Entrust certificates and identity
We are a Entrust reseller: nShield HSM, Entrust PKI, Identity as a Service, Instant ID card issuance. Configured for what actually has to happen at your end, rolled out alongside what already runs, and with a price and lead time before you decide.
What Entrust makes
Entrust supplies three things that often belong together: a certificate authority of your own for internal use, the nShield key vaults underneath it, and the equipment to print and personalise cards. That last branch is why the brand turns up in access control and in identity documents.
Why Entrust, and where it stops
We choose Entrust for internal certificates and for card issuing, and that is a deliberate boundary. What you need to know and what decides the choice: Entrust’s public certificate authority was distrusted by Chrome and Firefox in 2024 after years of issuance failures, and the brand’s public TLS certificates have since been issued elsewhere. For certificates that have to stand on the open internet we therefore point to DigiCert, Sectigo or GlobalSign. Inside your own network that does not apply; there you decide whom you trust.
Which Entrust we supply
nShield HSM, Entrust PKI, Identity as a Service, Instant ID card issuance
What the price depends on
We do not run a webshop, so there is no rate here that would not apply to your situation anyway. What is here is what the amount depends on, so you know what to send along to get one quickly.
- Model and configurationWithin one product line the gap between the entry model and the heaviest variant is large. Tell us what the device has to do and we pick the configuration that fits, rather than the most expensive one that would.
- The quantityOn a larger batch the per-device price comes down. Twenty at once is a different conversation from two, even when everything else is equal.
- What has to be on itA device delivered with your settings, software and security costs more than a box, and saves an installation day per unit. That is a choice, not a surcharge.
- Delivery and installationTo one address or to fifteen sites, with or without on-site placement, with or without taking away what was there. That difference is in the price and it is yours to steer.
- Buying or renting, and for how longThe same equipment can be a purchase or a monthly amount across three or four years. That changes not only the figure but where it lands in the books, and it is the conversation with the most in it.
What we do around Entrust
Switching on a licence is the easy part. Whether someone looks when something fires decides what it is worth.
- Switched on is not configuredOut of the box a large part of the protection sits at the setting that disturbs nobody: no blocking, just an alert. We set it to what actually has to happen at your end, and that takes longer than the rollout.
- Someone has to lookAn alert at three in the morning is only worth something if someone acts on it. We agree beforehand who that is and what they may do, because that is the difference between a console and protection.
- A rollout without a day of downtimeSomething is already running, and two security suites side by side fight over the same files. We roll out per group and remove the old one in the same step, so there are never two at once.
- Licences that move with youWe track how many devices and users are covered. A colleague who has left with an active licence is a bill without a user, and a device outside the count is a gap.
What Entrust plugs into
What it hangs together with in practice. If you already run these, the brand fits onto what is there instead of beside it.
- PKCS#11
- LDAP and Microsoft Entra ID
- SAML and SCIM
Delivered worldwide
We deliver in the Netherlands, Belgium and Türkiye from our own offices, and beyond that through our distribution partners. On a larger batch the per-device price comes down.
Frequently asked
Do you supply Entrust without management?
Yes. We supply and configure, and whether the management stays with us is a separate choice. What we do not do is resell a licence and leave the alerts to you.
Which parts of Entrust do you supply?
nShield HSM, Entrust PKI, Identity as a Service, Instant ID card issuance. What you need follows from what you have to lose and who is watching, not from the bundle with the most ticks.
Can you migrate us from our current security to Entrust?
Yes, and that goes group by group rather than in one evening. Two suites at once on one device gives false alerts and slow machines, so the old one comes off at the moment the new one goes on.
Need Entrust? Ask for a price
Tell us how many and where it has to go, and a price with a lead time comes back.
Practical IT knowledge in your inbox
New guides on management, security and the workplace, written by the people doing the work. No sales talk, and you can unsubscribe in one click.