Entrust launches cloud cryptographic security platform

Entrust has made its Cryptographic Security Platform available as a cloud-based software-as-a-service (SaaS) product, expanding how organisations can manage certificates, keys, and other cryptographic assets across cloud, hybrid, and on-premises environments.

The move comes as security teams face growing volumes of machine identities and secrets across distributed systems. At the same time, certificate lifecycle expectations are tightening, and organisations are planning for post-quantum cryptography, which will require changes to algorithms and key management practices.

Entrust positions the cloud service as a central control point for cryptographic operations, providing visibility across keys, certificates, secrets, and machine identities. It also supports management and automation across environments that combine public cloud services with private infrastructure.

Industry attention has increasingly focused on shorter certificate lifecycles, which raise the operational load for teams that still rely on manual processes. Shorter renewal windows also increase the need for certificate discovery and inventory, since unknown or unmanaged certificates can cause service disruption when they expire.

The platform combines functions often delivered as separate tools, including public key infrastructure, certificate lifecycle management, key management, and compliance management. The new cloud service sits alongside existing on-premises and hybrid deployment options.

Automation Focus

The SaaS release is intended to reduce the need to deploy hardware for cryptographic controls and uses a single dashboard to oversee cryptographic assets.

Certificate discovery and lifecycle automation are core to the product, and it includes policy enforcement. Entrust also highlighted integrations with third-party certificate authorities, including public and private CAs, enabling multi-CA resiliency.

Key and secrets management is another focus area. The platform natively supports Entrust nShield hardware security modules (HSMs) and integrates with cloud, database, and storage platforms. HSMs are commonly used to protect cryptographic keys with tamper-resistant devices and controlled access policies.

Post-Quantum Planning

Entrust also tied the update to preparation for post-quantum cryptography. It said the platform supports crypto-agile strategies and includes FIPS 140-3 certified, PQC-ready HSMs. Crypto-agility typically refers to the ability to change cryptographic algorithms and parameters without major rework across applications and infrastructure.

For regulated industries, the product includes compliance controls and governance functions, describing a unified control plane for automated discovery, governance, and enforcement of cryptographic policies.

Digital signing support is included, with Entrust citing Common Criteria EAL4+ and eIDAS-qualified digital signing. These certifications and frameworks are used in some government and regulated environments for assurance levels and legally recognised signatures.

The platform also includes cloud-delivered file encryption for unstructured data. Unstructured data ranges from documents and images to files stored in collaboration tools and shared drives, which can be difficult for organisations to classify and protect consistently.

"Security teams are being asked to manage growing operational complexity as threats are becoming more sophisticated and interconnected," said Mike Baxter, President and Chief Technology & Product Officer, Entrust.

"The Entrust Cryptographic Security Platform as a Service reduces that burden by helping customers maintain automation, consistency, and resilience as they manage complex and converging threats," Baxter said.

RSA Conference

Entrust will demonstrate the updated platform at RSA Conference 2026 in San Francisco, presenting the cloud-delivered product alongside its on-premises and hybrid options.

The mix of deployment models is designed to let customers choose how they adopt cryptographic controls across different parts of their infrastructure, including cloud services and internal systems that remain on dedicated hardware.

Entrust framed the announcement around cryptographic complexity, outage risk, and the need for consistent governance as environments expand. The platform is positioned as providing visibility and automated compliance support across changing cryptographic environments as certificate lifecycles shorten and post-quantum plans move from research into implementation.