Repeatable topology
Named ports, labeled media, and a single approved path for signed artifacts—documented so a new operator is not inventing paths under pressure.
CloudEndpoint Hub
Practical training for air-gapped benches, HSM-adjacent workflows, and ceremony checklists used by endpoint and PKI teams across Korea and beyond.
Short notes from teams who stopped improvising cable layouts and started treating the bench as a controlled asset.
“We cut our ceremony prep from a frantic afternoon to a 40-minute checklist. The dual-operator walkthrough was the piece we had been missing.” Min-seo Park · PKI lead, Busan logistics firm
“Clear about what stays offline and what can live on the staging laptop. No theater, just sequence.” Client in semiconductor tooling
★★★★☆ Solid modules on media wipe verification. Wish we had booked the lab cohort earlier. Jordan · Seoul
Flagship program
A guided build of an offline signing station: hardware baseline, OS hardening for disconnected use, key material handling, witness roles, and evidence packs your auditors can follow.
Includes printable runbooks and a failure-mode lab where you practice recovering from a corrupted transfer media event without opening the air gap.
Offline signing fails when creativity creeps into the cable tray. We teach habits that survive staff turnover.
Named ports, labeled media, and a single approved path for signed artifacts—documented so a new operator is not inventing paths under pressure.
Witness sheets, hash manifests, and camera angles that prove the air gap stayed intact without filming secrets themselves.
We call out when a USB-based workflow is the wrong tool, and when you need an HSM or vendor-managed service instead.
Next step
The CloudEndpoint Hub companion is listed on the Microsoft Store home experience. Use it alongside our courses—never as a substitute for your internal change control.