Managed Offline Root Certificate Authority
Our hosted, high-assurance root certificate authority is managed to best practices, while you maintain full control of your private keys.
Best practices, under your control
Entrust Managed Root CA service is a customer specific PKI root certificate authority (CA) designed and built to exacting standards and hosted under a tScheme-approved audit regime as a standalone offline service. Our root CAs are designed to be the ultimate point of trust in any customer’s PKI.
Benefits
Long-Term Solution
Get the benefits of a bespoke root CA service for the lifetime of your PKI, without the need for a specialized environment or additional complexity.
No PKI Expertise Required
Our PKI experts manage your offline Root CA to best practices, eliminating the cost and effort of finding, hiring, and managing crypto experts.
Highly Controlled
Audited policies and procedures and security cleared operators deliver reliability and assurance, ensuring your root CA is always highly controlled.
Cost Certainty
With our simple fixed setup and annual cost model, you won’t be caught off guard by unexpected costs or services.
Features
Management and Reporting
Use reporting and inventory tools and complete lifecycle management for certificates.
FIPs-compliant
Root CA cryptographic keys held in FIPs140-2 Level 3 HSM
Annual audit
Our annual assurance process includes validating keys/policy with our customer.
eIDAS-compliant
Compliance with eIDAS and certified through ETSI and tScheme standards.
Learn more about Entrust's Managed PKI services
Our experts will contact you to discuss how our solutions can meet your needs.