1.0 Introduction

This article describes the Post-Quantum Cryptography (PQC) Central concepts and supported features in {{glossary.Key Insight}}.

2.0 Overview

PQC Central is a section within Fortanix Key Insight that is designed to deliver insights into an organization’s cryptographic key posture and quantum-related vulnerabilities. It offers a centralized dashboard with a dynamic sunburst chart, enabling users to drill down from a high-level overview to granular details of individual cryptographic keys and services across diverse environments.

PQC Central enhances post-quantum readiness by:

Consolidating cryptographic data across cloud, on-premises, external HSM/KMS infrastructures, and vendor applications from various connections scanned in Fortanix Key Insight.
Mapping key, certificate, and service or resource vulnerabilities, where applicable.
Providing an intuitive interface for drill-down analysis.
Supporting compliance with emerging quantum security standards.

3.0 Concepts

The following table summarizes the PQC Central concepts used in Fortanix Key Insight:

CONCEPT	DESCRIPTION
PQC Central	A centralized dashboard in Fortanix Key Insight that aggregates and displays PQC readiness information across all onboarded connections, including Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP), Fortanix DSM, and Vendor Applications (such as CyberArk).
Quantum Readiness	A status indicating whether a cryptographic object or environment is secure against future quantum computing threats. Fortanix Key Insight assesses the quantum readiness of scanned keys, services or resources, and certificate assets.
PQC Algorithm	A cryptographic algorithm designed to be secure against attacks by quantum computers. Fortanix Key Insight displays PQC algorithms in key and certificate metadata, used to identify PQC Safe assets during analysis.
PQC Ready	PQC-ready assets such as keys, services, or resources, and certificates are flagged as secure from quantum threats and are considered compliant with a post-quantum secure posture. Fortanix Key Insight identifies compliant and future-proof cryptographic assets and labels them as PQC ready in the PQC Central dashboard.
PQC Vulnerable	PQC-vulnerable assets, such as keys, services or resources, and certificates, which pose a future security risk, are considered non-compliant with a post-quantum secure posture. Fortanix Key Insight detects these non-compliant and high-risk cryptographic assets and labels them as PQC vulnerable in the PQC Central dashboard.
PQC Inventory	A consolidated view of all cryptographic objects across environments with their quantum readiness classification. Fortanix Key Insight displays the central data table in PQC Central that lists all scanned keys, certificates, and resources along with their PQC status and metadata.
Sunburst Chart	A sunburst chart is a type of circular chart that shows hierarchical data using concentric circles. It is great for visualizing how parts of a whole are nested within each other. Think of it like a multi-level pie chart. Characteristics of a Sunburst Chart: Hierarchical Structure: Data is organized in levels, with the root node at the center and deeper levels extending outward in rings. Radial Layout: Unlike a traditional tree diagram, a sunburst uses a circular layout, making it space-efficient and visually appealing for complex hierarchies. Segment Size Representation: Each segment’s size (angle and arc length) typically represents a quantitative value, such as count, size, or proportion. Color Coding: Different colors are often used to distinguish between categories or indicate specific values. In Fortanix Key Insight, color represents the PQC safe while, represents the PQC vulnerable status. Interactive Exploration (in digital formats): Sunburst charts allow users to hover, click, or zoom into segments to explore deeper levels of the hierarchy. Parent-Child Relationships: Each ring represents a level in the hierarchy, and each segment in an outer ring is nested under a segment in the inner ring (its parent).

4.0 Key Features

The following are the key features and functionalities of Fortanix Key Insight PQC Central:

Integrated Data Sources: The PQC Central dashboard retrieves cryptographic data from a wide range of environments and displays it according to the selected region (European Union or North America) to ensure complete visibility.
- Cloud Providers: AWS Key Management Service (KMS), Azure Key Vault, and GCP.
- On-Premises Systems: Databases, file systems, and other internal resources
- External KMS/HSM Solutions: Fortanix Data Security Manager (DSM), HashiCorp Vault, and so on.
- Vendor Applications: CyberArk
Visual Cryptographic Risk Analysis: A sunburst chart structure is used to visually represent cryptographic risk.
- Top Level: Overall cryptographic health and organizational posture.
- Middle Level: Cryptographic usage breakdown by environment (cloud, on-premises, external key source).
- Bottom Level: Quantum vulnerability of individual keys or services.
Risk Posture Calculation and Alerts
- Quantum Readiness Score: A calculated metric that reflects the percentage of keys resistant to quantum attacks.
- Alerting Mechanism: Highlights high-risk assets requiring remediation
Reporting and Compliance: Supports NIST tracking and standards at the Fortanix Key Insight level.

PQC Central will empower enterprises with a clear, actionable view of their cryptographic security posture, helping them prepare for the post-quantum era while maintaining compliance and reducing risk. The Sunburst chart visualization will provide an intuitive, drill-down approach to understanding vulnerabilities, ensuring organizations can act on risks efficiently.

5.0 Next Steps

For detailed information on the Fortanix Key Insight PQC Central user interface (UI) and its features, refer to User Interface Components - PQC Central.

Can Fortanix protect against quantum computing?