GRIDAUTH® BY OMNITRUST · GRID & UTILITY DEVICE TRUST

Your grid.
Your devices.
Your trust.

Take greater control of device identity across your connected utility infrastructure. GridAuth helps utilities establish a path toward independent, multi-vendor trust management while simplifying certificate provisioning for the manufacturers that build their devices.

AMI & Smart MeteringWi-SUN FANMulti-Vendor Device TrustPowered by OmniTrust PKI
DEVICE TRUST OVERVIEW
AMI Smart Meter · MTR-3000BManufacturer identity
Verified
Wi-SUN FANNetwork authentication
Current
GEISA / LwM2MDevice management identity
Current
DLMS/COSEMMeter communications credential
Renewal Due
One device. Multiple credentials. Utility-defined trust policies.
THE UTILITY TRUST CHALLENGE

You own the grid. You should control what it trusts.

Utilities deploy millions of connected devices from different manufacturers. Those devices can remain in service for decades, long after their original certificates, suppliers and security assumptions have changed. Yet identity management is often fragmented across manufacturer-specific systems.

Multi-vendor fleets

Smart meters, routers, gateways and field equipment arrive with different identities and certificate requirements. Utilities need a consistent trust model across suppliers.

Manufacturer dependence

Factory-issued identities are important, but long-term operational trust should not depend entirely on the manufacturer that originally supplied a device.

Decades of responsibility

Devices outlast individual certificates, cryptographic algorithms and procurement cycles. Trust must remain manageable throughout the infrastructure lifecycle.

PRIMARY SOLUTION · UTILITIES & ENERGY COMPANIES

Take control of your device trust architecture.

GridAuth's strategic direction is to help utilities define which devices they trust, recognize manufacturer identities, and establish operational identities under utility-defined policies, independent of individual equipment suppliers.

✓Multi-vendor independence. Establish consistent trust practices across connected equipment from different manufacturers.
✓Utility-controlled identities. Plan for operational device credentials issued under utility-controlled trust authorities.
✓Credential visibility. Work toward a device-centric view of multiple certificates and their lifecycle status.
✓Long-term resilience. Prepare for device replacement, supplier changes and evolving cryptographic requirements.
Discuss Utility Requirements →
WHAT UTILITY CONTROL MEANS

Your policies. Your trust boundaries.

Decide which devices are accepted

Recognize approved manufacturers and device identity sources.

Establish operational trust

Use utility-defined identities and trust policies where required.

Manage credentials over time

Track trust across device generations and changing requirements.

Maintain operational independence

Reduce reliance on proprietary, manufacturer-specific identity stacks.

Advanced utility trust workflows are part of the evolving GridAuth product direction.

THE LONG-TERM TRUST MODEL

The manufacturer builds the device. The utility controls its operational trust.

Factory-issued identities establish a starting point. GridAuth lets utilities validate those identities and establish independent operational trust across mixed fleets of connected equipment.

✓Manufacturer-issued identity for initial device enrollment
✓Utility-defined verification and authorization policies
✓Operational identities under utility-controlled trust infrastructure
✓Ongoing certificate and cryptographic lifecycle governance
MANUFACTURER → UTILITY TRUST JOURNEY
01 · MANUFACTURERDevice + Factory Identity

Initial identity established during manufacturing

↓
02 · GRIDAUTHVerify + Authorize

Device identity validation and utility trust policies

↓
03 · UTILITYOperational Identity + Control

Utility-defined credentials, trust domains and lifecycle policies

SECONDARY SOLUTION · METER & DEVICE MANUFACTURERS

Make trusted provisioning part of the production process.

GridAuth simplifies the work of establishing device identities before equipment reaches the utility. From product definition and test credentials to repeatable manufacturing workflows, it translates PKI operations into practical device management.

Define product models

Associate hardware families with identity requirements and trust resources.

Provision device certificates

Connect physical devices and serial information to certificate signing requests and issuance.

Automate manufacturing

Integrate provisioning into production systems using API-driven workflows.

Join Manufacturer Early Access →
HOW GRIDAUTH WORKS TODAY

Device-centric provisioning, backed by operational PKI.

