- Home
- Code Signing Software
- LAAVAT PKI and Signing Platform
On the recordRead 1 Oct 202615 facts
LAAVAT PKI and Signing Platform
Tampere, Finland
Plans and prices
Custom quote
Priced on request
Pricing on request · 14-day evaluation · no free plan
Read 1 Oct 2026 · itechguides.com
On the record
- Compliance
- LAAVAT’s information security management system is certified to ISO/IEC 27001:2022, certificate 244147.docs.laavat.io · read 1 Oct 2026
- CRA scope limit
- LAAVAT states that using the platform alone does not make a product CRA compliant because compliance also covers the whole product and process.docs.laavat.io · read 1 Oct 2026
- Deployment models
- Customers can use a shared HSM, a dedicated LAAVAT-managed HSM, a customer-managed HSM in their AWS account, or on-premises deployment.docs.laavat.io · read 1 Oct 2026
- Device security
- LAAVAT provides secure boot, signed firmware updates and tamper-resistant per-device certificates for mutual TLS, attestation and factory onboarding.laavat.io · read 1 Oct 2026
- Encryption
- It supports AES-GCM-256 image encryption, manufacturing key delivery, key escrow and key export.laavat.io · read 1 Oct 2026
- Governance
- The platform offers RBAC, group-based signing policies, quorum approvals and immutable exportable audit trails.laavat.io · read 1 Oct 2026
- Integrations
- Integrations include REST, EST, Microsoft Entra ID, Google SSO, Yocto, CI/CD clients and provisioning-station clients.laavat.io · read 1 Oct 2026
- Key protection
- Signing keys are generated inside AWS CloudHSM and never exist in plaintext outside the HSM.docs.laavat.io · read 1 Oct 2026
- Managed service
- It runs customers’ PKI, signs firmware and issues device identities as a managed service.laavat.io · read 1 Oct 2026
- PKI capabilities
- The platform provides CA hierarchies, certificate lifecycle management, EST and REST enrollment, and CRL lifecycle functions.laavat.io · read 1 Oct 2026
- Product purpose
- LAAVAT is a cloud PKI and code-signing platform for embedded and IoT device manufacturers.docs.laavat.io · read 1 Oct 2026
- Signing formats
- Supported signing targets include NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT and detached signatures.laavat.io · read 1 Oct 2026
- Support
- The documentation directs users to contact [email protected] for unanswered questions.docs.laavat.io · read 1 Oct 2026
- Target users
- The platform is aimed at engineering, security, product and manufacturing teams building connected devices and managing firmware signing across pipelines and production lines.laavat.io · read 1 Oct 2026
