Entrust CSP Key Manager

Encryption Key and Secrets Management Solutions

Organizations face growing challenges managing cryptographic keys and secrets as IT environments become more distributed, cloud‑based, and regulated. Keys, credentials, and API tokens are often spread across applications, clouds, and regions, reducing visibility and making it difficult to enforce consistent policies, meet audit requirements, or limit operational risk.

Traditional centralized tools struggle to scale and provide limited insight into how cryptographic assets are used and governed.

The Entrust Cryptographic Security Platform Key Manager (formerly KeyControl) addresses these issues by combining traditional key lifecycle management with a decentralized, vault‑based architecture and centralized visibility and governance.

pkiguard Products

Encryption Key and Secrets Management Solutions

#EncryptionKeyandSecretsManagementSolutions
Our Price: Request a Quote

Get a Quote

Details that matter

Database Protection

Entrust CSP Key Manager and Entrust nShield® hardware security modules (HSMs) integrate with leading database vendors to deliver enhanced database protection with centralized, automated encryption key management software and a root of trust for critical encryption keys.

Backup and Recovery

Entrust CSP Key Manager and Entrust nShield HSMs integrate with leading data backup and recovery solutions to deliver enhanced data protection across on-premises, hybrid, and multi-cloud deployments. This centralized key management system supports long-term protection and recovery planning.

Hyperconverged Infrastructure

Entrust CSP Key Manager integrates with leading providers to deliver a scalable, cost-effective, future-proofed alternative to traditional data centers. Key Manager acts as a pre-integrated, always-on universal key management server for your KMIP-compatible virtualized environment.

Storage

Entrust CSP Key Manager integrates with data storage products to automate and simplify the lifecycle of encryption keys, including key creation, storage, distribution, rotation, and revocation.

BYOK and HYOK

Bring Your Own Key (BYOK) and Hold Your Own Key (HYOK) integrations with CSP Key Manager reduce reliance on cloud provider trust models while enabling secure, compliant cloud adoption.

Secrets

Enables organizations to securely store and strictly control access to passwords, token certificates, and cryptographic keys for protecting resources such as cloud services, databases, servers, or containers.

Documentation

Download product documentation and resources

CSP Key and Secrets Management

In-depth brochure covering common use cases for CSP Key Manager.

Solution Brochure

Entrust Cryptographic Security Platform – Compliance Manager

Get 360-degree visibility, automation, and seamless orchestration over the lifecycles of keys, certificates, and secrets.

Data Sheet

CSP Key and Secrets Management

Brief, high-level overview of CSP Key Manager.

Datasheet

CSP Compliance Pack

Facilitating complience of key management with industry specific templates for national and international standards.

Datasheet

CSP Vault for KMIP

Managing cryptographic keys using the Key Management Interoperability Protocol (KMIP).

Datasheet

CSP Key Management Vault for PASM

Manage and control SSH access across on-premises and cloud environments.

Datasheet

CSP Vault for Databases - Microsoft SQL

CSP Key Manager securing Microsoft SQL database TDE encryption keys.

Solution Brochure

CSP Vault for Databases – Oracle

Secure your data with Oracle Database TDE encryption keys.

Datasheet

CSP Vault for TDE Databases - MariaDB

Securing MariaDB TDE encryption keys.

Datasheet

CSP Product and Professional Service Bundle for Database Encryption

Deploy database encryption and simplify compliance with Entrust Platform Bundles.

Datasheet

CSP Vault for Cloud Keys - AWS KMS XKS

Control access to cloud-based cryptographic keys using Cryptographic Security Platform and AWS KMS External Key Store (XKS).

Datasheet

CSP Vault for Cloud Keys – Azure DKE

Protecting highly sensitive Microsoft 365 data using Double Key Encryption (DKE).

Datasheet

Encryption Key and Secrets Management Solutions