Modern defence systems depend on connected sensors, edge devices and cyber-physical components operating across heterogeneous and often segmented environments. This talk shows how X.509-based device identities, local PKI and automated certificate lifecycle management can enable secure onboarding, authentication, renewal and revocation while supporting Zero Trust and resilient operation without permanent central connectivity.