Entrust

Last updated
Entrust, Corp.
FormerlyEntrust Datacard
Company typePrivate
IndustryDigital Security and Credential Issuance
Founded1994 (1994)
Headquarters Shakopee, Minnesota [1] ,
United States
Area served
Worldwide
Key people
Todd Wilkinson (CEO) [2]
Revenue4,115,174 United States dollar (2017)  OOjs UI icon edit-ltr-progressive.svg
Number of employees
2,500+ (2020)
Website www.entrust.com

Entrust Corp., formerly Entrust Datacard, provides software and hardware used to issue financial cards, e-passport production, user authentication for those looking to access secure networks or conduct financial transactions, trust certificated for websites, mobile credentials, and connected devices. The privately-held company is based in Shakopee, Minnesota and employs more than 2,500 people globally.

Contents

History

Bill (F. William) Conner, Former President and CEO of Entrust, speaking on global cybersecurity before the INTERPOL 79th General Assembly in Doha, Qatar, November 2010. Bill(FWm)Conner3.JPG
Bill (F. William) Conner, Former President and CEO of Entrust, speaking on global cybersecurity before the INTERPOL 79th General Assembly in Doha, Qatar, November 2010.
An Entrust sponsored Porsche 997 GT3 Cup. Entrust SSL Porsche GT3 Cup 2012 Long Beach Grand Prix (2).jpg
An Entrust sponsored Porsche 997 GT3 Cup.

Entrust Inc

In 1994, Entrust built and sold the first commercially available public key infrastructure.[ citation needed ] [3] In 1997, Nortel (formerly Northern Telecom) spun off Entrust when it became incorporated in Maryland as a part of a tax strategy. [4]

Entrust originally entered the public SSL market by chaining to the Thawte Root in 1999 creating Entrust.net. [5]

In May 2000, Entrust acquired enCommerce, a provider of authentication and authorization technologies. [6]

In April 2002, Entrust's public key infrastructure technology served as the foundation for the prototype of what is now the United States Federal Bridge Certification Authority. The authority is an element of the trust infrastructure that provides the basis for intergovernmental and cross-governmental secure communications. [7]

In mid-2004, Entrust acquired AmikaNow! Corporation's content scanning, analysis and compliance technology. [8] The technology is designed to automatically analyze and categorize email message and document content based on the contextual meaning, rather than pre-defined word lists.

Entrust acquired Orion Security Solutions, a supplier of public key infrastructure services, in June 2006. [9]

In July 2006, Entrust acquired Business Signatures Corporation, [10] a supplier of non-invasive fraud detection solutions[ buzzword ], for US$50 million. From a GAAP accounting perspective, the total purchase price was approximately $55.0 million, including assumed stock options, transaction expenses and net asset value. Business Signatures was founded in 2001 in Redwood City, California, by former executives from Oracle, HP and Cisco. It originally was funded by the Texas Pacific Group, Walden International, Ram Shriram of Google and Dave Roux of Silver Lake Partners.

Prior to it becoming a private-equity company, Entrust was included on the Russell 3000 Index in July 2008. [11] In July 2007, Entrust contributed public key infrastructure technology to the open-source community through Sun Microsystems, Inc. and the Mozilla Foundation. Specifically, Entrust supplied certificate revocation list distribution points (CRL-DP), Patent 5,699,431, to Sun under a royalty-free license for incorporation of that capability into the Mozilla open-source libraries. [12]

In July 2009, Entrust was acquired by Thoma Bravo, a U.S.-based private equity firm, for $124 million. [13]

Datacard Group

The company was established in 1969 as Data Card Addressograph after Willis K. Drake acquired a Minnesota-based firm that produced credit card imprinters. Company founder Willis K. Drake led a team of engineers that invented machines that enabled secure and productive personalization of credit cards beyond the imprinters that Addressograph had offered. [14] Datacard Group's high-volume card issuance systems allowed banks and retailers to personalize 1,500 cards per hour with great precision and security. Until the company launched its technologies, the process was slow and riddled with quality problems. [15]

In 2000, Datacard Group acquired Platform Seven (P7), the smart card technology arm of National Westminster Bank. [16]

A rapidly growing portion of the company's portfolio is focused on instant issuance of credit, debit and prepaid cards. Banks, retailers, credit unions and other organizations issuing cards used for financial transactions are rapidly deploying systems used to issue cards on-demand in branch or store locations. [17] These instant issuance systems are often used for issuing emergency replacements when cards are lost, stolen or compromised by breaches. Most often, they complement centralized operations that focus on mass issuance aspects of a card program. [18]

