This article has multiple issues. Please help improve it or discuss these issues on the talk page . (Learn how and when to remove these messages)
|
Formerly | Entrust Datacard |
---|---|
Company type | Private |
Industry | Digital Security and Credential Issuance |
Founded | 1994 |
Headquarters | Shakopee, Minnesota [1] , United States |
Area served | Worldwide |
Key people | Todd Wilkinson (CEO) [2] |
Revenue | 4,115,174 United States dollar (2017) |
Number of employees | 2,500+ (2020) |
Website | www |
Entrust Corp., formerly Entrust Datacard, provides software and hardware used to issue financial cards, e-passport production, user authentication for those looking to access secure networks or conduct financial transactions, trust certificated for websites, mobile credentials, and connected devices. The privately-held company is based in Shakopee, Minnesota and employs more than 2,500 people globally.
In 1994, Entrust built and sold the first commercially available public key infrastructure.[ citation needed ] [3] In 1997, Nortel (formerly Northern Telecom) spun off Entrust when it became incorporated in Maryland as a part of a tax strategy. [4]
Entrust originally entered the public SSL market by chaining to the Thawte Root in 1999 creating Entrust.net. [5]
In May 2000, Entrust acquired enCommerce, a provider of authentication and authorization technologies. [6]
In April 2002, Entrust's public key infrastructure technology served as the foundation for the prototype of what is now the United States Federal Bridge Certification Authority. The authority is an element of the trust infrastructure that provides the basis for intergovernmental and cross-governmental secure communications. [7]
In mid-2004, Entrust acquired AmikaNow! Corporation's content scanning, analysis and compliance technology. [8] The technology is designed to automatically analyze and categorize email message and document content based on the contextual meaning, rather than pre-defined word lists.
Entrust acquired Orion Security Solutions, a supplier of public key infrastructure services, in June 2006. [9]
In July 2006, Entrust acquired Business Signatures Corporation, [10] a supplier of non-invasive fraud detection solutions[ buzzword ], for US$50 million. From a GAAP accounting perspective, the total purchase price was approximately $55.0 million, including assumed stock options, transaction expenses and net asset value. Business Signatures was founded in 2001 in Redwood City, California, by former executives from Oracle, HP and Cisco. It originally was funded by the Texas Pacific Group, Walden International, Ram Shriram of Google and Dave Roux of Silver Lake Partners.
Prior to it becoming a private-equity company, Entrust was included on the Russell 3000 Index in July 2008. [11] In July 2007, Entrust contributed public key infrastructure technology to the open-source community through Sun Microsystems, Inc. and the Mozilla Foundation. Specifically, Entrust supplied certificate revocation list distribution points (CRL-DP), Patent 5,699,431, to Sun under a royalty-free license for incorporation of that capability into the Mozilla open-source libraries. [12]
In July 2009, Entrust was acquired by Thoma Bravo, a U.S.-based private equity firm, for $124 million. [13]
The company was established in 1969 as Data Card Addressograph after Willis K. Drake acquired a Minnesota-based firm that produced credit card imprinters. Company founder Willis K. Drake led a team of engineers that invented machines that enabled secure and productive personalization of credit cards beyond the imprinters that Addressograph had offered. [14] Datacard Group's high-volume card issuance systems allowed banks and retailers to personalize 1,500 cards per hour with great precision and security. Until the company launched its technologies, the process was slow and riddled with quality problems. [15]
In 2000, Datacard Group acquired Platform Seven (P7), the smart card technology arm of National Westminster Bank. [16]
A rapidly growing portion of the company's portfolio is focused on instant issuance of credit, debit and prepaid cards. Banks, retailers, credit unions and other organizations issuing cards used for financial transactions are rapidly deploying systems used to issue cards on-demand in branch or store locations. [17] These instant issuance systems are often used for issuing emergency replacements when cards are lost, stolen or compromised by breaches. Most often, they complement centralized operations that focus on mass issuance aspects of a card program. [18]
In 2014, Datacard Group rebranded as Entrust Datacard. [21] [22]
In June 2019 it acquired general-purpose Hardware Security Module vendor nCipher from Thales Group. [23]
