{"id":8287,"date":"2026-09-11T06:52:00","date_gmt":"2026-09-11T04:52:00","guid":{"rendered":"https:\/\/www.scs.ch\/uncategorized-en-us\/secure-communication-thanks-to-the-v-zug-pki\/"},"modified":"2026-09-20T07:38:55","modified_gmt":"2026-09-20T05:38:55","slug":"secure-communication-thanks-to-the-v-zug-pki","status":"publish","type":"post","link":"https:\/\/www.scs.ch\/en\/case-studies\/secure-communication-thanks-to-the-v-zug-pki\/","title":{"rendered":"Secure Communication Thanks to the V-ZUG PKI"},"content":{"rendered":"

Initial Situation<\/h2><\/div>

V-ZUG networks its household appliances to offer additional digital services. However, this creates new attack surfaces. Unauthorized parties must not be able to control devices or make manipulated software or messages appear trustworthy. V-ZUG therefore required a security infrastructure that allows devices to be clearly identified and communication partners to be verified. <\/p>\n<\/div>

\"\"<\/span><\/div><\/div><\/div>

Project Overview<\/h3><\/div>

Client<\/strong>
V-ZUG AG<\/p>\n<\/div>

<\/div><\/div>

Sector<\/strong>
Cybersecurity & Reliability<\/p>\n<\/div>

<\/div><\/div>

Solution<\/strong>
PKI for securing networked household appliances.<\/p>\n<\/div>

<\/div><\/div>

System Environment <\/strong>
Individual digital certificates per device, Root CA, integration into manufacturing and internal IT landscape, V-ZUG Home (IoT Cloud)<\/p>\n<\/div>

<\/div><\/div>

Security Standard<\/strong>
Root CA secured based on ISO\/IEC 27002<\/p>\n<\/div>

<\/div><\/div>

Operations<\/strong>
Security concept, periodic audits, disaster recovery plan<\/p>\n<\/div><\/div><\/div><\/div><\/div>

The Contribution of SCS<\/h2><\/div>

Together with V-ZUG, SCS developed a Public Key Infrastructure for identification, encryption, and digital signing. This allows devices and systems to communicate with each other trustworthily and verify the origin of messages. <\/p>\n<\/div><\/div><\/div>

<\/i><\/div>

Every Device Uniquely Identified<\/h4><\/div>
<\/div>
\n

Every IoT-capable V-ZUG device receives an individual digital certificate during manufacturing. This allows the device to clearly identify itself to the V-ZUG cloud. <\/p>\n<\/div><\/div><\/div>

<\/i><\/div>

Digitally Signed Firmware<\/h4><\/div>
<\/div>
\n

The PKI is also integrated into the internal IT landscape and is used, among other things, for signing new firmware. This allows devices to verify the authenticity of updates and reject manipulated software. <\/p>\n<\/div><\/div><\/div>

<\/i><\/div>

Securely Established Root CA<\/h4><\/div>
<\/div>
\n

The Root CA forms the basis of trust for the entire PKI. SCS set it up according to current security recommendations and based on ISO\/IEC 27002, and additionally developed a concept for its secure storage. <\/p>\n<\/div><\/div><\/div>

<\/i><\/div>

Security Throughout the Entire Operation<\/h4><\/div>
<\/div>
\n

In addition to technical protective measures, SCS developed an authorization concept and secure work processes and trained the employees involved. Systems, access rights, and processes are periodically audited. A disaster recovery plan also covers the restart after disruptions. <\/p>\n<\/div><\/div><\/div>

<\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>

Result<\/h2><\/div>

All produced IoT-capable devices from V-ZUG are equipped with an individual digital certificate and can thus connect securely to the V-ZUG cloud. The PKI is integrated into both device manufacturing and the internal IT landscape, forming a central basis of trust for device communication, firmware, and service access. It has evolved into a core component of V-ZUG’s IT landscape. Additional digital services can be built upon it. Value-added functions can be specifically activated on individual devices, such as an additional wash cycle, while service access is only enabled for authorized personnel and for a limited time. A prior Proof of Concept tested the essential aspects in advance and reduced project risks. <\/p>\n<\/div><\/div><\/div>

1 Certificate per Device<\/h3><\/div>

Individual digital identity directly from the factory.<\/p>\n<\/div><\/div><\/div>

ISO\/IEC 27002<\/h3><\/div>

Root CA secured based on the security standard.<\/p>\n<\/div><\/div><\/div>

Periodic Audits<\/h3><\/div>

Of systems, access rights, and work processes.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

Services Provided<\/h2><\/div><\/div><\/div>
<\/span><\/a><\/span>

High-Level Software<\/h3><\/div><\/div><\/div><\/div><\/div><\/div>

Information Security<\/h3><\/div><\/div><\/div><\/div><\/div><\/div>

PKI \/ Cryptography<\/h3><\/div><\/div><\/div><\/div><\/div><\/div>

Cybersecurity & Reliability<\/h3><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
\"A<\/div><\/div>

Your Contact Person<\/h2><\/div>
Dr. Stephan Keller<\/div><\/div>

Chief Executive Officer
+41 43 456 16 80<\/a><\/p>\n<\/div>

Speak with the responsible specialist<\/span>Speak with the responsible specialist<\/span><\/div><\/a><\/div>

For questions regarding Public Key Infrastructures, IoT security, and the protection of networked products throughout their entire lifecycle.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

Further Case Studies<\/h2><\/div>