In 2013 the company acquired Entrust Inc. [19] [20]

Entrust Datacard

In 2014, Datacard Group rebranded as Entrust Datacard. [21] [22]

In June 2019 it acquired general-purpose Hardware Security Module vendor nCipher from Thales Group. [23]

Entrust Corp

On September 14, 2020, the company announced that it has re-branded from Entrust Datacard to Entrust [24] [23] and changed its legal entity name to Entrust Corporation. [25] The rebranding recognized the company's emphasis on secure identity, payments and data protection. [26]

In January 2021, Entrust acquired HyTrust, Inc., a provider of virtualized and multi-cloud data encryption, key management, and cloud security posture management. [27]

Today, the company offers a wide variety of digital security and credential issuance like crossing borders, making purchases, accessing e-government services or logging into corporate networks. The organization has expanded its offerings through a series of acquisitions, including:

Distrust

In June 2024, Google announced that due to long-standing issues with compliance, Entrust would be removed as a trusted Certificate Authority in the Chrome browser, and PKI certificates issued by Entrust would no longer be trusted in the browser after October 2024. [31] In July 2024, Mozilla announced due the long-standing issues will also remove Entrust as a trusted Certificate Authority in their Firefox Browser. This will affect all certificates granted after 30 November 2024. [32]

Related Research Articles

<span class="mw-page-title-main">Smart card</span> Pocket-sized card with authentication circuitry

A smart card (SC), chip card, or integrated circuit card, is a card used to control access to a resource. It is typically a plastic credit card-sized card with an embedded integrated circuit (IC) chip. Many smart cards include a pattern of metal contacts to electrically connect to the internal chip. Others are contactless, and some are both. Smart cards can provide personal identification, authentication, data storage, and application processing. Applications include identification, financial, public transit, computer security, schools, and healthcare. Smart cards may provide strong security authentication for single sign-on (SSO) within organizations. Numerous nations have deployed smart cards throughout their populations.

<span class="mw-page-title-main">Public key infrastructure</span> System that can issue, distribute and verify digital certificates

A public key infrastructure (PKI) is a set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption.

In cryptography, a public key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes the public key and information about it, information about the identity of its owner, and the digital signature of an entity that has verified the certificate's contents. If the device examining the certificate trusts the issuer and finds the signature to be a valid signature of that issuer, then it can use the included public key to communicate securely with the certificate's subject. In email encryption, code signing, and e-signature systems, a certificate's subject is typically a person or organization. However, in Transport Layer Security (TLS) a certificate's subject is typically a computer or other device, though TLS certificates may identify organizations or individuals in addition to their core role in identifying devices. TLS, sometimes called by its older name Secure Sockets Layer (SSL), is notable for being a part of HTTPS, a protocol for securely browsing the web.

<span class="mw-page-title-main">Root certificate</span> Certificate identifying a root authority

In cryptography and computer security, a root certificate is a public key certificate that identifies a root certificate authority (CA). Root certificates are self-signed and form the basis of an X.509-based public key infrastructure (PKI). Either it has matched Authority Key Identifier with Subject Key Identifier, in some cases there is no Authority Key identifier, then Issuer string should match with Subject string. For instance, the PKIs supporting HTTPS for secure web browsing and electronic signature schemes depend on a set of root certificates.

In cryptography, a certificate authority or certification authority (CA) is an entity that stores, signs, and issues digital certificates. A digital certificate certifies the ownership of a public key by the named subject of the certificate. This allows others to rely upon signatures or on assertions made about the private key that corresponds to the certified public key. A CA acts as a trusted third party—trusted both by the subject (owner) of the certificate and by the party relying upon the certificate. The format of these certificates is specified by the X.509 or EMV standard.

<span class="mw-page-title-main">Gen Digital</span> Multinational software company

Gen Digital Inc. is a multinational software company co-headquartered in Tempe, Arizona and Prague, Czech Republic. The company provides cybersecurity software and services. Gen is a Fortune 500 company and a member of the S&P 500 stock-market index. The company also has development centers in Pune, Chennai and Bangalore. Its portfolio includes Norton, Avast, LifeLock, Avira, AVG, ReputationDefender, and CCleaner.

<span class="mw-page-title-main">HID Global</span> American manufacturer

HID Global Corporation is an American manufacturer of secure identity products. The company is an subsidiary of Assa Abloy, a multinational door and access control conglomerate. Björn Lidefelt was appointed CEO on 27 January 2020. He succeeded Stefan Widing, who led HID Global for over four years.