GridAuth organizes certificate provisioning around products and physical devices, rather than requiring users to manage every step through traditional CA administration tools.

01 / DEFINE

Create product models

Establish product families and their identity requirements.

02 / PROVISION

Identify the device

Associate a physical device and its certificate request with the correct product.

03 / ISSUE

Establish identity

Issue standards-based credentials through OmniTrust PKI infrastructure.

04 / TRACK

Maintain traceability

Keep searchable device and credential issuance records.

GRIDAUTH DEVICE MANAGER

The device is the center of the workflow.

Product models, device inventory, identity requests, issuance records, authorized users and API-based integration are organized into one practical management experience.

GRIDAUTH · DEVICE MANAGER
Product Models ›
Issue Identity ›
Devices & Inventory ›
Organizations & API Tokens ›
THE NEXT EVOLUTION OF DEVICE TRUST

One meter. More than one certificate.

A smart meter may use different credentials for network authentication, device management, metering communications and operational identity. The utility needs to understand how those credentials relate to the same physical device.

AMI Smart Meter · MTR-3000BIllustrative credential portfolio
4 credentials
CredentialPurposeTrust DomainStatus
Wi-SUN FANNetwork authenticationWi-SUN networkCurrent
GEISA / LwM2MDevice managementUtility operationsCurrent
DLMS/COSEMMeter communicationsMeteringRenewal Due
Utility LDevIDOperational identityUtility-controlledCurrent
CONNECTED GRID INFRASTRUCTURE

Trust extends beyond the smart meter.

AMI meters represent the tip of the iceburg. The same identity and trust challenges extend across the wider utility device ecosystem.

AMI Smart Meters

Electric, gas and water metering equipment and connected AMI deployments.

Field Devices

Reclosers, fault indicators, capacitor banks and distribution equipment.

Routers & Gateways

Communications infrastructure connecting field devices and utility networks.

Grid Edge Equipment

Connected and distributed infrastructure participating in the modern grid.

Utility Systems

Backend systems and operational environments that depend on trusted devices.

Manufacturing Systems

Production lines and provisioning workflows establishing initial device identity.

DEPLOYMENT FLEXIBILITY

Trust infrastructure that fits your operating model.

Utilities and manufacturers have different security, infrastructure and operational requirements. GridAuth's deployment direction builds on the flexibility of OmniTrust PKI.

MANAGED ENVIRONMENT

Managed SaaS

Managed infrastructure for organizations seeking simplified operations and faster onboarding.

DEDICATED ENVIRONMENT

Single-Tenant Hosting

Dedicated hosting for organizations with stronger environment separation requirements.

UTILITY-CONTROLLED

Private Cloud / On-Prem

Customer-controlled infrastructure for utilities requiring greater operational and cryptographic control.

POWERED BY OMNITRUST PKI

Simple device workflows. Serious trust infrastructure.

GridAuth provides the device-facing registration and management experience. OmniTrust OTPKI supplies the underlying operational trust infrastructure for certificate issuance and cryptographic lifecycle operations.

GridAuth Device Management

Product models, devices, provisioning workflows, inventory and issuance history.

Operational PKI

CA hierarchies, certificate issuance, validation, revocation, key management and HSM integration.

Standards & Automation

OTPKI supports ACME, EST, SCEP, CMP, REST and gRPC. GridAuth-specific protocol exposure depends on the implemented workflow.

OmniTrust's broader cryptographic capabilities also provide a foundation for crypto agility and future post-quantum transition planning across long-lived utility infrastructure.

EARLY ACCESS · GRIDAUTH

Take the next step toward utility-controlled trust.

We're engaging with utilities, device manufacturers and ecosystem partners to shape the next phase of GridAuth. Tell us about your device fleets, certificate requirements and operational priorities.

Register Your Interest →
JOIN THE GRIDAUTH EARLY-ACCESS LIST

Tell us what your grid needs.

Register for updates on GridAuth availability and help us prioritize the utility trust, certificate provisioning and deployment capabilities that matter to your organization.