Entrust Signature Activation Module
Establish greater confidence in every digital signature by securely authorizing signing actions. Entrust electronic and digital signature solutions support identity-based trust and compliant signing workflows.
Entrust Signature Activation Module (SAM) is a qualified signature activation solution that helps organizations securely authorize and activate digital signatures while maintaining control over signing credentials and signature creation processes.
This module follows the remote signing standards defined by CEN and ETSI as part of eIDAS regulations. When combined with CC EAL 4+ and FIPS 140-3 certified hardware security modules (HSMs), organizations can build high-assurance, compliant digital trust strategies.
Strengthen signer authentication and authorization
Support qualified digital signature workflows
Secure high-value digital transactions
Entrust SAM achieves QSCD and CC EAL4+ certifications
The Entrust Signature Activation Module has successfully achieved two major certifications, reinforcing its compliance with the highest security standards:
- Common Criteria EAL4+ for the Entrust SAM 1.1.1, augmented with ALC_FLR.2 and AVA_VAN.5. View it here.
- Qualified Signature Creation Device (QSCD) from A-SIT for the Entrust SAM 1.1.2 together with the Entrust nShield 5 and nShield XC HSM models. View it here.
Product Highlights:
Strengthen Signer Authentication and Authorization
Establish greater confidence in every digital signature by securely authorizing signing actions. Entrust Signature Activation Module (SAM) helps organizations verify signer intent and maintain control over signature activation processes for high-assurance digital transactions.
Support Qualified Digital Signature Workflows
Enable qualified remote signing workflows that align with eIDAS remote signing standards defined by CEN and ETSI. Organizations can deliver trusted digital signing experiences while supporting regulated and compliance-driven use cases.
Build a Foundation for High-Assurance Digital Trust
When combined with CC EAL 4+ and FIPS 140-3 certified HSMs, SAM helps organizations create secure, compliant digital trust strategies that protect signing credentials and critical signing operations.
Security at the heart of signing services
Strengthen your eIDAS-compliant signing services and create a Qualified Signature Creation Device (QSCD) by integrating our Signature Activation Module (SAM) and CC EAL 4+ and FIPS 140-3 certified HSMs with your signing infrastructures.
Entrust Signature Activation Module Benefits
Role segregation
The Entrust SAM acts as a security intermediate between your signing application and the Cryptographic Module (HSM).
Key and signature management
The Entrust SAM authorizes key generation, deletion, assignment of key pairs and signature generation in the HSM.
Authenticity checking
The Entrust SAM is configured to only accept signature requests signed by whitelisted Authorization Servers.
Security records
The Entrust SAM generates audit records for all security events involved in its operations.
How It Works
General Architecture
The following diagram illustrates the Entrust SAM and nShield HSM in the context of a Remote Signing Service. The implementation described can vary depending on the implementation requirements and existing infrastructure.
QSCD and eIDAS Compliance
The concept of QSCD is uniquely tied to eIDAS. It is a mandatory element for the generation of qualified signatures and seals, which have the highest level of legal recognition in the European Union. Without a QSCD, a qualified trust service provider can only generate advanced signatures and seals.
Entrust Signature Activation Module Resources
Entrust Signature Activation Module
Security at the heart of your digital signing services
Entrust SAM
The Entrust Signature Activation Module (SAM) is used to deploy a server-side endpoint that will be used by the server signing applications to get data signed (a document hash).
eIDAS-compliant Qualified Signature Creation Device
A future-proof QSCD for qualified signatures and seals under the eIDAS regulation
Why You Need a Root of Trust to be an eIDAS TSP
Read about how the evolving EU regulation on electronic identification and trust services (eIDAS) is establishing the model for legally binding cross-border transactions, not only in Europe, but also across the globe.
Entrust Completes CC Evaluation for its New Remote Signing Solution
Entrust enhances Remote Signing Solution upon completion of successful Common Criteria evaluation, enabling eIDAS-certified cloud signing services.
3Key Company
Entrust empowers 3Key Company to deliver eIDAS-compliant remote signing solution.