M&T Bank Achieves Secure Agility with Certificate Lifecycle Automation

- Application Infrastructure & Middleware - Database Management & Storage
- Automation & Control
- Cybersecurity & Privacy - Database Security
- Finance & Insurance
- Cybersecurity
As a community-driven bank, M&T is focused on transforming its digital footprint and embracing agility to meet constantly evolving customer needs. However, with digital transformation comes the need for digital trust and security.
Public key infrastructure (PKI) lays the foundation for trust and authentication, and the importance of agility is no exception. M&T Bank relies on PKI and digital certificates to securely connect devices and applications across its digital footprint. But over the years, both technology and cryptography have evolved significantly, creating new challenges.
M&T initially partnered with Keyfactor in 2010 — then a PKI consulting service is known as Certified Security Solutions (CSS) — to help with the momentous task of migrating from SHA-1 to SHA-2 and re-building their entire PKI from the ground up.
M&T Bank
M&T Bank is a Fortune 500 American bank based in Buffalo, New York, with more than 155 billion in assets. Founded in 1856, M&T Bank has been a community-driven company from its roots, originally serving manufacturers and trades and now operating more than 780 branches across the eastern United States. In 2021, the bank unveiled M&T Tech Hub, a new initiative to drive collaboration and innovation with the people and businesses they serve.
One platform for certificate visibility and automation
The M&T team knew they needed a certificate management solution, and Keyfactor came to their attention because of how effortlessly they were able to re-build their PKI. When the team reached out to Keyfactor, they had just the right solution.
Certificate discovery and inventory were priority number one. The second was continuous visibility of certificates across their multiple platforms and CA solutions, not just auto-enrolled certificates from their internal PKI. Finally, the team needed a solution that would scale.
In 2014, M&T rolled out Keyfactor Command to get better visibility of their certificate inventory and set basic alerts to remind users to renew certificates at a set schedule before expiration. As the product evolved, M&T continued to roll out new capabilities, which now include network discovery, self-service enrollment, APIs, and automated workflows for certificate renewal and provisioning.
Related Case Studies.





