Preparing for post-quantum cryptography requires security teams to answer two connected questions: where is vulnerable cryptography being used, and which systems will be affected when it changes?
Entrust is targeting that challenge with an expansion of its Cryptographic Security Platform, adding Cryptographic Bill of Materials (CBOM) import and export capabilities to connect inventory data with governance, automation and migration planning.
The company says the update helps organisations build more complete cryptographic inventories, understand dependencies, and prioritise remediation across complex environments.
For government agencies, financial institutions, healthcare providers and critical infrastructure operators, that visibility can inform decisions about which applications and services need attention first.
The focus aligns with Australian post-quantum preparedness advice. The Australian Signals Directorate’s Australian Cyber Security Centre identifies locating and inventorying traditional asymmetric cryptography, assessing the sensitivity of the systems and data it protects, and prioritising systems for transition as key steps in its LATICE framework.
Mapping dependencies adds an operational dimension to that inventory. Identifying a cryptographic asset that needs replacement is one step; understanding the applications and services that rely on it helps teams assess risk and plan the change.
“Security teams need to connect CBOM data with the systems and applications that depend on cryptography, understand where risk is concentrated, and determine what actions to take next,” said Michael Klieman, Global Vice President of Product Management at Entrust.
“The addition of CBOM support to the platform helps organisations move from documenting cryptographic assets to actively governing and securing them.”
Entrust says its new import and export capabilities work with cryptographic discovery, compliance and operational health functions to correlate inventory information with discovered assets and dependencies.
The platform’s expanded support for composite algorithms is intended to support phased post-quantum migration. New SPIRE-based capabilities also support trusted identities for AI agents and other non-human workloads, bringing emerging identity requirements into the broader cryptographic management process.
Alongside longer-term migration planning, the update addresses certificate operations. New Ansible-based capabilities extend certificate lifecycle automation across customised environments, with the aim of reducing manual effort and minimising service disruptions.
Jennifer Glenn, Research Director for Information and Data Security at IDC, said growing volumes of cryptographic material and machine identities were making ongoing management increasingly important.
“Security teams cannot treat cryptographic inventory as a static exercise,” Glenn said.
“Organisations that connect cryptographic inventory, governance, automation, and post-quantum readiness will be better positioned to manage crypto-agility as standards evolve.”
Entrust’s platform is available as a service or for on-premises deployment. The company says those options give organisations flexibility to address operational, security and data sovereignty requirements while building their capacity to manage cryptographic change.
