Skip to main content
illustration of man sitting on suitcases

Best practices, under your control

Entrust Managed Root CA service is a customer specific PKI root certificate authority (CA) designed and built to exacting standards and hosted under a tScheme-approved audit regime as a standalone offline service. Our root CAs are designed to be the ultimate point of trust in any customer’s PKI.


Long-Term Solution

Get the benefits of a bespoke root CA service for the lifetime of your PKI, without the need for a specialized environment or additional complexity.

bullseye icon white
No PKI Expertise Required

Our PKI experts manage your offline Root CA to best practices, eliminating the cost and effort of finding, hiring, and managing crypto experts.

Laptop and Mobile icon
Highly Controlled

Audited policies and procedures and security cleared operators deliver reliability and assurance, ensuring your root CA is always highly controlled.

Cost Certainty

With our simple fixed setup and annual cost model, you won’t be caught off guard by unexpected costs or services.


clipboard list check icon
Management and Reporting

Use reporting and inventory tools and complete lifecycle management for certificates.

quality icon

Root CA cryptographic keys held in FIPs140-2 Level 3 HSM.

clipboard list check icon
Annual audit

Our annual assurance process includes validating keys/policy with our customer.

quality icon

Compliance with eIDAS and certified through ETSI and tScheme standards.

Learn more about Entrust's Managed PKI services

Connect with an Expert

Our experts will contact you to discuss how our solutions can meet your needs.