<span class="mw-page-title-main">Ivanti</span> American IT software company

Ivanti is an IT software company headquartered in South Jordan, Utah, United States. It produces software for IT Security, IT Service Management, IT Asset Management, Unified Endpoint Management, Identity Management and supply chain management. It was formed in January 2017 with the merger of LANDESK and HEAT Software, and later acquired Cherwell Software. The company became more widely known after several major security incidents related to the VPN hardware it sells.

<span class="mw-page-title-main">Gemalto</span> International digital security company

Gemalto was an international digital security company providing software applications, secure personal devices such as smart cards and tokens, e-wallets and managed services. It was formed in June 2006 by the merger of two companies, Axalto and Gemplus International. Gemalto N.V.'s revenue in 2018 was €2.969 billion.

GeoTrust is a digital certificate provider. The GeoTrust brand was bought by Symantec from Verisign in 2010, but agreed to sell the certificate business in August 2017 to private equity and growth capital firm Thoma Bravo LLC. GeoTrust was the first certificate authority to use the domain-validated certificate method which accounts for 70 percent of all SSL certificates on the Internet. By 2006, GeoTrust was the 2nd largest certificate authority in the world with 26.7 percent market share according to independent survey company Netcraft.

Mobile identity is a development of online authentication and digital signatures, where the SIM card of one's mobile phone works as an identity tool. Mobile identity enables legally binding authentication and transaction signing for online banking, payment confirmation, corporate services, and consuming online content. The user's certificates are maintained on the telecom operator's SIM card and in order to use them, the user has to enter a personal, secret PIN code. When using mobile identity, no separate card reader is needed, as the phone itself already performs both functions.

<span class="mw-page-title-main">DigiCert</span> Internet security company

DigiCert, Inc. is a digital security company headquartered in Lehi, Utah. DigiCert provides public key infrastructure (PKI) and validation required for issuing digital certificates or TLS/SSL certificates, acting as a certificate authority (CA) and trusted third party.

The Certification Authority Browser Forum, also known as the CA/Browser Forum, is a voluntary consortium of certification authorities, vendors of Internet browser and secure email software, operating systems, and other PKI-enabled applications that promulgates industry guidelines governing the issuance and management of X.509 v.3 digital certificates that chain to a trust anchor embedded in such applications. Its guidelines cover certificates used for the SSL/TLS protocol and code signing, as well as system and network security of certificate authorities.

StartCom was a certificate authority founded in Eilat, Israel, and later based in Beijing, China, that had three main activities: StartCom Enterprise Linux, StartSSL and MediaHost. StartCom set up branch offices in China, Hong Kong, the United Kingdom and Spain. Due to multiple faults on the company's end, all StartCom certificates were removed from Mozilla Firefox in October 2016 and Google Chrome in March 2017, including certificates previously issued, with similar removals from other browsers expected to follow.

Gujarat Narmada Valley Fertilizers & Chemicals (GNFC) is an Indian manufacturer of fertilizers and chemicals. GNFC was founded in 1976, jointly promoted by the Government of Gujarat and the Gujarat State Fertilizers and Chemicals (GSFC).

<span class="mw-page-title-main">Bill Conner</span> American businessman

F. William Conner is an American business executive. Conner has worked across a variety of high-tech industries, specializing in corporate turnaround, cybersecurity, data and infrastructure.

DigiNotar was a Dutch certificate authority, established in 1998 and acquired in January 2011 by VASCO Data Security International, Inc. The company was hacked in June 2011 and it issued hundreds of fake certificates, some of which were used for man-in-the-middle attacks on Iranian Gmail users. The company was declared bankrupt in September 2011.

HyTrust, an Entrust company, is an American company. It specialized in security, compliance and control software for the virtualization of information technology infrastructure. The company was founded in 2007 and is based in Mountain View, California. Entrust Corp. acquired it in January 2021.

<span class="mw-page-title-main">FIDO Alliance</span> Industry consortium working on authentication mechanisms

The FIDOAlliance is an open industry association launched in February 2013 whose stated mission is to develop and promote authentication standards that "help reduce the world’s over-reliance on passwords". FIDO addresses the lack of interoperability among devices that use strong authentication and reduces the problems users face creating and remembering multiple usernames and passwords.

WebUSB is a JavaScript application programming interface (API) specification for securely providing access to USB devices from web applications.

