Zurich-based innovation leader Miromico has become the first OEM to adopt the Gapfruit Birth Certificate Provisioning Service in full-scale production. With this step, Miromico ensures that every device leaves the factory equipped with a tamper-resistant, hardware-rooted identity certificate, providing cryptographic proof of origin and forming a secure foundation for long-term device trust.
For Miromico, the decision was more than a technological upgrade; it was a strategic investment in regulatory readiness, product safety, and operational risk reduction.
Why Miromico Chose Gapfruit: CRA Readiness and Liability Protection
As device security regulations tighten across Europe, particularly with the Cyber Resilience Act (CRA) and NIS2, manufacturers face increasing pressure to demonstrate provable device authenticity and secure lifecycle management. Hardware-rooted identities are becoming a mandatory baseline for entering safety- and security-critical markets.
Miromico recognized that implementing a fully secure birth certificate mechanism in-house would require:
- Deep cryptographic and Trusted Computing expertise
- Significant engineering capacity to design a robust provisioning process
- Substantial investment in secure infrastructure, including PKI, HSMs, trust anchors, secure storage, and audit systems
- Long-term maintenance and compliance management
After an in-depth evaluation, Miromico concluded that replicating such a system internally would be highly complex, costly, and inefficient, and would divert focus away from their core business.
By choosing Gapfruit’s standardized and TCG-aligned provisioning service, Miromico accelerates its path to CRA compliance while ensuring a legally defensible device identity, reducing the risk of:
- Product liability claims
- Counterfeit or tampered devices entering the market
- Multi-million-euro product recalls caused by unverifiable device integrity
Gapfruit’s approach also eliminates weak trust anchors such as serial numbers or MAC addresses, which are easily cloned and widely abused in attacks.
A Production-Ready System Without Infrastructure Burden
Another decisive factor: Gapfruit’s Birth Certificate Service integrates directly into existing manufacturing equipment and workflows, requiring no changes to production lines and adding only a few seconds to provisioning.
What would have required Miromico months or years of development, including secure bootstrapping, identity lifecycle tooling, and PKI operations, is now available as a turnkey, industry-aligned solution supported by DigiCert’s global trust infrastructure.
This ensures that Miromico’s devices can be authenticated throughout their entire lifecycle and seamlessly onboarded into modern cloud environments, such as Azure IoT Hub or AWS IoT Core, where certificate-based authentication is already the standard.
.webp)
