How the Netherlands RDW
secured its supply chain
The Netherlands Vehicle Authority, RDW, is responsible for tasks in the area of licensing of vehicles and vehicle parts, supervision and enforcement, registration, information provision and issuing documents. With more than 13 million vehicles and 14 million driving licence holders, RDW treat the security and integrity of the data they hold as a priority.
The deployment in numbers
A national vehicle authority with 27 million records to protect
RDW holds and protects more than 27 million vehicle and driving records, and its systems are built to serve around 45,000 user look-ups per second. Insurance providers, RDW-approved companies and government organisations all need access to that data, so public key infrastructure sits at the centre of how RDW authenticates them.
MyID® was already an established part of that infrastructure, providing more than ten connectors into RDW's databases, technologies and hardware, and giving the in-house IT team one place to manage issuance, access levels and revocation. That arrangement worked. The change came from outside it.
Secure access for trusted third parties
RDW's existing certificate authority vendor was ending support for its product, so the PKI behind all of that third-party access needed a new home. RDW needed a replacement that would integrate with the technology already in place, hold security at the same level throughout, and keep disruption to live operations to a minimum.
A solution that connects to a variety of internal databases
and technologies whilst providing a simple and fast means for approved parties to securely access data.
PKI for trusted third-party access
RDW needed to create, manage, distribute, store, and revoke digital certificates and public-keys at the scale necessary for a major public service provider.
Vendor migration
RDW needed to move to a new PKI provider due to their existing certificate authority (CA) vendor ending support for their product. A new partner was needed to integrate within their existing technology.
Minimum disruption
optimum levels of security maintained while disruption to live operations is minimised.
PrimeKey EJBCA enterprise, managed by MyID
PrimeKey's PKI solution EJBCA Enterprise emerged as the best solution for RDW's needs. EJBCA Enterprise provides a reliable method of issuing digital certificates, embedding the strongest form of multi-factor authentication.
Smooth migration
as a PKI solution supported by MyID, the process of moving across to EJBCA was well phased and managed by RDW's IT team in partnership with PrimeKey and Intercede.
Multi-PKI support
MyID's capacity to connect to multiple PKIs simultaneously helped ensure the migration took place in a controlled manner.
Integrated issuance
the new solution sees EJBCA Enterprise certificates issued and managed by MyID's CMS. RDW's team have all the technology necessary to issue cryptographically protected certificates from EJBCA to approved organisations and users via MyID.
User-friendly admin
MyID's interface means RDW's IT have control on user access and can easily move, switch and revoke access as required.
A measurable step-change in authentication assurance.
The deployment delivered a centralised, audited identity solution aligned to the organisation's compliance, operational and user experience goals.
Controlled, low-disruption migration
the move to EJBCA was phased and managed by RDW’s IT team with PrimeKey and Intercede, keeping security levels high while disruption to live operations was minimised.
Issued and managed through one CMS
EJBCA Enterprise certificates are now issued and managed by MyID, giving RDW’s IT team a single interface to move, switch and revoke third-party access as required.
Runs on RDW’s own infrastructure
the interoperability of EJBCA Enterprise with MyID means RDW can scale the solution and connect to new technology and devices as their needs evolve.
Future-proofed and interoperable
the interoperability of EJBCA Enterprise with MyID means RDW can scale the solution and connect to new technology and devices as their needs evolve.
The platform behind the deployment
Intercede is a cybersecurity software company and the digital identity experts. For over 25 years, Intercede has helped government agencies, defence programmes, financial institutions and enterprises deploy phishing-resistant digital identities at scale.
The MyID product family, MyID CMS, MyID MFA and MyID PSM, manages millions of credentials across more than 20 countries. Vendor-neutral architecture means MyID integrates with virtually any certificate authority, hardware security module or smart card manufacturer, without organisations replacing existing infrastructure.