Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cloud Security

Google Cloud Certificate Authority Service Becomes Generally Available

Google Cloud on Monday announced that its Certificate Authority Service is now generally available.

Google Cloud on Monday announced that its Certificate Authority Service is now generally available.

The Google Cloud Certificate Authority Service (CAS), for which a public preview was announced in October 2020, is designed to help organizations “simplify, automate, and customize the deployment, management, and security of private certificate authorities.”

The CAS, which has already been used by some major organizations, can be integrated with services from Keyfactor, Jetstack, Smallstep, Venafi and AppViewx.

Google says the most important new features made available in CAS are simplified certificate authority (CA) rotation, and improved control over certificate issuance policies.

Other new features and integrations include the addition of Terraform support for managing and configuring CAS, a Hashicorp Vault plugin, and a tutorial for setting up and using CAS.

Google Cloud CAS can be used based on a pay-as-you-go model, but subscription models are available for large-volume customers.

Google also announced that the service is now available in more regions.

“Google Cloud CAS offers a virtually unbounded quota for the total number of issued certificates at a rate that can meet any of modern scales backed by an enterprise grade [service-level agreement], making customer managed deployments very hard to justify,” Google Cloud employees wrote in a blog post.

Advertisement. Scroll to continue reading.

Related: Google Cloud Unveils New Service for Government Workloads

Related: Google Cloud Unveils Confidential VMs Powered by AMD EPYC Processors

Related: Hackers Compromise Mongolian Certificate Authority to Spread Malware

Related: Google Launches Its Own Root Certificate Authority

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

CISO Conversations

SecurityWeek talks to Billy Spears, CISO at Teradata (a multi-cloud analytics provider), and Lea Kissner, CISO at cloud security firm Lacework.

Cloud Security

Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online.

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Application Security

A CSRF vulnerability in the source control management (SCM) service Kudu could be exploited to achieve remote code execution in multiple Azure services.

Cloud Security

VMware described the bug as an out-of-bounds write issue in its implementation of the DCE/RPC protocol. CVSS severity score of 9.8/10.