Today, Entrust operates internationally across more than 150 countries, supporting enterprise businesses, financial institutions, healthcare providers, and government agencies. The company's primary focus centers on enabling trusted identities, securing digital payments, and protecting critical data infrastructure.

Core Pillars of Operation

Entrust structures its products and services around three core security mandates:

1. Trusted Digital Identities: Establishing and maintaining verified identities for workforces, consumers, citizens, and connected devices (machines/IoT).
2. Secured Payments and Physical Credentials: Enabling high-volume and instant card issuance for financial institutions, retailers, and government programs.
3. Data Protection and Cryptography: Securing sensitive data, applications, and network infrastructure using robust cryptographic key management, Public Key Infrastructure, and hardware-backed security.

Detailed Breakdown of Products and Solutions

1. Identity and Access Management (IAM) & Identity Verification

Entrust provides end-to-end identity verification and access management solutions designed to prevent identity fraud, support regulatory compliance (such as KYC/AML), and enable secure access across hybrid workplaces and digital channels.

• Identity Verification (IDV) Platform: Leveraging advanced document verification and biometric matching (enhanced through the acquisition of Onfido), Entrust provides automated identity proofing. The platform evaluates government-issued IDs, performs facial liveness detection, and cross-references data against global databases to verify users remotely.
• Entrust Identity / Identity as a Service (IDaaS): A unified identity and access management suite delivering Multi-Factor Authentication (MFA), Single Sign-On (SSO), adaptive risk-based authentication, and passwordless capabilities for enterprise workforces and consumer applications.
• Citizen and Border Identity Solutions: Integrated software and hardware platforms for digital travel credentials, ePassports, national eID programs, and automated border control gates, streamlined for secure immigration and government service delivery.

2. Public Key Infrastructure (PKI) & Certificate Management

PKI is a fundamental technology offered by Entrust to secure machine-to-machine communications, encrypted emails, code signing, and web applications.

• Managed Services PKI & On-Premises PKI: Entrust offers highly scalable PKI deployment models, including fully managed cloud PKI, hosted solutions cross-certified with Federal Bridge/Common Policy standards, and customer-managed software installations.
• Entrust Certificate Hub: A centralized platform for certificate lifecycle management (CLM) that provides visibility, auditability, and automated orchestration across both public and private cryptographic certificates, preventing unexpected network outages caused by expired certificates.
• Entrust Certificate Services (ECS): Comprehensive management for public TLS/SSL certificates, S/MIME email encryption certificates, and digital signing credentials.
• Post-Quantum Cryptography (PQC) Readiness: Cryptographic agility tools and quantum-resistant PKI architecture solutions designed to help organizations transition from classical encryption algorithms to post-quantum standards.

3. Hardware Security Modules (HSM) & Cryptographic Key Management

To safeguard root keys and critical cryptographic operations, Entrust designs and manufactures high-assurance hardware security devices.

• nShield Hardware Security Modules (HSMs): Tamper-resistant hardware appliances (available in network, PCIe, and USB form factors) certified to FIPS 140-2 and FIPS 140-3 standards. nShield HSMs perform secure key generation, storage, digital signing, and encryption for enterprise databases, payment networks, and PKI environments.
• nShield as a Service: A cloud-hosted, subscription-based HSM offering that provides high-assurance hardware cryptographic protection without requiring on-premises hardware maintenance.
• KeyControl & Data Encryption: Virtualized workload encryption and centralized key management solutions (derived from HyTrust technology) designed to protect data across multi-cloud and hybrid virtual environments.

4. Card Issuance and Credential Systems

Entrust remains an industry standard for hardware and software systems used to personalize and produce secure physical credentials, such as credit cards, debit cards, national IDs, and driver's licenses.

• Central Card Issuance Systems: High-volume, industrial card personalization machines capable of embossing, smart card chip encoding, laser engraving, and magnetic stripe encoding for large financial institutions and government agencies.
• Desktop Card Printers (Sigma Series): Compact card printers (such as the Entrust Sigma DS1, DS2, and DS3 series) engineered for decentralized, on-demand issuing of employee badges, visitor passes, student IDs, and financial payment cards.
• Financial Instant Issuance (FII): Integrated hardware and software solutions that allow bank branches and credit unions to print and activate credit and debit cards immediately for customers on-site.

Services and Professional Offerings

In addition to core software and hardware products, Entrust offers specialized professional services to assist organizations throughout the deployment lifecycle:

• Managed Security Services: Continuous operational support, monitoring, and administration for PKI and identity platforms hosted in Entrust secure facilities.
• Cryptographic & PQC Consulting: Strategic advisory services to assist enterprises in mapping cryptographic assets, assessing quantum vulnerability, and establishing crypto-agile frameworks.
• TrustedCare Support: Global customer support, hardware maintenance, software updates, and operational training services for enterprise deployments worldwide.