HSM Custom Cryptographic Solutions

Security is not a one size fits all commodity. Customers buy security products to solve specific business problems. At Entrust Professional Services, we understand that security is key to your business and ongoing customer confidence, but that your business is not necessarily all about security. Without an appropriate architecture and application development process to deliver real solutions, encryption-based data protection efforts can fall short of meeting compliance, security, and business continuity objectives. Entrust Professional Services can provide assistance and support throughout the development lifecycle. From network infrastructure, virtualization and bespoke application code development, through to advice on achieving PCI DSS compliance, to deployment and training across your enterprise, Entrust Professional Services provides you with the skills and expertise to develop a solution that’s right for you and good for your business. Entrust Custom Cryptographic Solutions include:

• Internet of Things
• Enterprise Code Signing Solution
• HSM Application Integration
• Crypto as a Service
• Encryption Application

Contact Entrust Cryptographic Solutions team to learn more about these services.

Given the prevalence of malware and Advanced Persistent Threats (APTs), many software vendors, providers of online services, and enterprise IT organizations are under pressure to increase the security of their code signing process. The nShield Code Signing solution helps software producers of all types implement highly secure and efficient code signing processes that protect their organizations from risks associated with software tampering. Combining tamper-resistant nShield HSMs with support from Entrust Professional Services (PS), the nShield Code Signing solution is backed by our extensive expertise in code signing best practices and standards of due care. HSMs provide tamper-resistant, certified protection for private code signing keys and a secure platform to perform critical digital signature processes. nShield Code Signing also offers a flexible range of capabilities to simplify and automate the code signing request/approval workflow for organizations with more complex requirements.

Each nShield Code Signing solution includes one or more nShield HSMs, the nShield Code Signing framework, and service days appropriate to your specific requirements. Entrust PS will design and configure your solution to support your specific code signing workflow. nShield Code Signing is offered in three configurations:

• Developer. This code signing solution is designed for the individual developer workstation for low volumes of code signing.
• Workgroup. This code signing solution is designed for organizations with multiple build stations where a shared signing resource is advantageous.
• Enterprise. This code signing solution is designed for larger organizations with requirements for highly controlled software signing approval process workflows with robust end-to-end audit capabilities.

Organizations taking advantage of nShield hardware security modules (HSMs) frequently require custom code to integrate cryptographic capabilities into their applications.

Secure coding requires special skill; developers must be careful to utilize best practices and avoid introducing security risks and performance bottlenecks. For organizations that do not have in-house staff with secure coding skills, or need to supplement their teams with additional capacity and expertise, Entrust Professional Services offers expert custom development services that can accelerate projects and deliver secure and efficient results.

You can work with Entrust Professional Services in whatever way best meets your needs. As experts in Entrust products and development toolkits, we can provide advice and knowledge transfer, work alongside your team to add capacity for critical projects, or complete your custom integration from start to finish. However you choose to work with us, you can be assured of expert professional help that shortens development cycles, raises your team’s security awareness, and ensures that you receive the best possible return on your investment in security solutions.

In situations where you plan to do most or all of your own application integration, Entrust Professional Services provides a number of services and tools to support your efforts. These include:

Development toolkits.

Entrust offers two optional application integration toolkits:

• With the CipherTools Developer Toolkit, you can take full advantage of the advanced capabilities offered by the nShield HSM family as you integrate HSMs with your applications. The toolkit contains detailed tutorials and reference documentation, sample programs written in a range of high level languages, and additional versions of libraries to expand capabilities for integration with business applications beyond those that can be achieved by the standard application program interfaces (APIs).
• The CodeSafe Developer Toolkit enables application developers to write programs that are securely loaded and executed within the secure environment of the nShield HSM, protecting them from malware and Trojans attacks on host systems. CodeSafe provides an application “sand box” setting where code can be validated for integrity and authorized to execute in a tamper-resistant manner—ideal for applications residing in untrustworthy locations.

Integration guides.

For commonly encountered integration tasks, Entrust has prepared guides that can help your team save time and avoid common pitfalls by utilizing best practices for integrating nShield HSMs with specific commercial software applications.

Developer support

To ensure that you can obtain the help you need when you need it, Entrust offers multiple levels of support contracts, including developer support, giving you access to experts in Entrust products, developer toolkits, and APIs.