Migration De Risking
Project Description
Unsung collaborated closely with the Head of Trust Services to re-platform 20 Root Certificate Authorities from an end-of-life vendor platform to a new strategic platform. This migration presented unique challenges as the required migration pathway was neither documented by the vendor nor supported through standard vendor processes.
Given the absence of established migration methodologies and the business-critical nature of the Root CAs involved, Unsung structured the engagement as a phased approach commencing with a formal feasibility study. This feasibility phase was designed to validate technical viability and prove the migration concept before committing to production execution.
Outcomes & Deliverables
The feasibility engagement delivered comprehensive technical validation and documentation that enabled the client to proceed with production migration activities with confidence:
• Delivered a fully documented, tested, and validated engineering methodology for platform migration encompassing all aspects of the migration process including prerequisite configuration requirements, detailed step-by-step migration procedures, and automated validation testing scripts.
• Established a repeatable, standardised process that enabled efficient, low-risk execution of production migrations across all 20 Root Certificate Authorities.
Challenges
The engagement presented fundamental technical challenges rooted in the complete absence of vendor support or documentation for the required migration approach.
Successfully proving feasibility required Unsung consultants to leverage extensive expertise across multiple technical domains including hardware security module architecture, detailed understanding of certificate authority platform internals, and development of bespoke scripting to address gaps in available vendor tooling.
Technologies Used
Related Services
Learn more about our PKI consultancy.

