10 Million Members. Six PKI Gaps. One Healthcare PKI Rebuild.
Customer Profile
Texas’s largest health benefits provider, serving ~10 million members through 150,000+ physicians and 500+ hospitals. Offers individual, employer, Medicaid, Medicare Advantage, dental, and vision plans, with over a century of service in clinical care and community health.
Industry
Healthcare & Health Insurance
Engagement Type
PKI Implementation & Infrastructure Deployment
At a Glance Outcome
2-Tier
Microsoft PKI architecture deployed with offline Root CAHSM
Root and Issuing CA keys secured in tamper-resistant hardwareCompliant
HIPAA and FIPS-aligned key ceremony deliveredNDES
Secure mobile enrollment with real-time OCSP certificate revocationThe Enterprise
Challenges
As the client's digital services expanded, six weaknesses in their hybrid PKI environment came into focus: an exposed Root CA, unprotected private keys, missing governance controls, and gaps in resilience planning.
Root CA online, domain-joined, and exposed
Private keys stored in file system, not HSMs
No key custodian matrix or separation of duties
Six gaps, one trust chain. Every weakness traced back to the same Root CA, so the fix had to start there, then rebuild outward.
Encryption Consulting Assessment Team
PRE-IMPLEMENTATION ASSESSMENT | ENCRYPTION CONSULTING · PKI SERVICES
Our Offered
Solutions
The engagement ran four workstreams across four phases: assessment and design, build and implementation, functional testing, and knowledge transfer.
Capability 01
PKI Architecture Design & Planning
Capability 02
HSM Integration & Key Ceremony
Capability 03
Two-Tier Microsoft PKI Deployment
Capability 04
DR Planning & Knowledge Transfer
The result was a compliant, resilient, and scalable PKI infrastructure, purpose-built to protect the sensitive health data of millions of members and support the organization’s growth for decades ahead.
Encryption Consulting Assessment Team
ENGAGEMENT SUMMARY | ENCRYPTION CONSULTING · PKI SERVICES
The Overall
Business Outcome
With the two-tier Microsoft PKI in place, the client closed the structural vulnerabilities, met HIPAA and FIPS requirements, and now has a security foundation that protects 10 million members and scales as the organization grows.
PKI trust chain fully secured
HIPAA and FIPS compliance achieved
Lifecycle control and resilience established
Discover Our
Latest Resources
- Blogs
- White Papers
- Videos
Post Quantum Cryptography
Introducing the PQC Center of Excellence: A Hands-On Lab for the Post-Quantum Era
Encryption Consulting's PQC Center of Excellence is a free hub to study NIST PQC standards and spin up an ML-DSA PKI sandbox. Issue quantum-safe certs today.
Read more
White Paper
Cryptographic Bill of Materials (CBOM) Solutions
Learn how to evaluate, compare, and choose the right CBOM platform, including must-have features, vendor scorecards, RFP questions, and a PQC migration roadmap.
Read more
Video
The Claude Mythos Cryptanalysis Findings Explained: What AI Found in HAWK and Reduced-Round AES
Explore expert insights on cybersecurity, PKI, and post-quantum readiness, with practical guidance to strengthen security and future-proof cryptography.
Watch Now
