thing:
you're
utilizing
the
platform
without
knowing
what
the
platform
is
or
without
all
the
hassles
that
goes
around
pushing
and
implementing
the
platform.
C
But
what
is
generally
pki
public
infrastructure
by
itself
is
a
security
standard
that
allows
you
to
elevate
the
methods
that
are
being
using
for
authenticating
the
identity
of
users,
devices
and
in
cases
organizations.
Best
example
of
this
is
every
time
that
you
log
into
a
website
from
your
browser
or
from
your
phone.
There
needs
to
be
a
secure,
socket
layer
or
ssl
certificate.
That
shows
where
this
bank
has
been
established
and
the
identity
of
that
bank
has
been
validated
p.
C
C
It
is
not
mandatory,
but
is
preferred
to
receive
that
update
from
a
secure
source,
which
often
here
being
the
manufacturer
and
code
signing,
has
that
capability.
It
allows
that
firmware
update
to
be
cryptographically
signed
once
your
device
receives
that
if
it
sees
a
proper
signature,
then
we'll
go
ahead
and
deploy
that
update.
C
So
how
do
customers
utilize
pki
and
this
slide
has
been
quite
frankly
simplified?
That's
the
fact
that
there
are
many,
many
different
use
cases
that
pki
is
being
used
in
and
is
able
to
help
with
assisting
assisting
solving
the
problems
that
already
exist.
But,
let's
start
from
the
top
left
corner
and
and
go
around
one
specific
use
case
is
the
managed
services
that
pca
provides
for
enterprises
for
authentication.
The
use
case
here
will
be
public
or
private
trust.
C
C
Moving
on
to
the
next
color,
these
are
capabilities
that
pcapp
provide
for
distributed
environments.
Three
specific
capabilities
that
pcapp
provides
for
distributed.
Ledgers
is
key
sovereignty,
data
sovereignty
and
local
resources,
and
this
in
the
case
of
hyperledger
fabric
becomes
quite
important.
By
default,
hyperlooger
fabric
does
get
shipped
out
with
fabric
ca
fabric
certificate
authority
and
for
some
use
cases
that
might
be
completely
sufficient
for
other
use
cases
where
you
require
an
enterprise
layer
of
security
and
management.
C
This
is
where
a
managed
pki,
such
as
what
digisare
provides
it's
going
to
be
essential,
especially
because
the
volume
of
the
signed
transactions
that
you're
dealing
with
are
quite
high.
You
rather
have
reporting,
or
you
just
want
to
make
sure
that
the
overall
management
is
in
place.
It
is
also
important
to
understand
that
hsms
are
playing
a
pretty
big
role
here.
This
is
where
we
have
the
100
integration,
with
talus
hsms
and
you're,
capable
of
storing
private
keys
in
various
specific
workflows
in
these
hsms.
C
Given
the
environment
that
have
deployed
your
application,
government
trusted
electronic
signature
workflows
are
also
important.
We
have
seen
a
very
big
rise
of
pki
being
utilized
specifically
in
europe
with
aidas
standards.
This
is
where
you
want
to
make
sure
that
you
also
again
have
that
key
sovereignty,
data
sovereignty
and
local
resources
that
are
capable
of
helping
you
with
document
signing.
C
I
think
we
saw
an
extensive
utilization
of
this
given
the
pandemic,
where
users
are
staying
at
home,
they
will
rather
utilize
remote
notaries
and
they
would
like
to
receive
those
electronic
signatures
with
a
very
high
confidence.
And
finally,
there
are
government
programs
that
require
the
highest
level
of
security.
C
What
are
the
key
components
of
pki?
I
think
it's
very
important
to
understand
the
specific
components
that
are
important
to
have
a
proper
pki
in
place,
and
these
are
only
some
of
those
components.
Obviously
there
are
more,
but
these
are
the
most
important
ones.
First
and
foremost
is
a
certificate
authority.
