Skip to main content
purple hex pattern
illustration of person sitting on suitcases

Best practices, under your control

Entrust Managed Root CA service is a customer specific PKI root certificate authority (CA) designed and built to exacting standards and hosted under a tScheme-approved audit regime as a standalone offline service. Our root CAs are designed to be the ultimate point of trust in any customer’s PKI.


browser icon

Get the benefits of a bespoke root CA service for the lifetime of your PKI, without the need for a specialized environment or additional complexity.

faded gray hex background
bullseye target icon

Our PKI experts manage your Root CA to best practices, eliminating the cost and effort of finding, hiring, and managing crypto experts.

faded gray hex background
shield icon with four quadrants of purple and gray

Audited policies and procedures and security cleared operators deliver reliability and assurance, ensuring your root CA is always highly controlled.

faded gray hex background
piggy bank icon

With our simple fixed setup and annual cost model, you won’t be caught off guard by unexpected costs or services.

faded gray hex background


clipboard checked list icon

Management and Reporting

Use reporting and inventory tools and complete lifecycle management for certificates.

ribbon icon


Root CA cryptographic keys held in FIPs140-2 Level 3 HSM

clipboard checked list icon

Annual audit

Our annual assurance process includes validating keys/policy with our customer.

ribbon icon


Compliance with eIDAS and certified through ETSI and tScheme standards.

Learn more about Entrust's Managed PKI services

Connect with an Expert

Our experts will contact you to discuss how our solutions can meet your needs.