Product Description: Entrust Authority Security Manager, the world's-leading PKI, is designed to manage the digital keys and certificates that make up the digital identities required to transparently automate all security-related processes in an organization. As the organization’s CA, it enables the use of digital signature, encryption and permissions management services across a wide variety of applications.
Specifically Entrust Authority Security Manager:
Securely stores the CA private key
Issue certificates for users and devices
Publishes certificate revocation lists (CRLs)
Maintains an auditable database of users' private key histories for recovery purposes in the event that users lose access to their keys
Optional components to Entrust Authority provide services including self-registration and self-recovery, secure roaming and enrollment services.
Performance: Entrust Authority has no theoretical limits on the number of users it can support but in real customer environments it been tested to handle up to 22 million active users at a rate of approx. 750 transactions per minute. Entrust Authority is used by many national governments for citizen-based deployments of multiple millions of users.
Entrust Authority supports a wide variety of encryption algorithms and key lengths including up to 4096-bit RSA keys. A wide variety of symmetric algorithms are supported including 256-bit CAST or AES algorithms (among others).
Interfaces: Entrust Authority runs on a variety of hardware platforms and OS’s including AIX, HP-UX, Sun Solaris, and Windows Servers (2000 & 2003). There are no particular hardware interface requirements. For multi-million user deployments, the following network interfaces are recommended: 100 kbits/s to 1 Mbit/s for communication between clients and the CA, full-duplex 10 Base-T for communication between the CA and the Directory.
Key Features & Benefits:
Supports up to four key pairs per user (encryption, non-repudiation, signature, and EFS). This enables broader deployment in environments with specific requirements.
Supports RSA, DSA, and ECC keys, certificates, and signatures as well as a wide range of symmetric algorithms and encryption strengths available in both North America and Europe
Certificate policies can be customized on a per-user basis.
Supports various revocation list attributes including expiry time, issuance frequency, and formats
Supports unlimited remote RAs per CA, and flexible administration permissions on a per-RA basis.
Enables easy key backup and recovery capabilities with flexible policies to help reduce user down time. Entire user key history is recovered allowing users to decrypt information no matter when it was encrypted.
Ability to enforce corporate-wide policies, including various CA key properties, digital ID storage options (e.g. locally, roaming, smart card etc.), administrator permissions, user profiles such as password lengths, mobility options, and additional entitlements, as well as security network structure (hierarchical or peer-to-peer cross-certification).
Seamless integration with Microsoft Windows native security capabilities including CAPI, EFS and directory networking
Supports high availability and disaster recovery environments
Interoperates with other vendors’ PKI systems through standards such as X.509, CRL, OCSP, LDAP, PKIX, and PKCS
Interoperability with applications is provided through standards such as X.509v3 and file formats such as S/MIME, PEM, IPSec, SSL, and SPKM, as well as Microsoft CryptoAPI (CAPI).
Supports customized audit logs over SNMP and supports XML formatted reports.
Highlights: The most unique feature/benefit of Entrust Authority is the complete automation of all key and certificate functions for end users. Users do not need to know anything about public keys and certificates as all user and CA key pairs are automatically and transparently updated in a secure, flexible, simple, and efficient manner, which helps reduce the costs of user training, user downtime, and helpdesk calls. Additionally, Entrust Authority supports an efficient and complete user key backup and recovery system that allows users to retrieve their entire key history in the event they loose access to their keys (for example, by forgetting the password that protects their keys, a very common occurrence). These are often overlooked aspects of PKI deployment but can become very real administration headaches when PKI-based applications are used by users in large scale.
End-Users: This is targeted at medium to large enterprise and governments agencies.
Entrust Inc. One Hanover Park
16633 Dallas Parkway, Suite 800
Addison , Texas 75001, USA Tel: 1-888-690-2424
Pros
:
Cons
:
Recommend to others
:
Yes
No
Yes, I want to subscribe to email newsletters from Info Security Products Guide
Yes, I am an end-user and would like to be included in the voters list
Full Name
:
Company Name
:
Title
:
Address
:
City
:
State
:
Country
:
Telephone
:
(with area & country code)
Email Address
:
Renter Email Address
:
I am:
Existing end-user
Prospective Customer
Other:
