Volkswagen case study

The problem

Vehicle software changes in the field. If update keys sit only with a cloud operator, the OEM cannot prove who authorised a change. Certificate expiry then stops aftersales.

How DuoKey helps

DuoKey keeps PKI and signing with the manufacturer, including at the edge. Cloud can host the update service. It does not hold the last word on vehicle software.

Security leadership

The questions this programme had to answer

What changed

How DuoKey closes the OTA control gap

OEM
Signing stays with the manufacturer
Update authority stays with the OEM, not only inside the cloud that delivers software.
Edge
Credentials work where cars operate
Keys used in the field remain under OEM custody, on the platforms already in production.
OTA
Rotation without stopping updates
Certificate lifetime matches production cadence instead of creating an outage window.
Proof
A record for type-approval reviews
Security and engineering can show who signed what, when and under which policy.

More programmes

ICRC

Beneficiary data sealed by keys the ICRC controls.

View case study

Swiss energy operator

Board papers protected with a key Microsoft does not hold.

View case study

Major German bank

Microsoft 365 for a bank, with the key in the bank's hands.

View case study

Swiss fintech bank

Blockchain transactions signed without a complete key ever existing.