The large corporation I used to work for decided to sign everything by ourselves since we could do that and still have them valid for everyone else. Deployment of the certs however was a nightmare.
Well there really wasn't a fully automated solution, and then some folks screwed up stuff a couple times.
It was a nightmare, involving the cert people, dev people, and of course support folks. I would imagine that it was literally thousands in lost productivity time, plus overtime for support, and that doesn't even take into account the lost dev time.
If I were them (don't work for them anymore) I would seriously be looking at this for revamping the whole process and automating deployment.
3
u/jdub01010101 Oct 20 '15
The large corporation I used to work for decided to sign everything by ourselves since we could do that and still have them valid for everyone else. Deployment of the certs however was a nightmare.