OmniTrust PKI
OmniTrust PKI is a modern Public Key Infrastructure (PKI) system. It provides a modern, cloud-native, API-first platform for certificate authority management, certificate issuance, enrollment workflows, revocation, validation, key management, and operational control. It supports enterprise PKI use cases across DevOps, cloud infrastructure, zero-trust architectures, and regulated environments.
OmniTrust PKI integrates with HSMs via the industry-standard PKCS#11 API, allowing it to delegate key generation and signing. This solution enables organizations to modernize their private PKI while protecting CA keys and other high-value cryptographic assets inside a tamper-proof, high-performance Securosys HSM.
Benefits
- Modern enterprise private PKI. Replace or modernize legacy PKI environments with OmniTrust PKI while protecting keys in Securosys HSMs. OmniTrust PKI provides certificate lifecycle management, CA hierarchy management, offers REST and gRPC APIs with OpenAPI specifications, supports multi-tenant operation and OIDC-based authentication, and enrollment protocols including ACME, SCEP, CMP, and EST.
- Hardware-backed protection for PKI trust anchors. Protect CA private keys, signing keys, and other critical PKI key material inside Primus HSM or CloudHSM. Reduce exposure and strengthen the cryptographic foundation of enterprise trust.
- Post-quantum-ready PKI infrastructure. Build a PKI foundation that supports both classical and post-quantum cryptography, helping organizations prepare for future cryptographic migration requirements, without redesigning their HSM integration.
- Flexible deployment: on-premise or cloud. Organizations can use on-premise Securosys Primus HSM or Securosys CloudHSM. The deployment choice is transparent to OmniTrust PKI and handled by the Primus PKCS#11 Provider.
- Compliance-ready security architecture. This integration supports organizations that require HSM-backed key storage, strong operational control, auditability, separation of duties, and secure cryptographic key management for regulated PKI environments.
Get Started
Follow the installation guide to learn how to set up OmniTrust PKI together with Primus HSM.