C
Did
you
say
it
as
a
publicly
trusted
certificate
authority,
meaning
it's
able
to
issue
publicly
trusted
certificates,
for
example,
again
being
websites,
but
also
we
are
able
to
issue
certificates
for
private
trust
where
it
has
less
elements
of
compliance
and
is
being
overseen
by
different
governing
bodies,
but
it
doesn't
require
to
have
all
those
sophisticated
compliance
rules
being
issued
by
ca
browser
forum
or
the
cap
form
registration
authority.
This
is
where
the
verification
of
identity
of
entities
in
order
to
receive
a
digital
certificate
is
being
being
held.
C
This
is
again
where
dg
server
does
have
a
wing
that
allows
for
us
to
validate
organizations
anything
from
llc's
to
government
organizations
to
even
individuals
to
make
sure
that
the
entity
or
individual
who
has
requested
a
certificate
has
gone
through
a
proper
validation,
central
directory.
This
is
a
secure
location
in
which
we
are
able
to
store,
keys
and
indexes.
In
this
case
again,
hsn
will
be
playing
that
role:
significant
management
systems.
C
This
is
the
pti
processes,
ensuring
that
the
policies
specifically
are
being
enforced
to
store
certificates
and
allows
the
delivery
of
those
certificates.
And
finally,
there
are
certificate
policies
where
are
defining
the
pki's
requirement,
considering
specific
procedures
which
allows
other
auditing
bodies
to
audit
the
trustworthiness
of
pkis
example
of
this
is
every
time
that
you
want
to
create
a
root
certificate.
You
have
to
go
through
a
key
ceremony
and
that
key
ceremony
by
itself
is
a
procedure
that
needs
to
be
properly
conducted,
but
also
should
allow
for
auditors
to
audit
the
whole
process
next
slide.
C
B
On
that
one
note
just
talking
a
little
bit
about
the
root
ceremony,
just
as
a
an
aside
here
for
interest
more
so
I
know,
you've
got
a
whole
another
slide
here
to
go
through
just
just
to
put
the
the
context
of
how
important
that
root
key
is.
For
those
that
recall,
there
was
a
time
when
rootkeys,
specifically
with
the
likes
of
digicert,
verisign
and
trust,
and
others
had
to
protect
that
at
all
costs
and
just
to
put
in
context
of
how
valuable
some
of
those
were
thought
consulting.
B
But
I
met
him
a
few
years
later
and
little
did
he
know
that
having
the
root
of
all
things
and
how,
how
important
that
would
be
would
be
worth
500
million
dollars
over
20
years
ago.
So
that
kind
of
puts
you
in
the
sense
that
why
we
take
this
so
seriously
is
if
any
of
those
things
are
compromised,
what
the
actual
value
it's.
It's
indescribable
at
this
point
in
time,
so
I'll,
let
you
continue
on
with
your
the
use
cases
and
and
finish
up
here.
I
think
we're
doing
pretty
good
for
time.
C
Sounds
great
just
one
addition
to
what
you
mentioned
again,
as
this
is
more
relevant,
maybe
to
blockchain,
and
I'm
just
trying
to
connect
this
to.
I
wouldn't
call
it
the
real
word,
but
for
vast
majority
of
the
audience
here
that
might
have
dealt
with
this
is
the
securing
your
wallet
right,
especially
around
cryptocurrencies.
We
have
heard
this
from
number
of
different
perspective
that
you
want
to
make
sure
that
you
properly
do
secure
your
tokens
and
wallets
and
your
private
keys.
C
Now
you
have
to
think
about
this
as
a
on
a
very,
very
larger
scale,
when
you're
dealing
with
not
only
billions
of
dollars
but
with
very
sensitive
information,
where
the
root
of
trust
needs
to
have
that
hardware
component
of
it.
This
is
what
taos
provides
and,
obviously
the
process
and
procedures
and
the
applications
that
are
able
to
generate
those
private
keys
and
properly
moving
them
to
hsm,
and
that's
that's
what
digiserv
provides.
C
There
are
many
many
different
use
cases
that
pki
supports,
and
I'm
just
going
to
go
through
some
of
this
logos
here,
because
this
provides
a
little
bit
more
kind
of
visual.
