Entrust Authority: Enrollment Server for Web

Entrust Authority™ Enrollment Server for Web works with Entrust Authority™ Security Manager to issue digital certificates to applications and devices. These digital certificates make it possible to secure communications with customers, partners, suppliers and employees over a variety of devices, including:

  • Secure Web servers and browsers (SSL/TLS)
  • Secure remote access (VPN/IPSec)
  • Secure email (S/MIME)
  • Secure downloadable software (code/object signing)
  • Secure wireless communication (WAP/WTLS)

These digital certificates make it possible to secure communications with customers, partners, suppliers and employees over a variety of devices.

Enhanced Security — The Enrollment Server makes it possible to issue digital certificates to standard Web servers and Web browsers to enable SSL (Secure Sockets Layer) communications. SSL is the de-facto standard used by Web sites to secure the information passed between a Web browser and a Web server, and to identify parties in the transaction. The Enrollment Server issues digital certificates to make it possible to communicate securely with anyone using a Web browser (including email) from either Netscape® or Microsoft®.

The Enrollment Server for Web can also issue digital certificates for securing VPN communications. VPN solutions are ideal for business users who want to secure:

  • Internet remote access
  • Branch office connectivity (intranets)
  • Communications with partners, suppliers and customers (extranets)

Digital certificates from the Enrollment Server for Web enable privacy, data integrity and strong identification for the new IPSec capabilities of Microsoft® Windows® 2000, the Nortel Contivity™ VPN device, and others.

Leverage across most common applications — The Enrollment Server issues certificates to both Microsoft® and Netscape® browsers, to Web servers from Microsoft, Netscape/Sun iPlanet®, Lotus®, and many others. The Enrollment Server also issues certificates to Nokia, Motorola and Ericsson WAP servers, as well as to Microsoft Windows 2000 IPSec and Nortel Contivity™ VPN devices.

The Enrollment Server also issues device certificates to Nokia, Motorola and Ericsson WAP servers, as well as to Microsoft Windows 2000 IPSec and Nortel Contivity™ VPN devices.

Easy to use — The Enrollment Server for Web uses a Web-based interface, providing users with a straightforward way to request and retrieve digital certificates. Using any HTML editor, this Web-based interface can be customized to look and feel the way you want it to, or you can use the templates provided right out of the box. A guided step-by-step process makes certificate retrieval easier for users.

Easy to deploy — The Enrollment Server for Web installs in minutes on standard Web servers and is simple to operate. There is no client-side software to download or install. With no software distribution and modest support requirements, IT departments can deploy their scarce resources elsewhere.

Digital certificates issued through the Enrollment Server for Web have lifetimes that can last up to 60 months, with no annual renewal fees. Longer certificate lifetimes mean less administrative overhead, freeing up your staff and customers to focus on doing business, not managing certificates.

Interoperability — The Enrollment Server for Web issues certificates to both Microsoft® and Netscape® browsers, and to Web servers from Apache®, C2Net®, IBM®, Lotus®, Netscape/iPlanet™, Microsoft® and many more. The Enrollment Server for Web is standards-based; It supports and enables a variety of common security and IP protocols including: SSL (TLS), IPSec, S/MIME, PKCS 10/7, WAP and WTLS.

Scalable — Each Enrollment Server for Web can issue hundreds of thousands of certificates and can support a large number of Administrators. The Enrollment Server for Web can also be geographically separated from Entrust Authority Security Manager adding additional flexibility to large deployments. Multiple Certification Authority configurations can extend the number of users into the millions.

Entrust Public Key Infrastructure (PKI)

Public key infrastructure or PKI refers to a system that provides certificate management for digital certificates. Digital certificates contain public key pairs that can be used for encryption, digital signature and authentication security. Entrust PKI security solutions help government agencies and corporations to secure their digital identities and information.

Specialized "passport PKI" is used by governments to verify and secure data stored on a chip imbedded in passports issued to citizens. Epassport PKI involves the use of PKI by governments to secure data stored on a chip imbedded in a passport. The government acts as a certification authority that issues the digital certificates used in an ePassport system.

Entrust is a trusted provider of network security solutions that include digital certificates, managed PKI certificates, two factor-authentication, ssl certificates, token authentication, smart card PKI and encryption software.