GlobalSign Edge Enroll is a cloud-based Registration Authority (RA) service designed for IoT device certificate enrollment and lifecycle management using PKI (Public Key Infrastructure). The service supports the full IoT device lifecycle across five stages: - **Plan:** Define certificate types, templates, and policy rules prior to device manufacturing. - **Manufacture:** Inject trusted digital identities at the OEM, EMS, or chip level, supporting both Greenfield and pre-provisioned Brownfield devices. - **Deploy:** Devices self-register on first boot without manual steps or key distribution. - **Manage:** Rotate, revoke, or renew certificates with full audit traceability and device identity health monitoring. - **Sunset:** Zeroize, revoke, or transfer device ownership at end-of-life. Edge Enroll operates as a cloud-native RA-as-a-Service with no on-premises setup required. It provides pre-configured workflows and certificate templates for onboarding. The service enforces strict policy controls, encrypted communications, and secure device identity storage. Integration is supported via RESTful APIs and plugin support, enabling connection into CI/CD pipelines and provisioning lines. The solution is designed to scale to millions of devices with low operational overhead. It includes built-in compliance support for global IoT security and privacy standards to assist with regulatory audits.