PQC Migration for Cloud Platforms and SaaS
Cloud providers have to migrate their own infrastructure and help their customers migrate at the same time. Under the shared responsibility model, providers and customers have to agree on who migrates what. TLS termination at cloud scale involves different engineering challenges than enterprise TLS migration. KMS and HSM fleet upgrades affect every customer at once.
This course covers PQC migration for cloud platforms, SaaS providers, and managed service providers.
Course Outline
Module 1 Shared Responsibility in PQC Migration
What the provider must migrate versus what the customer must migrate. How to communicate PQC migration responsibilities to customers. Customer-managed key considerations. API and SDK PQC support timelines.
Module 2 TLS at Cloud Scale
TLS termination for millions of connections: performance implications of PQC algorithms at scale. Load balancer and CDN considerations. Certificate management at scale. Hybrid deployment during transition.
Module 3 KMS and HSM Fleet Migration
Migrating a key management service that every customer depends on. HSM firmware upgrade coordination. Customer-managed key transitions. Key wrapping and re-encryption at scale.
Module 4 Compliance and Market Requirements
FedRAMP PQC requirements. SOC 2 implications. Customer audit expectations. Building PQC readiness as a competitive differentiator.
Prerequisites
None. Sector experience is helpful but not required. For a broader PQC foundation, consider starting with Post-Quantum Foundation.
Certificate of Completion
Upon completion, you receive a Quantum Academy certificate of completion. It is separate from our professional certifications and states your CPE credits, one for each 60 minutes of teaching. CISSP, CCSP and CISM holders can claim them with their certifying body. The credits also count toward renewing a Quantum Academy certification. Our CPE credits page explains how to claim them.
Who this course is for
Platform security architects, key management service owners, TLS and edge infrastructure leads, and compliance staff who own FedRAMP or equivalent obligations. Product managers should attend too. Customer-facing post-quantum capability will become a commitment on their roadmap.
If you use cloud services but do not provide them, take the overview course for your own industry.
What you’ll be able to do afterward
- Divide post-quantum responsibilities between provider and customer in a shared responsibility model, and defend the split
- Plan hybrid key exchange rollout across TLS termination at platform scale
- Sequence key management service migration without breaking customer key hierarchies
- Answer customer post-quantum readiness questionnaires with specific, accurate answers
- Turn customer-facing post-quantum capability into a product roadmap
What you leave with
When you finish, we email you the course handbook, a PDF of every slide with notes that explain it in full. We also include a PDF copy of Quantum Ready. The handbook is yours to keep.
Enrollment includes 180 days of access to the online on-demand course. Where that course is not yet published, the 180 days start on the day it is.
Where this course fits
Nothing is required. Post-Quantum Foundation covers the algorithm vocabulary if you want it first. The Quantum-Safe Cloud Service Providers Intensive is the full-day, hands-on workshop. Hybrid Cryptographic Implementations covers the TLS engineering.
Why we teach this
The course is built on the Applied Quantum PQC Migration Framework. Its author, Marin Ivezic, is one of the practitioners who teach here. The framework is published openly under Creative Commons at pqcframework.org. The people who teach this course run migration programs inside organizations today. The course covers the problems they meet in that work.
About this program
Quantum Academy credentials are private professional credentials issued by Quantum Academy, a trade name of Post-Quantum Institute. They are not government-issued licenses, accredited degrees, or academic credit, and earning one does not guarantee employment, promotion, regulatory approval, or any other specific outcome.
Quantum Academy programs are educational and informational only, and are not legal, compliance, or engineering advice.