The Urgent Need For Crypto Agility

Uploaded on 2025-08-20 in NEWS-Cybersecurity News, FREE TO VIEW

A leader in digital certificates and automated Certificate Lifecycle Management (CLM), Sectigo, has released its inaugural State of Crypto Agility Report, with insights analysed by research firm Omdia.

The report, surveying 272 IT decision-makers worldwide, reveals deep concerns about two seismic shifts in digital trust: the CA/Browser Forum’s mandate to reduce SSL/TLS certificate lifespans to 47 days by 2029 and the transition to post-quantum cryptography (PQC) by 2030.

With 96% of organisations worried about the impact of shorter certificate lifespans, and readiness for both changes critically low, the report highlights the urgent need for cryptographic agility to secure digital infrastructure.

Shorter Certificate Lifespans Spark Widespread Concern

The impending reduction of SSL/TLS certificate validity to 47 days has alarmed 96% of surveyed organisations, who fear operational disruptions. Shorter lifespans aim to enhance security by limiting the window for attackers to exploit compromised certificates, but they demand robust automation to manage frequent renewals. Alarmingly, only 5% of organisations have fully automated CLM, leaving 95% reliant on manual processes, which heighten the risk of outages costing £4,200 to £6,800 per minute.

Furthermore, just 28% maintain a complete certificate inventory, and only 13% are highly confident in tracking all certificates, including rogue ones. “SSL/TLS certificates have been stable for decades, but that era is over,” said Tim Callan, Sectigo’s Chief Compliance Officer. “Building certificate agility now is the fastest path to PQC readiness.”

Quantum Computing Threatens Current Cryptography

The report highlights the looming challenge of quantum computing, which could render traditional encryption methods like RSA obsolete by 2030. A staggering 98% of organisations anticipate difficulties in implementing PQC, with 92% expecting barriers such as integration complexity or resource constraints. Only 14% have fully assessed their quantum-vulnerable systems, and just 15% are extremely confident in achieving a seamless PQC transition. Despite this, 90% have allocated budgets for PQC preparedness within the next 12 months, with 92% planning increased investment over the next two to three years.

The report positions the 47-day certificate transition as a critical stepping stone, with 90% of organisations recognising overlap between short-lifespan preparedness and PQC readiness.

Operational & Security Risks

The combination of shorter certificate lifespans and the PQC transition presents a dual challenge. Rik Turner, Chief Analyst at Omdia, noted, “Managing shorter certificate lifecycles is central to building the crypto agility necessary for PQC.” Yet, low readiness levels expose organisations to significant risks. Manual certificate management increases the likelihood of errors and outages, while incomplete inventories leave systems vulnerable to undetected compromises. The report warns that failure to adapt could amplify cybersecurity threats, with malware infections already affecting 4.1 million websites globally. Organisations must prioritise automation and visibility to mitigate these risks.

Sectigo recommends automated CLM to streamline certificate renewals, enhance visibility, and reduce human error. It also provides resources, including webinars on 2 September (PQC focus) and 30 September (47-day certificates focus), hosted by experts Jason Soroko and Tim Callan, to guide enterprises.

Conclusion

Sectigo's report is a wake-up call for enterprises facing transformative changes in digital trust. With 96% concerned about shorter SSL/TLS certificate lifespans and only 14% prepared for PQC, organisations must act swiftly to adopt automated, agile cryptographic systems.

As Callan emphasised, “Certificates are now front and centre in securing our digital future.” Proactive investment in CLM and PQC readiness is essential to safeguard against operational and cybersecurity risks in an evolving threat landscape.

Image: Ideogram

You Might Also Read:

Quantum Computing Nears A Turning Point:

If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.