DigiCert has partnered with Google Cloud to introduce independent cryptographic trust validation for confidential computing environments, ensuring cloud-hosted workloads remain authentic, secure, and free from unauthorized tampering.

Key Points

• DigiCert is applying Public Key Infrastructure (PKI) principles to verify the integrity of cloud-hosted systems and sensitive AI workloads.
• The service acts as a neutral third-party root of trust to provide independent attestation that complements existing cloud provider security assurances.
• The initiative is the result of a year-long collaboration between DigiCert and Google Cloud to enhance transparency in secure hardware-based environments.
• Organizations can now use cryptographic signatures and certificates to confirm that their distributed cloud infrastructure has not been modified.

Why it Matters

This collaboration addresses the growing demand for multi-layered security in regulated industries where independent verification of infrastructure integrity is a critical compliance requirement. By establishing a neutral root of trust, the service provides enterprises with greater confidence when migrating sensitive data and operations to cloud environments.