IT service
Encryption, PKI, mTLS and Tokenisation
Encryption only helps if the keys are kept apart from the data and the certificates never lapse. We start from your data-at-rest requirements, decide what must be encrypted, tokenised or masked, and automate the certificates so nothing expires unnoticed.
What is included
- Data-at-rest requirements assessed first: what must be encrypted, tokenised or masked, and where the keys live
- Tokenisation of sensitive fields, such as card, ID and account numbers, when the data-at-rest requirements call for it: systems and websites keep a meaningless token, the real value stays in a protected vault
- Encryption at rest for databases, disks and backups, with the keys held apart from the data
- Certificates from a public certificate authority for anything the internet sees, or your own internal CA (such as Active Directory Certificate Services) for internal systems, chosen by requirement
- Automated certificate rollover: certificates renewed and deployed before they expire, with an alert if a renewal fails
- Mutual TLS (mTLS) where it is needed, so servers, APIs and devices prove who they are to each other
- Encryption in transit everywhere: TLS 1.2 or later, with FIPS-approved ciphers
What you get
- A stolen copy of the data that is useless to the thief
- No outages from an expired certificate
- Evidence of encryption controls for POPIA section 19 and your auditors
One engineer handles it from start to finish, so a change requested today can be in production the next day, once change-control documentation and testing are complete.
Topics covered
- data encryption services
- tokenisation
- mutual TLS (mTLS)
- internal certificate authority
- certificate lifecycle management
- PKI consulting South Africa
Related services
IT Security
Harden what you already have, close the gaps attackers use, and know where you stand.
Privileged Access Management
Admin rights only when needed, passwords in a vault, and every privileged action on record.
Hardening & Vulnerability Management
Hardened to CIS benchmarks, scanned for vulnerabilities, and proven with reports.
Talk to us about Encryption, Certificates & Tokenisation
Tell us what you need. You will hear back from the person who will do the work.