Overview of the Partner Product
ZetaCA is a sovereign PKI solution developed by ZetaCert Technologies (France). It provides X.509v3 certificate issuance, CRL and OCSP revocation, certificate lifecycle management, and a web-based administration interface. ZetaCA supports multiple key storage backends: software (Fernet-encrypted), HSM via PKCS#11 (Utimaco, Thales Luna, SoftHSM2), and post-quantum algorithms (ML-DSA-44/65/87 via Utimaco QuantumProtect, SLH-DSA via oqs-provider). Deployed as Docker containers with optional high-availability (Patroni PostgreSQL cluster). ZetaCA integrates with enterprise CLM platforms via the PKIFactor connector.
Overview of Utimaco u.trust GP HSM Se-Series
The Utimaco u.trust GP HSM Se-Series is a hardware security module developed by Utimaco IS GmbH. It is a physically protected, specialized computer unit designed to perform sensitive cryptographic tasks and securely manage and store cryptographic keys and data. The u.trust GP HSM can be used as a universal, independent security component for heterogeneous computer systems.
Joint Value Proposition
The combination of ZetaCA and Utimaco u.trust GP HSM delivers a sovereign, FIPS-certified PKI with post-quantum readiness. CA private keys are generated and stored exclusively within the HSM. ZetaCA leverages PKCS#11 R3 for classical algorithms (RSA-2048/3072/4096, ECDSA P-256/P-384/P-521) and Utimaco QuantumProtect VDM for ML-DSA post-quantum signatures. This enables organizations to deploy quantum-safe PKI today, with hybrid/composite certificate support for a smooth migration path.