Alfa-Bank switches to SafeTech CA to manage digital certificates

2025: Completion of the first phase of SafeTech CA implementation

SafeTech Lab and Alfa-Bank completed the first stage of implementation of the SafeTech CA corporate certification center to replace the Microsoft Certificate Authority (CA) service in the bank's infrastructure. SafeTech announced this on December 24, 2025.

The Corporate Certification Authority (CA) is a key element of ensuring digital trust in the PKI infrastructure of any organization, therefore, Alfa-Bank had the highest requirements for the implementation of such a security-critical solution. SafeTech CA is chosen as the platform for protecting the public key infrastructure.

SafeTech CA is a cross-platform service that can completely replace Microsoft CA for Windows-infractures, as well as solve the problems of releasing and managing technology certificates for Linux-systems, mobile devices iOS on/and Android other components IT of the -landschaft.

The migration of the certification authority to the new solution is planned in several stages, which is due to the specifics of the bank's large-scale heterogeneous IT infrastructure.

Alfa-Bank has created a two-level hierarchy of PKI infrastructure: root CA and three subordinates with the corresponding modules to support MS Enrollment and SCEP protocol. Thanks to the mechanism for importing templates from Microsoft CA built into SafeTech CA, some of the services have already been seamlessly and imperceptibly for users under the control of a domestic solution.

In the near future, the project team will perform integration a MDM system for issuing certificates for all corporate devices, migrating the remaining systems and infrastructure components to SafeTech CA and completely decommissioning Microsoft CA.

Thus, the implementation of the step-by-step scheme of import substitution of the corporate certification center will allow Alfa-Bank to smoothly transfer all technological certificate management processes to the Russian solution, completely eliminating risks to operating activities and technical difficulties. The main goal of SafeTech Lab is to provide the customer with a universal PKI infrastructure protection tool that ensures full compliance with legal and security standards. In addition, thanks to the flexible and convenient interface for users and administrators, as well as the enhanced functionality compared to Microsoft CA, working with digital certificates with the implementation of SafeTech CA will become much easier and more efficient.

One of the key features of our product is the high speed of implementation. Migration from Microsoft SA to SafeTech CA can be carried out as quickly and painlessly as possible. However, within the framework of the project at Alfa-Bank, we deliberately built a more complex and detailed transition process, which guarantees the complete preservation of data and continuity of business processes. The use of SafeTech SA will allow the bank not only to comply with the requirements of legislation and regulators, but also to significantly increase the efficiency and security of digital certificate management processes in its infrastructure, "said Alexander Sanin, CEO of SafeTech Lab.