GlobalSign, a global Certificate Authority (CA), and semiconductor manufacturer Infineon Technologies AG, announced a partnership to secure, simplify, and streamline device enrollment into Microsoft Azure IoT Hub and IoT Hub Device Provisioning Service. 

At the center of this solution lies the cross signing of Infineon’s CA and GlobalSign’s WebTrust audited CA. It enhances the trustworthiness of Infineon’s self-issued certificates that flash onto its OPTIGA TPM SLM 9670. This makes them verifiable up to the GlobalSign Root CA. Now, with trusted endorsement certificates, Infineon TPMs can connect to GlobalSign’s IoT Edge Enroll Registration Authority on the IoT Identity Platform anytime throughout their lifecycle to be seamlessly enrolled into Azure with verifiable identity and security confidence.   

“Unique device identities are essential to connect securely to the cloud,” said vice president and general manager of embedded security at Infineon, Juergen Rebel in a press release. “With our new OPTIGA^TM TPM integration kit, you can connect your device securely to Microsoft Azure IoT in less than an hour.”

The result is that the process of secure device enrollment into Azure services is streamlined and simplified.

Adding a cross-signed TPM into the supply chain also offers an opportunity to align secure device identity with a device's origin at production, hardening device identity and authentication, while expanding trust in the ecosystem at every stage in the device identity lifecycle, anywhere downstream.

Azure IoT Hub provides a cloud-hosted solution backend to connect virtually any device and enables highly secure and reliable communication between your IoT application and the devices it manages.

For more information, visit https://www.globalsign.com