For
for
the
audience,
one
is
securing
devices
if
you
have
a
smartphone,
if
you
have
iot
devices,
even
if
you
have
embedded
devices
example
of
embedded
devices
being
vending
machines,
all
of
these
devices
are
utilizing
a
pki
and
a
specific
certificates.
C
The
example
for
mobile
devices
are
they
utilize
certificates
for
the
applications
that
they
have
installed,
make
sure
that
those
applications
are
being
issued
from
a
properly
trusted
source.
This
is
where
code
signing
comes
into
play.
They
also
utilize
certificates
or
client
certificates
for
sometimes
logging
into
wi-fi
networks
or
having
an
enterprise
environment
running
on
that
specific
phone.
C
Also
secure
emails
is
another
component
that
pki
is
able
to
assess
with.
Unfortunately,
we
haven't
seen
in
the
public
sector
for
the
publicly
trusted
for
for
secure
emails
to
be
utilized
so
much,
but
in
the
enterprise
level,
vast
majority
of
companies
are
utilizing
this,
which
commonly
is
known
as
s
mime
certificates,
where
the
sender
of
an
email
receives
a
certificate
and
every
time
they
send
an
email.
A
certificate
will
be
attached
to
that
email
showing
that
the
proper
source
of
that
there
are
a
number
of
different
use
cases
here.
C
C
Blockchain
is
another
area
that
we
heavily
discussed
about
today.
This
is
where
we
have
an
integration
to
hyperledger
fabric.
We
provide
the
management
layer
where
talus
does
provide
the
support
for
securing
the
private
keys.
We
talked
about
document
signing
and
finally,
the
tls
and
ssl,
where
we
provide
global
certificate,
control,
visibility
and
solutions
capability
for
interrupt
businesses
such
as
financial
sector
logging
into
your
facebook.
Instagram
social
media,
whatever
that
sector
might
be,
that
requires
the
organization
who
can't
afford
downtime
next
slide.
B
Back
to
you,
blair
awesome.
Thank
you
so
much
avesta.
I
know
we've
got
a
few
minutes
left
here
for
some
questions
and
I
see
some
in
the
chat
daniella.
I
can
let
you
tee
this
up
as
we
wrap
up
what
I
hoped
it
was
a
informative
session.
I've
certainly
enjoyed
my
time
with
the
vesta.
I
know
we're
going
to
spend
more
time
talking
about
ourselves
after
the
call,
but
for
those
who
are
looking
at
something
that
they
need
to
consider.
A
Hyperledger
fabric
is
being
used
in
these
production
networks
that
it
is
creating
a
lot
of
these
partnering
and
business
opportunities
for
those
of
you
in
the
community.
So
I
know
there's
a
couple
questions.
I
just
want
to
remind
everyone
on
the
line.
If
you
want
to
submit
a
question,
you
can
raise
your
hand
and
I'll
go
ahead
and
promote
you
to
voice,
or
you
can
add
it
in
chat
or
the
q.
A
blair.
I
see
a
question
specific
from
badar
baja,
who
is
the
cto
of
m
chain
from
morocco.
B
C
Definitely
I
think
self-sovereign
identity
by
itself
will
be
an
interesting
topic,
especially
since
you
know
this
is
part
of
hyperledger.
Hyperledger
nd,
for
example,
by
itself,
has
been
quite
an
interesting
project
and
I
think
that's
where
self-sovereign
identity
plays
a
big
role.
There
are
a
number
of
different
providers
out
there,
but
specifically
from
our
perspective.
C
Self-Sovereign
identity
is
something
that
requires
some
of
those
corner
cases
when
it
comes
to
regulations
and
compliance
to
be
solved
before
we'll
be
able
to
actually
expand
on
that.
In
addition
to
that,
I
think
the
second
part
of
the
question
is
decentralized
pki
solutions.
We
certainly
do
have
a
project
that
we
are
discovering
more
capabilities
of
decentralized
pki
and
the
use
cases
that
is
able
to
solve.
