Profiles

Solution Overview

nCipher’s nShield Hardware Security Module (HSM) works with the Entrust Authority 7.0 solution to help protect key operations, enhance key management functionality and speed signing operations across the PKI. nCipher and Entrust work closely to ensure the highest level of product interoperability.

Entrust’s managed PKI is a cost-effective and easy-to-use solution that transparently automates all security-related processes. With best-in-class certified security, Entrust software enables the use of digital signature, digital receipt, encryption and permissions management services across a wide variety of applications. This enables organizations to establish and maintain secure networking environments for internal and external relationships.

Enhance Key Security and Manageability with nShield™

By deploying nShield as part of an Entrust PKI Solution, organizations can:

• Establish a highly secure hardware environment for the protection of signing keys used to issue digital certificates and to secure certificate registration and validation processes
• Protect private keys in FIPS 140 Level 2 or Level 3 validated hardware
• Enhance PKI manageability and establish responsibilities and authority within the organization and across teams to manage a multitude of digital keys across the infrastructure
• Off-load cryptographic signing operations. A single nShield can enable a server to process up to 400 signatures per second – a 20-fold increase for a typical unaided server.

How the nCipher - Entrust Solution Works

The combination of Entrust Authority 7.0  with nCipher’s nShield HSM delivers a highly secure and scalable solution for organizations preparing to deploy operational PKI systems. This combined solution strengthens the automated key management facilities provided by the Entrust software through the use of tamper-resistant secure hardware. nShield connects directly to the server and the Entrust authority 7.0  software via the PKCS #11 standard interface to provide CA key protection as well as transaction acceleration where needed.