On September 14, 2020, the company announced that it has re-branded from Entrust Datacard to Entrust [24] [23] and changed its legal entity name to Entrust Corporation. [25] The rebranding recognized the company's emphasis on secure identity, payments and data protection. [26]
In January 2021, Entrust acquired HyTrust, Inc., a provider of virtualized and multi-cloud data encryption, key management, and cloud security posture management. [27]
Today, the company offers a wide variety of digital security and credential issuance like crossing borders, making purchases, accessing e-government services or logging into corporate networks. The organization has expanded its offerings through a series of acquisitions, including:
In June 2024, Google announced that due to long-standing issues with compliance, Entrust would be removed as a trusted Certificate Authority in the Chrome browser, and PKI certificates issued by Entrust would no longer be trusted in the browser after October 2024. [31] In July 2024, Mozilla announced due the long-standing issues will also remove Entrust as a trusted Certificate Authority in their Firefox Browser. This will affect all certificates granted after 30 November 2024. [32]
A smart card (SC), chip card, or integrated circuit card, is a card used to control access to a resource. It is typically a plastic credit card-sized card with an embedded integrated circuit (IC) chip. Many smart cards include a pattern of metal contacts to electrically connect to the internal chip. Others are contactless, and some are both. Smart cards can provide personal identification, authentication, data storage, and application processing. Applications include identification, financial, public transit, computer security, schools, and healthcare. Smart cards may provide strong security authentication for single sign-on (SSO) within organizations. Numerous nations have deployed smart cards throughout their populations.
A public key infrastructure (PKI) is a set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption.
In cryptography, a public key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes the public key and information about it, information about the identity of its owner, and the digital signature of an entity that has verified the certificate's contents. If the device examining the certificate trusts the issuer and finds the signature to be a valid signature of that issuer, then it can use the included public key to communicate securely with the certificate's subject. In email encryption, code signing, and e-signature systems, a certificate's subject is typically a person or organization. However, in Transport Layer Security (TLS) a certificate's subject is typically a computer or other device, though TLS certificates may identify organizations or individuals in addition to their core role in identifying devices. TLS, sometimes called by its older name Secure Sockets Layer (SSL), is notable for being a part of HTTPS, a protocol for securely browsing the web.
In cryptography and computer security, a root certificate is a public key certificate that identifies a root certificate authority (CA). Root certificates are self-signed and form the basis of an X.509-based public key infrastructure (PKI). Either it has matched Authority Key Identifier with Subject Key Identifier, in some cases there is no Authority Key identifier, then Issuer string should match with Subject string. For instance, the PKIs supporting HTTPS for secure web browsing and electronic signature schemes depend on a set of root certificates.
In cryptography, a certificate authority or certification authority (CA) is an entity that stores, signs, and issues digital certificates. A digital certificate certifies the ownership of a public key by the named subject of the certificate. This allows others to rely upon signatures or on assertions made about the private key that corresponds to the certified public key. A CA acts as a trusted third party—trusted both by the subject (owner) of the certificate and by the party relying upon the certificate. The format of these certificates is specified by the X.509 or EMV standard.
Gen Digital Inc. is a multinational software company co-headquartered in Tempe, Arizona and Prague, Czech Republic. The company provides cybersecurity software and services. Gen is a Fortune 500 company and a member of the S&P 500 stock-market index. The company also has development centers in Pune, Chennai and Bangalore. Its portfolio includes Norton, Avast, LifeLock, Avira, AVG, ReputationDefender, and CCleaner.
HID Global Corporation is an American manufacturer of secure identity products. The company is an subsidiary of Assa Abloy, a multinational door and access control conglomerate. Björn Lidefelt was appointed CEO on 27 January 2020. He succeeded Stefan Widing, who led HID Global for over four years.
