illustration of man sitting on suitcases

Best practices, under your control

Entrust Managed Root CA service is a customer specific PKI root certificate authority (CA) designed and built to exacting standards and hosted under a tScheme-approved audit regime as a standalone offline service. Our root CAs are designed to be the ultimate point of trust in any customer’s PKI.

Benefits

Icon

Long-Term Solution

Get the benefits of a bespoke root CA service for the lifetime of your PKI, without the need for a specialized environment or additional complexity.

Icon

No PKI Expertise Required

Our PKI experts manage your offline Root CA to best practices, eliminating the cost and effort of finding, hiring, and managing crypto experts.

Icon

Highly Controlled

Audited policies and procedures and security cleared operators deliver reliability and assurance, ensuring your root CA is always highly controlled.

Icon

Cost Certainty

With our simple fixed setup and annual cost model, you won’t be caught off guard by unexpected costs or services.

Features

clipboard list

Management and Reporting

Use reporting and inventory tools and complete lifecycle management for certificates.

FIPs-compliant

Root CA cryptographic keys held in FIPs140-2 Level 3 HSM.

clipboard list

Annual audit

Our annual assurance process includes validating keys/policy with our customer.

eIDAS-Compliant

Compliance with eIDAS and certified through ETSI and tScheme standards.

Connect with an Expert

Our experts will contact you to discuss how our solutions can meet your needs.