Entrust PKI: Entrust Security Manager

A comprehensive solution for organizations looking to establish a scalable security practice, with trusted signature, encryption, and identity.

Be Ready for Anything with High Availability and Horizontal Scaling​

Meet the growing demands on your PKI – such as securing remote workforces and complex use cases like DevOPs and IoT – with horizonal scalability. Entrust Security Manager can support the shift of needing to secure tens of thousands of identities to securing millions.

Entrust Security Manager can also be configured to be a high availability infrastructure, with near zero downtime, so that business can continue without user interruption or administrator involvement if an issue arises with your critical business applications.



Compliant and Trusted Environment

The TRIDENT SAM has successfully attained Common Criteria EAL 4+ certification (Evaluation Assurance Level EAL 4 augmented by AVA_VAN.5 and ALC_FLR.3 based on ISO/IEC 18045:2008) meeting the requirements of the Protection Profile for QSCD for Server Signing (EN 419241-2) with strict conformance. The underlying CM (Crypto Module) is a Qualified Signature (and Seal) Creation Device (QSCD) under European Union Regulation 910/2014 on Electronic Identification and Trust Services (eIDAS). Thus, together they enable Trust Service Providers to offer both Advanced and Qualified Remote Electronic Signature Services and Remote Electronic Seal Services to Trust Service clients with the highest security and compliance requirements.

Automation and Scalability

The TRIDENT RSS comes with a lightweight engine for dealing with crypto processing and signature creating on-behalf of remote users without unnecessary system components to be easily inserted into existing signing solutions.The easy-to-use, proprietary SAMAPI provides all functions required for locally or remotely managing the SAM, while the SAP (Signature Activation Protocol) commands can be incorporated into any SIC (Signer’s Interaction Component), whether it’s one custom-built according to a client’s specific needs or a standard third-party application, like Acrobat Reader. For this industry-standard APIs such as Microsoft CSP/KSP and PKCS#11 are used.

Ecosystem and Integrations

Security Manager supports the ecosystem of Entrust digital security products – such as Entrust nShield HSMs, Entrust Certificate Hub, and Entrust Identity – alongside a broad set of out-of-the-box integrations to fit easily into your processes and workflows to provision people, systems, and devices.

A comprehensive solution for any certificate need

Operating world-class PKI or trust services requires highly audited environments and certified technology. That’s what you get with Entrust Security Manager. It’s trusted by organizations with the most demanding security environments, and its flexibility enables configurations for a variety of different use case requirements, including: