HID Agrees to Sell PKI Business to Vista Equity Partners

IdenTrust moved to a 200-day maximum for public TLS certificates in March 2026, bringing more frequent renewal into its customers' operating lives. That work was already under way when a proposed change of owner arrived. The certificate business inside HID is being sold as the industry asks the people running it to keep trust current on a tighter schedule.

On October 16, HID announced an agreement to sell its Public Key Infrastructure business unit to Vista Equity Partners. The transaction covers IdenTrust, HydrantID, credential management and ZeroSSL. Closing is expected in Q4 2026, subject to customary conditions, regulatory approvals and employee consultation. The deal brings a software investor into services whose commercial usefulness depends on continuing to work between purchasing decisions.

What Vista Has Agreed to Buy

The target is a business unit of HID, the Austin, Texas-based identity company within ASSA ABLOY. The proposed sale covers public and private certificate issuance and management, self-service SSL certificates, and on-premise credential and smart-card lifecycle management. Those activities connect different customer needs, from securing a website to managing credentials used inside an organization. Their shared subject is the identity behind a connection and the work required to keep that identity usable.

ASSA ABLOY reports that the divested business generated approximately $58M in 2025 sales, with a strong operating margin. The parent did not supply a margin percentage or a purchase price. The $58M describes the scale of the operation being sold; it cannot support a valuation or an acquisition multiple. The public announcement also leaves the consideration structure and exact acquiring vehicle undisclosed.

The portfolio has an acquisition history of its own. In January 2024, HID bought ZeroSSL, an Austria-based certificate provider with automated certificate commerce and lifecycle integrations. The proposed Vista transaction would move that capability with the wider PKI operation. For the buyer, part of the work is understanding how those products and the people supporting them have become useful together.

The People and Investment Behind the Transition

Björn Lidefelt, EVP and Head of HID, presents Vista's expertise as a reason the business can develop under a different owner. Lidefelt has held the HID leadership role since 2020, according to his official biography. His position matters to the scope of the announcement: HID is choosing a new owner for this unit while continuing as a broader identity business. The sale announcement does not describe an acquisition of HID itself.

On the buyer's side, Patrick Severson, Senior Managing Director and Co-Head of Vista's Foundation Fund, identifies people, products, and customer and partner relationships as areas for investment. His Vista biography places him in the firm's software investment practice, which he joined in 2013. Those stated priorities fit a business where an installed customer relationship carries continuing technical and service responsibilities.

Vista was founded in 2000 and specializes in enterprise software investing. Its published firm data identifies operating capabilities spanning product and technology, talent, business operations, finance and go-to-market work. That gives the proposed owner relevant disciplines to bring to the PKI operation. The announcement leaves the specific product roadmap and investment budget open, so the useful question is how that expertise reaches the services customers already depend on.

Why Public Certificate Timing Changes the Work

The CA/Browser Forum's approved validity changes reduce the maximum lifetime of public TLS certificates in stages. The schedule moves from 200 days in March 2026 to 100 days in March 2027 and 47 days in March 2029. These requirements concern publicly trusted TLS server certificates. Applying the same timetable to every private PKI certificate or smart card would misdescribe both the standard and the portfolio Vista has agreed to buy.

IdenTrust's own implementation notice makes the operating consequence concrete. The issuer began its 200-day maximum on March 10, 2026, ahead of the industry's March 15 transition date. It tells customers using manual issuance to expect more frequent renewals and encourages users of automated integrations to assess the changes. The notice also points to certificate lifecycle management and ACME automation as ways to reduce manual work.

A shorter certificate lifetime increases how often issuance and deployment must succeed. For an enterprise operator, the certificate is one component in a sequence involving validation, replacement and the systems accepting it. Automation can take repeated steps out of that sequence, but the customer still needs the service and its integrations to behave predictably. This is the operating context surrounding the sale; the parties have not identified the Forum's timetable as their reason for doing the transaction.

Keeping the Customer Relationship Working

HID's transaction announcement says customers and partners can expect the same products, service and commitments during the transition. That is a consequential promise for infrastructure bought to support other work. Customers can ask how existing integrations, support arrangements and product responsibilities will be maintained through closing, using the announced continuity commitment as the starting point for the conversation.

The investment story sits alongside a wider interest in enterprise identity. DevCuration's coverage of Carrick's Saviynt continuation vehicle examines capital staying with an identity-governance business as its responsibilities expand. HID's PKI transaction addresses a different layer: the issuance and management of certificates and credentials. For enterprise buyers, the connection is practical. Someone has to remain responsible for the infrastructure that makes a trusted interaction possible.

Vista would take on a portfolio with existing products, staff knowledge and customer relationships while a meaningful part of its market moves toward faster renewal. The ownership transition and the certificate timetable will proceed through different milestones. As the proposed sale moves toward its expected Q4 close, the teams behind IdenTrust, HydrantID and ZeroSSL will continue issuing, validating and supporting the credentials their customers need to keep using.