In this talk, I want to share my experience building cloud based software to manage IoT devices at scale using PKI. I'll break the topic down into 3 parts:

1. Creation of certificates using PKI
2. Distribution of certificates using SCEP
3. Rotation and revocation of certificates using CRLs and OCSP

I'll talk about these topics from the lens of challenges faced at scale