References

  1. "Entrust Corporate Headquarters". Google Maps. Retrieved 5 September 2023.
  2. Wyant, Carissa (2008-06-28). "Datacard names new CEO" . Retrieved 2015-03-01.
  3. Entrust Timeline, Entrust Timeline (6 October 2010). "Creating Trusted Connections Since 1969" (PDF). Entrust . Retrieved 10 October 2023.
  4. "Nortel spin-off Entrust in $114-M merger deal with Thoma Bravo | IT World Canada News". www.itworldcanada.com. 2009-04-14. Retrieved 2022-03-16.
  5. "InfoWorld". 27 December 1999 – 3 January 2000.
  6. "Entrust to Acquire enCommerce In Deal Valued at $586 Million". Wall Street Journal. 2000-04-18. ISSN   0099-9660 . Retrieved 2021-04-21.
  7. Jackson, William (May 15, 2002). "Federal bridge opens to two-way traffic". GCN. Retrieved 2021-04-21.
  8. ""Entrust buys up AmikaNow!," Ottawa Business Journal, May 19, 2004". Canadait.com. 2013-01-15. Archived from the original on 2012-02-15. Retrieved 2013-01-21.
  9. Welsh, William (2006-06-15). ""Entrust buys Orion Security Solutions," Washington Technology, June 15, 2006". Washingtontechnology.com. Archived from the original on 2013-02-09. Retrieved 2013-01-21.
  10. Messmer, Ellen (2006-07-20). ""Entrust acquires Business Signatures for $50M," Computer World, July 20, 2006". Computerworld.com. Archived from the original on 2009-03-29. Retrieved 2013-01-21.
  11. ""Entrust added to Russell 3000 Index," Dallas Business Journal, July 3, 2008". Bizjournals.com. 2008-07-03. Retrieved 2013-01-21.
  12. ""Entrust offers certificate technology to Mozilla," ComputerWorld Canada, July 25, 2007". Itworldcanada.com. Retrieved 2013-01-21.
  13. "Thoma Bravo Completes $124M Acquisition Of Entrust". www.thomabravo.com. Retrieved 2021-04-21.
  14. Ross, James (3 February 1983). "An Interview with Willis K. Drake, OH 46" (PDF). University of Minnesota.
  15. "CR80 News". New Datacard Group printer add-on allows for expanded card printing options. 17 September 2007.
  16. "Datacard buys Platform Seven". Minneapolis/St. Paul Business Journal. 26 March 2000. Retrieved 6 March 2015.
  17. "PYMNTS.com". "Trusted Identity" – On Demand. 17 February 2015.
  18. "InformationWeek". Instant Issuance: A Game-Changer for Banks. 11 April 2013. Archived from the original on 2 April 2015. Retrieved 6 March 2015.
  19. "StarTribune". December 17, 2013.
  20. "Security Document World". April 4, 2014.
  21. "Entrust Datacard reveals new brand, partnerships and products". SecureIDNews. Retrieved 2021-01-19.
  22. "Secure ID News". November 18, 2014.
  23. 1 2 "Entrust Datacard drops the Datacard as part of rebrand". www.bizjournals.com. Retrieved 2021-10-13.
  24. "Shakopee-based Entrust rebrands to emphasize its growing data security business". Star Tribune. Retrieved 2020-09-14.
  25. "Entrust name and identity reflect the critical need for trust at the heart of the digital transformation – and the centrality of Entrust's innovation to secure a rapidly changing world". www.entrust.com. Retrieved 2020-09-14.
  26. "Shakopee-based Entrust rebrands to emphasize its growing data security business". Star Tribune. September 14, 2020. Retrieved 2021-01-19.
  27. "Entrust acquires HyTrust to offer identity, encryption and security policy control for cloud environments". Help Net Security. 2021-01-14. Retrieved 2021-01-19.
  28. "Entrust Datacard completes purchase of market-leading general purpose hardware security business, nCipher Security, from Thales". www.helpnetsecurity.com. 25 February 2019. Retrieved 2021-04-20.
  29. "ID verification powerhouse Entrust acquires Ottawa-based WorldReach". Ottawa Business Journal. Archived from the original on 2021-04-19. Retrieved 2021-04-20.
  30. Kadet, Ken (9 April 2024). "Entrust Completes Acquisition of Onfido, Creating a New Era of Identity-Centric Security". Entrust Corporation.
  31. "Sustaining Digital Certificate Security - Entrust Certificate Distrust". Google Online Security Blog. Retrieved 2024-06-27.
  32. "Mozilla's Decision on Entrust's Root CA Certificates used for TLS". Google Groups. Retrieved 2024-07-31.