Currently i am using TLS protocol for a secure communication between my server and client. I use PKI for key/certificate Management. If i want to switch to IPsec for secure communication, how will the PKI be affected or what changes should i do?

  • That is going to depend entirely on your implementation
    – schroeder
    Commented Feb 19, 2020 at 14:01
  • One of the changes is that each IPSEC peer has to have a certificate. Commented Feb 19, 2020 at 14:46

1 Answer 1


TLS is authentication at the application level while IPSec is essentially authentication of a device. In TLS it is common that the client only authenticates the server while in IPSec both peers authenticate each other (i.e. mutual authentication). This means your PKI must now reflects devices and not applications and it needs to reflect both sides of a communication. How this affects your specific existing PKI is unknown.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .