Entrust has unveiled enhancements to its Cryptographic Security Platform (CSP) aimed at enabling organizations to effectively transform Cryptographic Bill of Materials (CBOMs) data into actionable insights.
These improvements come at a crucial time as government bodies, financial services, healthcare institutions, and key infrastructure operators face escalating cyber threats, reduced certificate life spans, the rapid expansion of AI and machine identities, shifting compliance protocols, and the move toward post-quantum cryptography.
Navigating Compliance and Cryptographic Visibility
To manage these changes, a thorough understanding of where cryptography is utilized and its dependencies is essential. The industry is placing an increasing emphasis on cryptographic inventory and preparing for post-quantum transitions. Regulatory frameworks such as the U.S. Executive Order and Europe’s DORA and NIS2 regulations, which mandate CBOMs-based inventories, underline the importance of grasping cryptographic assets, their interdependencies, and associated risks.
Entrust's Cryptographic Security Platform now features new CBOM import and export functionalities
By linking cryptographic discovery and inventory management with governance, automation, and planning for post-quantum migration, organizations can pinpoint and remediate risks in complex environments. Furthermore, Entrust's Cryptographic Security Platform now features new CBOM import and export functionalities, enabling organizations to develop comprehensive cryptographic inventories, analyze dependencies, and translate cryptographic insights into operational strategies.
Deployment Options and Operational Flexibility
The platform allows organizations to identify cryptographic assets at risk of noncompliance, ascertain which systems and apps rely on them, evaluate the risks involved, and prioritize remediation strategies. Additionally, the CSP offers deployment either as-a-service or on-premises, thus providing organizations with a more adaptable approach to accessing the upgraded CBOM functionalities while maintaining on-premises deployment capabilities.
"A CBOM is more than a static inventory," commented Michael Klieman, Global Vice President of Product Management at Entrust. "Security teams need to connect CBOM data with the systems and applications that depend on cryptography, understand where risk is concentrated and determine what actions to take next. The addition of CBOM support to the platform helps organizations move from documenting cryptographic assets to actively governing and securing them."
Enhancing Governance and Minimizing Cryptographic Risks
Once an organization has visibility into its cryptographic assets and dependencies, it must convert this knowledge into effective governance, operational resilience, and preparation for future cryptographic shifts. Entrust's CSP facilitates the transition from discovery to actionable decisions across these areas:
- Strengthen governance and minimize cryptographic risks: Organizations need to know where cryptography is applied and how various assets, systems, and applications depend on it. The updated CBOM import and export features, in conjunction with cryptographic discovery, compliance, and operational health enhancements, allow for the construction of detailed inventories, the correlation of this data with discovered assets, and improved governance over enterprise keys, certificates, and secrets.
- Automate certificate management: With the growing volume of certificates in both public and private PKI environments, automation becomes pivotal. New Ansible-based features facilitate certificate lifecycle automation, enabling teams to manage deployment and administration of certificates across tailored environments efficiently, thereby reducing manual processes and service interruptions.
- Prepare for post-quantum changes: In readiness for post-quantum cryptography, recognizing where cryptography is deployed and which systems are reliant is fundamental. Enhanced support for composite algorithms aids organizations in adopting gradual post-quantum migration strategies, while SPIRE-based capabilities cater to trusted identities for AI agents and non-human workloads. The CSP’s availability as a service or on-premises offers organizations greater flexibility to align with operational, security, and data sovereignty requirements.
Strategic Approach to Crypto-Agility
By converging cryptographic inventory, governance, automation, and post-quantum readiness onto a unified platform, Entrust assists organizations in translating cryptographic intelligence into actionable initiatives, laying the groundwork for sustained crypto-agility.
"Knowing where cryptography lives isn't enough anymore. The number of certificates and other cryptographic material is growing rapidly. Machine and AI identities are multiplying, and the deadline to transition to post-quantum algorithms is closing in. Security teams cannot treat cryptographic inventory as a static exercise. Organizations that connect cryptographic inventory, governance, automation, and post-quantum readiness will be better positioned to manage crypto-agility as standards evolve," said Jennifer Glenn, Research Director for Information and Data Security, IDC.
