PKI Services

Certifying and securing devices

CommScope PKI (public key infrastructure) services enable consumer electronic manufacturers to secure access to premium content.

We test and issue certificates for devices to enable authentication for use on networks. This extra layer of security allows devices to be identified with a unique ID and enhances device protection against piracy attacks.

The CommScope PKI Center is one of the world’s largest producers of keys and certificates for hardware devices, with more than 30 years’ experience of PKI management, over $65 billion of content under protection every year, and more than 2.3 billion digital certificates issued. It is responsible for PKI lifecycle management for hundreds of millions of devices, including cable, telco and satellite set-tops, cable and DSL modems, cell phones, portable media players, two-way radios, video/data and infrastructure servers.

The CommScope PKI Center is a CBRS Root CA Operator for the Wireless Innovation Forum (WInnForum), and a sub-CA for DOCSIS® 3.0/3.1, OpenCable™, PacketCable™, MediaKind CAS, Microsoft PlayReady®, and Liberty Global set-top boxes and cable modems. It also provides root CAs and sub-CAs for many network operators’ CAS, video infrastructure and code signing systems.

Features

End-to-end PKI data management for manufacturing

• Data generation in a secure facility
• Secure data distribution to factories
• Data provisioning to devices
• Measures for anti-cloning
• Usage monitoring
• Third-party security data distribution
• Device identity management

Online PKI services

• Security and configuration data update for devices in the field
• Root and subordinate certificate authority management for industry ecosystems
• Online key and/or certificate generation with device ID management
• Certificate Revocation List publication and hosting

Secure code signing and debugging

• Code signing with standard RSA based and custom digital signatures
• Standard AES encryption and decryption
• Signed access token for secure debugging
• Encrypted JTAG keys generation and delivery
• Multi-level user access and permission control

Feature licensing

• Control over software and hardware features
• Device-specific licenses
• On/off and capacity features
• Pre-paid and post-paid licenses
• Large volume factory license provisioning
• Manual and automatic license generate and update
• Batch license generation and update
• Complete license credit audit trail

End-to-end authorization services

• Satellite and cable authorization
• Channel mapping
• Electronic Program Guide management
• Billing system services

Hosting services

• Proactive monitoring and escalation
• Patch management
• Virus protection software management
• Remote disaster recovery site

Redundant power supply and internet connection

• High-availability platform

Security consulting services

• PKI system design and protocols
• Code signing services, software licensing and secure debugging system design
• Security and threat analysis
• Vulnerability scanning
• Assist with design of internal Digital Rights Management (DRM) systems
• Incorporation of external DRM and Conditional Access System (CAS)