Ivanti is an IT software company headquartered in South Jordan, Utah, United States. It produces software for IT Security, IT Service Management, IT Asset Management, Unified Endpoint Management, Identity Management and supply chain management. It was formed in January 2017 with the merger of LANDESK and HEAT Software, and later acquired Cherwell Software. The company became more widely known after several major security incidents related to the VPN hardware it sells.
Gemalto was an international digital security company providing software applications, secure personal devices such as smart cards and tokens, e-wallets and managed services. It was formed in June 2006 by the merger of two companies, Axalto and Gemplus International. Gemalto N.V.'s revenue in 2018 was €2.969 billion.
GeoTrust is a digital certificate provider. The GeoTrust brand was bought by Symantec from Verisign in 2010, but agreed to sell the certificate business in August 2017 to private equity and growth capital firm Thoma Bravo LLC. GeoTrust was the first certificate authority to use the domain-validated certificate method which accounts for 70 percent of all SSL certificates on the Internet. By 2006, GeoTrust was the 2nd largest certificate authority in the world with 26.7 percent market share according to independent survey company Netcraft.
Mobile identity is a development of online authentication and digital signatures, where the SIM card of one's mobile phone works as an identity tool. Mobile identity enables legally binding authentication and transaction signing for online banking, payment confirmation, corporate services, and consuming online content. The user's certificates are maintained on the telecom operator's SIM card and in order to use them, the user has to enter a personal, secret PIN code. When using mobile identity, no separate card reader is needed, as the phone itself already performs both functions.
DigiCert, Inc. is a digital security company headquartered in Lehi, Utah. DigiCert provides public key infrastructure (PKI) and validation required for issuing digital certificates or TLS/SSL certificates, acting as a certificate authority (CA) and trusted third party.
The Certification Authority Browser Forum, also known as the CA/Browser Forum, is a voluntary consortium of certification authorities, vendors of Internet browser and secure email software, operating systems, and other PKI-enabled applications that promulgates industry guidelines governing the issuance and management of X.509 v.3 digital certificates that chain to a trust anchor embedded in such applications. Its guidelines cover certificates used for the SSL/TLS protocol and code signing, as well as system and network security of certificate authorities.
StartCom was a certificate authority founded in Eilat, Israel, and later based in Beijing, China, that had three main activities: StartCom Enterprise Linux, StartSSL and MediaHost. StartCom set up branch offices in China, Hong Kong, the United Kingdom and Spain. Due to multiple faults on the company's end, all StartCom certificates were removed from Mozilla Firefox in October 2016 and Google Chrome in March 2017, including certificates previously issued, with similar removals from other browsers expected to follow.
Gujarat Narmada Valley Fertilizers & Chemicals (GNFC) is an Indian manufacturer of fertilizers and chemicals. GNFC was founded in 1976, jointly promoted by the Government of Gujarat and the Gujarat State Fertilizers and Chemicals (GSFC).
F. William Conner is an American business executive. Conner has worked across a variety of high-tech industries, specializing in corporate turnaround, cybersecurity, data and infrastructure.
DigiNotar was a Dutch certificate authority, established in 1998 and acquired in January 2011 by VASCO Data Security International, Inc. The company was hacked in June 2011 and it issued hundreds of fake certificates, some of which were used for man-in-the-middle attacks on Iranian Gmail users. The company was declared bankrupt in September 2011.
HyTrust, an Entrust company, is an American company. It specialized in security, compliance and control software for the virtualization of information technology infrastructure. The company was founded in 2007 and is based in Mountain View, California. Entrust Corp. acquired it in January 2021.
The FIDOAlliance is an open industry association launched in February 2013 whose stated mission is to develop and promote authentication standards that "help reduce the world’s over-reliance on passwords". FIDO addresses the lack of interoperability among devices that use strong authentication and reduces the problems users face creating and remembering multiple usernames and passwords.
WebUSB is a JavaScript application programming interface (API) specification for securely providing access to USB devices from web applications.