C
C
If
you
look
at
it
managing
keys
managing
the
applications
from
the
pki
perspective
has
been
around
for
the
past
20
years
and
continuously
with
the
help
of
talus.
We
are
trying
to
evolve
this
process,
but
also
looking
at
something
such
as
decentralized
pti
is
definitely
going
to
be
on
our
roadmap,
which
again
it
is
today,
but
is
mostly
as
part
of
our
rnd
than
being
a
product.
B
That's
correct
so
take
a
look
at
our
website
and
I
take
a
knee
on
that
one,
because
sylvester
has
a
much
better,
broader
respect
to
that,
but
in
terms
of
federated
pki
and
other
aspects
of
that
we're
certainly
seeing
the
pki
of
things
on
the
identity,
side
emerging
and
growing
at
an
unbelievable
pace
and
rate
from
life
cycle
management
of
iot
devices
where
those
certificates
reside.
Where
do
those
keys
reside?
All
those
things
are
elemental
to
decentralized
pti.
B
So
we
have,
I
don't
know
if
we've
put
that
in
the
chat
or
on
any
of
the
slides,
but
if
I
forgive
me
I'll,
ask
paige
to
type
in
our
email
addresses
in
the
chat
there
as
again
again,
I'm
I'm
responsible
for
the
alliances,
I'm
one
of
many
that
respectfully
manages
over
400
of
our
alliances
in
which
digicert
is
one
of
our
key
partners.
I
know
that
sounds
a
little
trite.
B
It's
actually
effectively
one
of
our
key
partners
for
over
20
years
and
we're
building
our
business
with
them,
and
I
manage
with
my
colleagues
that
relationship,
so
you
can
always
reach
out
to
me.
We
have
a
field
organization
that
scatters
the
globe
we
operate
in
almost
every
country,
not
like
a
we're
a
little
bit
bigger,
but
in
terms
of
our
scope,
we're
well
in
the
same
bucket.
So
please
just
send
us
an
email
and
we'll
we'll
respond
accordingly.
A
So
once
again,
avesta
blair,
thank
you
for
all
your
contributions
that
you've
done
to
the
hyperledger
community
for
sharing
some
of
this
work
today,
and
I
encourage
everyone
to
reach
out
to
both
of
them
and
their
organizations
to
learn
more
and
get
engaged
as
well.
So
thank
you
again.
As
I
started
off
with
this,
is
our
you
know,
bi-monthly,
and
sometimes
this
month
we
actually
have
four
different
sessions.
A
With
our
hyper
ledger
members
in-depth
sessions,
the
next
one
will
be
on
september
22nd
with
minetree,
where
they
will
be
discussing
many
of
their
use
cases
using
hyperledger
technologies
in
the
marketplace.
The
one
after
will
be
on
september
28th,
which
is
going
to
be
hyper
ledger
project
focused
one
on
hyper
ledger
bay,
zoo,
where
palm
nft
studio
is
going
to
be
speaking
about
the
palm
side
train
side
chain.
This
is
palm.
A
Nft
is
actually
the
organization
behind
the
recent
damien
hurst
currency,
art
project
and
its
fnft
project,
as
well
as
space
jam
and
that
use
utilizes,
hyperledger
bezos.
So
we're
very
excited
about
that
session.
But
please
do
visit
hyperledgerevents.org
for
additional
information.
We
have
a
lot
of
great
content,
including
the
content
from
our
summer
global
forum,
where
there
were
hundreds
of
sessions
and
production
use
cases
that
were
shared
with
the
community.
So
I
encourage
you
to
view
those
on
demand.
A
As
you
see
fit,
we
are
an
open
source
community,
so
please
get
involved,
join
our
hyperledger
projects,
our
working
groups
and
our
special
interest
groups
based
on
your
interest
and
where
you
would
like
to
see
participation
and
contribution
to
the
project.
So
once
again,
thank
you
very
much
to
thales
and
digicert
for
today's
session.
Thank
you
all
for
watching
and
participating,
and
we
look
forward
to
seeing
you
in
the
next
event
as
well
as
in
our
community.
So
for
that,
thank
you
all
have
a
great
day.