Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | AWS Private CA by AWS View product | Entrust PKI by Entrust View product |
|---|---|---|
| Overview | ||
| What it is | AWS Private CA delivers SCEP connector for MDM for internal TLS encryption. Explore its Identity Security capabilities, deployment choices and top competitors. | Free trial available. Entrust PKI by Entrust offers OCSP responders and enterprise CA deployment. Compare features, use cases and leading Identity Security alternatives. |
| Product type | Managed Private Certificate Authority Service | Enterprise Public Key Infrastructure (PKI) |
| Best for | Cross-industry, Financial Services, Healthcare, Government, Manufacturing, Technology | Cross-industry, Enterprise IT, Telecom, Government |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | SaaSCloudOn-Premise |
| Deployment details | Cloud; AWS Cloud-native managed PKI service | Cloud SaaS; On-premises; Cloud-hosted managed PKI; On-premises software |
| Data residency | Private CA keys generated and stored in customer-selected AWS Region HSM | Global; US; EU; APAC |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | AWS Certificate ManagerAmazon EKSAWS IoT Coreenterprise mobile and server clients | Enterprise NetworksCloud EndpointsMobile |
| Compliance | FIPS 140-2 Level 3, SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High | FIPS 140-2WebTrustRFC 5280 |
| Integrations & coverage | ||
| Integrations | AWS Certificate Manager (ACM)AWS KMSAWS CloudTrailMicrosoft IntuneJamfKubernetes cert-managerAWS IoT Core | Entrust nShield HSMActive DirectoryIntuneJamfSCEP |
| Industries | Cross-industryFinancial ServicesHealthcareGovernmentManufacturingTechnology | Cross-industryEnterprise ITTelecomGovernment |
| Regions | Global (supported AWS Regions) | Global |
| Vendor | ||
| Company | AWS | Entrust |
| Headquarters | Seattle, Washington, USA | Shakopee, Minnesota, USA |
| Company size | 100,000+ | 2,500+ |
| Founded | 2006 | 1969 |
Overview
What it is
AWS Private CA
AWS Private CA delivers SCEP connector for MDM for internal TLS encryption. Explore its Identity Security capabilities, deployment choices and top competitors.Entrust PKI
Free trial available. Entrust PKI by Entrust offers OCSP responders and enterprise CA deployment. Compare features, use cases and leading Identity Security alternatives.Product type
AWS Private CA
Managed Private Certificate Authority ServiceEntrust PKI
Enterprise Public Key Infrastructure (PKI)Best for
AWS Private CA
Cross-industry, Financial Services, Healthcare, Government, Manufacturing, TechnologyEntrust PKI
Cross-industry, Enterprise IT, Telecom, GovernmentPricing
Pricing model
AWS Private CA
Contact VendorEntrust PKI
Contact VendorFree trial
AWS Private CA
Free trial: yesEntrust PKI
Free trial: yesDeployment
Deployment options
AWS Private CA
Cloud
Entrust PKI
SaaSCloudOn-Premise
Deployment details
AWS Private CA
Cloud; AWS Cloud-native managed PKI serviceEntrust PKI
Cloud SaaS; On-premises; Cloud-hosted managed PKI; On-premises softwareData residency
AWS Private CA
Private CA keys generated and stored in customer-selected AWS Region HSMEntrust PKI
Global; US; EU; APACKey features
What it offers
AWS Private CA
- Private X.509 certificate issuance
- FIPS 140-2 Level 3 HSM key protection
- Custom certificate extensions and templates
- Automated renewal with AWS Certificate Manager
- CRL and OCSP revocation endpoints
- SCEP connector for MDM
- Internal TLS encryption
- Mutual TLS (mTLS) service-to-service auth
Entrust PKI
- Enterprise CA deployment
- Automated certificate enrollment
- SCEP/EST protocol support
- OCSP responders
- 802.1X certificate issuance
- IoT credentialing
Platform & access
API access
AWS Private CA
API access: yesEntrust PKI
API access: yesSingle sign-on (SSO)
AWS Private CA
SSO: yesEntrust PKI
SSO: yesRole-based access (RBAC)
AWS Private CA
RBAC: yesEntrust PKI
RBAC: yesMulti-tenant
AWS Private CA
Multi-tenant: yesEntrust PKI
Multi-tenant: yesMobile app
AWS Private CA
Mobile app: yesEntrust PKI
Mobile app: noSupported platforms
AWS Private CA
AWS Certificate ManagerAmazon EKSAWS IoT Coreenterprise mobile and server clients
Entrust PKI
Enterprise NetworksCloud EndpointsMobile
Compliance
AWS Private CA
FIPS 140-2 Level 3, SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High
Entrust PKI
FIPS 140-2WebTrustRFC 5280
Integrations & coverage
Integrations
AWS Private CA
AWS Certificate Manager (ACM)AWS KMSAWS CloudTrailMicrosoft IntuneJamfKubernetes cert-managerAWS IoT Core
Entrust PKI
Entrust nShield HSMActive DirectoryIntuneJamfSCEP
Industries
AWS Private CA
Cross-industryFinancial ServicesHealthcareGovernmentManufacturingTechnology
Entrust PKI
Cross-industryEnterprise ITTelecomGovernment
Regions
AWS Private CA
Global (supported AWS Regions)
Entrust PKI
Global
Vendor
Company
AWS Private CA
AWSEntrust PKI
EntrustHeadquarters
AWS Private CA
Seattle, Washington, USAEntrust PKI
Shakopee, Minnesota, USACompany size
AWS Private CA
100,000+Entrust PKI
2,500+Founded
AWS Private CA
2006Entrust PKI
1969