Entrust offers a range of products focused on providing identity deployment, management and authentication services to enterprises. Within their offerings are brands that provide for the automated creation and provisioning of identities, policy enforcement, audit/workflow tools (including self-service features), and personalization, among other capabilities.

Currently available products in the Entrust lineup include:

- Entrust Authority, a PKI platform based on the vendor's Entrust Authority Security Manager. Entrust Authority Security Manager serves as an organization's Certification Authority (CA) and handles the management of digital keys and certificates; including the secure storage of private keys (including private key histories for a user), and issuance and revocation of certificates for end users and devices. Optional components of the Authority platform include the Auto-enrollment Server, Administration Services, Roaming Server, Enrollment Servers for Web/VPN, and more.

- Entrust Certificate Services, including both the SSL certificates themselves (in Standard, Advantage, and Extended Validation flavors) as well as Certificate Management Services for the purchase and management of multiple certificates.

- Entrust Entelligence, a base platform and series of plug-ins that enable multiple security capabilities for enterprise applications. The base platform consists of the Security Provider, a thin-client desktop security offering that allows for the addition of authentication, encryption and digital signature capabilities to applications; and the Messaging Server, an appliance offering that provides the ability to transparently encrypt/decrypt E-mail messages to external individuals. The Messaging Server can automatically collect and store external user digital identities, and apply OpenPGP or S/MIME based encryption based on them (for external users without digital certificates, OpenPGP or S/MIME capabilities, a Web-based E-mail delivery system using SSL is supported).

Plug-ins for the Entrust Entelligence platform either work independently as stand alone offerings, or leverage the Security Provider and include those for disk encryption; file and folder protection; protection of mobile devices (via collaboration with Pointsec Mobile Technologies); abd control of PC ports and I/O (such as USB, Bluetooth, etc.; also provided via collaboration with Pointsec) including port management, content filtering, central auditing of storage devices, and optional encryption. An additional offering, Entelligence Group Share is a client-server platform that provides automated and transparent encryption capabilities to files in shared network folders.

- Entrust GetAccess, which provides Web access control. GetAccess provides central management for access to multiple applications through a single portal; users see only the applications and content they are authorized to see.

- Entrust IdentityGuard, which offers a number of one-way and mutual authentication capabilities on a server-based (J2EE) Web-services interfaced platform. IdentityGuard is written in Java and runs on a Windows 2003, Solaris, or Linux box; integrating with J2EE and .NET apps via Web services and supporting repositories including LDAP, Active Directory or RDBMS such as Oracle, IBM DB2, or MS SQL. Among the forms of authentications supported by the product are distributed one-time-password lists; grid cards (where the user is challenged--in addition to their name and password--to input characters from a grid location on a card that they possess); shared-secret based authentication; device/machine authentication; out-of-band authentication (where the necessary authentication information is delivered to the user's telephone, cell phone, E-mail, etc.); and $5 OTP hardware "Mini Tokens" (provided via collaboration with ActivIdentity).

New in the latest IdentityGuard release is support for risk-based authentication, wherein a level of risk can be assigned to a transaction based on the IP address (including support for IP-geolocation authentication) with the need for further or stronger authentication then based on the level of risk detected.

- Entrust Secure Transaction Platform, a set of Foundation Security Services that enable secure transactions through Web services interfaces for Web services and server applications.

- Entrust TruePass, for authentication to Web portals and the digital signing of online transactions.

- Entrust USB Tokens, for hardware-based two factor authentication. The Entrust USB tokens are offered via a collaborative effort with SafeNet (using the SafetNet iKey 2032 tokens).

The Entrust product line is available now. Visit the Entrust Web Site for further information.

product submission by EITPlanet Staff

E-Mail this page to a colleague
send info about Entrust Identity Management

Suggest a link
for the Entrust Identity Management fact sheet