Managed Services PKI

Non-Federal Shared Service Provider PKI

Various state and local agencies, as well as other government-affiliated enterprises, require a full-featured PKI for enterprise security, but also trusted interoperability with the U.S. Federal government.

Entrust Managed Services PKI fulfills this need with the Non-Federal Shared Service Provider PKI solution. Not just for governments, Entrust's PKI is cross-certified to the Federal Bridge Certification Authority (FBCA) and is appropriate for various non-Federal entities, organizations and agencies:

  • Healthcare Organizations
  • Private & State Universities
  • Law Enforcement Groups
  • Airlines
  • Public & Private Enterprises
  • U.S. Department of Defense Contractors

Are you a similar state, local or other non-Federal, government-affiliated organization that needs this capability under a common federal root of trust? With the Entrust Managed Services PKI for non-Federal organizations, you can leverage the convenience of a full, cross-certified PKI without an expensive upfront investment, in-house experts or need for secure facilities.

Why a Hosted PKI | FAQs | SSP for US Government

Request to be Contacted

Overview

For years, the Entrust Managed PKI Service has been approved to offer digital certificates to the Federal government under the Shared Service Provider program.

This same technology is available for state and local government agencies, and other non-federal organizations, that require a non-Federal Shared Service Provider PKI solution.

Cross-certified to the Federal Bridge Certification Authority (FBCA), Entrust Managed Services PKI provides non-Federal government agencies specific capabilities, including strong authentication, digital signatures, encryption, secure physical/remote access and more.

Benefits of Cross-Certification with FBCA:

  • Secure information exchange with Federal organizations and other members of the Non-Federal SSP environment
  • Trust certificates and digital signatures from all certificated agencies
  • Authenticate online identities and information
  • Build trust with various assurance levels

Features

Non-Federal agencies can quickly secure applications with digital certificates without requiring internal PKI expertise or investment in secure physical facilities. Focus your efforts on maximizing efficiency and offering more products and services securely.

  • Cross-certification with the Federal Bridge Certification Authority (FBCA)
  • Cross-certified at multiple assurance levels: test, rudimentary, basic, medium, medium-hardware
  • Complete range of digital certificates types for:
    • Authentication
    • Encryption
    • Digital signatures
    • Physical and/or logical access
  • Clone of the Entrust Federal Shared Service Provider (SSP) PKI; Entrust has issued digital identification (certificates) for more than 300,000 federal employees
  • Ability to issue First Responder Authentication Credentials (FRAC), which comply with U.S. Department of Homeland Security mandates for credentials meeting U.S. Federal PIV standards
  • Proven success in the HSPD-12 and GSA e-authentication programs
  • Key Management Service that securely archives encryption private keys for recovery in the event of loss
  • Easily migrate from a stand-alone, customer-branded CA to the same in the non-Federal SSP environment

Why Entrust?

Entrust Managed Services PKI provides a myriad of capabilities to help meet the security challenges of state and local government agencies, contractors and organizations.

Trusted Security for Less. Entrust Managed Services PKI helps reduce the burden on your security budget by eliminating the need for expensive facilities, upfront investments and expert security staff. Predictable costs allow the solution to grow with you — only pay for what you need.

Government-Strength. Entrust's Federal Shared Service Provider (SSP) PKI solution has been proven by countless federal organizations (e.g., HSPD-12) in real-word environments. This same platform can be used by Entrust's Non-Federal Shared Service Provider customers to cross-certify with the FBCA.

Versatile Enrollment. Numerous approaches to enroll community members in a secure, cost-effective manner, including auto-enrollment, batch-loading, self-service, face-to-face enrollment and more.

The Ready-To-Go CA. We provide a highly available CA with intelligent monitoring and near real-time replication between primary and standby disaster recovery facilities to minimize downtime and data loss.

For the Unexpected. The service offers robust data backup, restore capabilities and comprehensive off-site data archiving to minimize data loss and maximize ability to access prior data.

More Value. More Service. Entrust's certificate and security management services provide a number of value-added options.

  • Auditor-witnessed key generation/storage/recovery including storage of CA keys in Hardware Security Module (HSM)
  • Certificate and certificate revocation list generation and distribution
  • Backup and archive, maintenance, software patches, performance fine-tuning
  • CA auditing
  • Issuance and management of certificates to smart cards/tokens when using a card management system and/or client-side software
  • Issuance of certificates capable of being updated automatically to prevent business interruption due to expired certificates
  • Automated identity lifecycle management, robust path development and discovery

Related Products



Featured Resources

White Papers

Data Sheets

Entrust Public Key Infrastructure (PKI)

Public key infrastructure or PKI refers to a system that provides certificate management for digital certificates. Digital certificates contain public key pairs that can be used for encryption, digital signature and authentication security. Entrust PKI security solutions help government agencies and corporations to secure their digital identities and information.

Specialized "passport PKI" is used by governments to verify and secure data stored on a chip imbedded in passports issued to citizens. Epassport PKI involves the use of PKI by governments to secure data stored on a chip imbedded in a passport. The government acts as a certification authority that issues the digital certificates used in an ePassport system.

Entrust is a trusted provider of network security solutions that include digital certificates, managed PKI certificates, two factor-authentication, ssl certificates, token authentication, smart card PKI and encryption software.