Skip to content

47-Day Certificates Are Coming. Are You Ready?

Act Now →

Case Study

120 Facilities. 19,000 Employees. A Beverage Giant's Security Infrastructure Built for the Future.

How Encryption Consulting built a PKI for a 165-year-old US beverage leader, integrated it with Microsoft Intune and Windows Hello for Business, and moved 19,000 employees to passwordless authentication.
120 Facilities. 19,000 Employees. A Beverage Giant’s Security Infrastructure Built for the Future.

Customer Profile

A US beverage company with over 165 years in the market, 100+ brands, 120+ facilities across America, and 19,000+ employees serving customers worldwide, with a long-standing security-first operating culture.

Industry

Consumer Goods: Beverage Manufacturing & Distribution

Engagement Type

PKI Design & Implementation with Microsoft Intune and Windows Hello for Business

Download Case Study

At a Glance Outcome

19,000+

Employees secured with PKI-backed identity and authentication

120+

Facilities connected under centralized identity and device management

FIPS · GDPR

Regulatory compliance addressed through PKI implementation

4 Phases

Structured engagement from planning through disaster recovery

The Enterprise

Challenges

With 19,000+ employees across 120+ facilities handling PII and financial data, the company needed to secure its communications, bring identity and device management under one roof, and replace passwords with biometric login, all without interrupting operations or missing regulatory requirements.

Sensitive data unprotected across all states

Employee and client PII (names, addresses, emails, phone numbers, and financial details) needed to be encrypted at rest, in use, in transit, and in backup. No single framework was in place to enforce that.
01 Data Protection

No centralized identity and device management

Identity and device management was scattered across the 120+ facilities, with no way to enforce security policies or check endpoint compliance. Whatever they built also had to make PKI, Microsoft Intune, and Windows Hello for Business work together.
02 Identity Management

Password-dependent authentication

Passwords left the company exposed to credential theft, phishing, and password-related breaches. The fix was to move to passwordless, biometric login, which tightens security and makes sign-in easier for employees.
03 Authentication
The hard part wasn’t standing up the PKI. It was integrating it with Intune and Windows Hello across 120+ facilities and 19,000+ employees without interrupting a 165-year-old business.

Encryption Consulting

Engagement Summary · Encryption Consulting · PKI Services

Our Offered

Solutions

The work ran across four phases: project planning, CP/CPS development, PKI design and implementation, and business continuity planning. Each phase fed into the Microsoft Intune and Windows Hello for Business integration.

Capability 01

Project Planning & CP/CPS Development

Stakeholder meetings set the scope and gathered hardware, software, business, and technical requirements. We assessed the existing environment and drafted the CP and CPS documents with the client, with review and knowledge transfer sessions handing ownership to their team.

Capability 02

PKI Design, Build & Use Case Integration

We wrote the PKI trust model and production build documents, set up the PKI in production, and implemented OCSP. Windows Hello for Business and Microsoft Intune were integrated as the two main use cases, giving employees passwordless biometric login and IT centralized device management. Functional tests ran throughout, reviewed by the client each round.

Capability 03

Security Policy Enforcement & Automation

Intune integration centralized security policy enforcement and compliance monitoring across every device. Automated certificate issuance and renewal cut IT workload and human error. The PKI encrypted data in transit and at rest, RBAC limited access to authorized users and devices, and PKI-generated keys were stored securely.

Capability 04

Business Continuity & Disaster Recovery

We built a business continuity plan covering PKI operations and disaster recovery for the Root CA, Issuing CA, and OCSP, plus a PKI operations guide. Knowledge transfer sessions left the client team able to run and recover the infrastructure independently.
The result is a PKI framework that secures communications, centralizes identity management, supports passwordless login, and scales with the company, all delivered across four phases without interrupting day-to-day operations.

Encryption Consulting

Engagement Summary · Encryption Consulting · PKI Services

The Overall

Business Outcome

The PKI gave the company an identity and authentication setup that is secure, scales with growth, and meets its compliance obligations, covering 19,000+ employees across 120+ facilities and signing its electronic transactions.

01

Security strengthened & unauthorized access reduced

PKI, RBAC, and Windows Hello biometric login restrict sensitive resources to approved users and devices, cutting breach and credential theft risk, protecting digital assets, and holding trust with customers, partners, and stakeholders.
02

Operations streamlined & compliance achieved

Intune centralized identity and device management, and automated certificate issuance and renewal cut IT overhead, freeing the team for higher-value work. Windows Hello removed passwords from daily sign-in, and PKI policies align with FIPS and GDPR, lowering compliance penalty risk.
03

Scalable foundation for long-term growth

The PKI scales with the client base, and Intune’s cloud management absorbs future expansion. Digital signatures verifiably sign electronic transactions and communications, keeping the security foundation steady as the business grows.

Discover Our

Latest Resources

  • Blogs
  • White Papers
  • Videos

Post Quantum Cryptography

Introducing the PQC Center of Excellence: A Hands-On Lab for the Post-Quantum Era 

Encryption Consulting's PQC Center of Excellence is a free hub to study NIST PQC standards and spin up an ML-DSA PKI sandbox. Issue quantum-safe certs today.

Read more
Case-Studies
view all blogs
We-Counted-Every-Format-CodeSign-Secure-Can-Sign
We Counted Every Format CodeSign Secure Can Sign
Post-Quantum-Cryptography:-A-12-Month-Playbook-for-Digital-Trust-Professionals
Post-Quantum Cryptography: A 12-Month Playbook for Digital Trust Professionals
Microsoft-AD-CS:-Operations,-Hardening,-and-Migration-Guide
Microsoft AD CS: Operations, Hardening, and Migration Guide

White Paper

Cryptographic Bill of Materials (CBOM) Solutions

Learn how to evaluate, compare, and choose the right CBOM platform, including must-have features, vendor scorecards, RFP questions, and a PQC migration roadmap.

Read more
Case-Studies
view all white papers
The-Cert-Wars:-The-Race-Against-Expiry
The Cert Wars: The Race Against Expiry
Post-Quantum-Cryptography-for-Finance:-Threats,-Standards,-and-the-Road-to-2035
Post-Quantum Cryptography for Finance: Threats, Standards, and the Road to 2035
FIPS-140-3-Migration:-The-Complete-Guide-to-Meeting-the-September-21,-2026-Deadline
FIPS 140-3 Migration: The Complete Guide to Meeting the September 21, 2026 Deadline

Video

The Claude Mythos Cryptanalysis Findings Explained: What AI Found in HAWK and Reduced-Round AES

Explore expert insights on cybersecurity, PKI, and post-quantum readiness, with practical guidance to strengthen security and future-proof cryptography.

Watch Now
Case-Studies
view all videos
Cryptographic-Posture-Management-Explained:-PQC,-Certificate-Lifetimes-&-the-CBOM
Cryptographic Posture Management Explained: PQC, Certificate Lifetimes & the CBOM
The-2029-Convergence:-Why-Microsoft,-Google,-and-Cloudflare-All-Chose-the-Same-PQC-Deadline
The 2029 Convergence: Why Microsoft, Google, and Cloudflare All Chose the Same PQC Deadline
The-Quantum-Mandate-Explained:-What-the-2026-Executive-Order-Means-for-Post-Quantum-Cryptography
The Quantum Mandate Explained: What the 2026 Executive Order Means for Post Quantum Cryptography