ZoTrus Application Security Solution
Code Signing, Timestamps, Local Signing, Cloud Signing
- Zero trust applications without a trusted identity.
- Only trust applications with trusted digital signature and timestamp.
- Application software digital signature can be either local USB Key signing or cloud-based HSM signing.
- Digitally signed application software and upgrade packages are distributed only through HTTPS encrypted channel.
- Only install software update packages with trusted digital signature and timestamp signature.
Choose the Right Application Security Service
Code Signing in Cloud HSM
OV Edition
3988 Yuan/Year
- Sign now, no limit
EV Edition
4988 Yuan/Year
- Sign now, no limit
Code Signing in Local UKey
OV Edition
3988 Yuan/Year
- Sign with UKey,
delivered within 24 hours
EV Edition
4988 Yuan/Year
- Sign with UKey,
delivered within 24 hours
Choosing code signing service, comparing brand, service, and technical.
ZoTrus Technology founder started by selling code signing certificates and was among the first in China to develop its own brand of code signing certificates. With over 20 years of experience in the industry, understanding every subtle need of users. ZoTrus carefully selects CAs to provide a variety of customized products and services to meet the diverse code signing application needs at different stages of development. ZoTrus is the first in China to implement a dual-algorithm (RSA/SM2) code signing cloud service, innovatively meeting users' application needs for achieving global trust and cryptographic compliance with one time signing.
Top CA Brand
From the six CAs designated by Microsoft, ZoTrus selected Sectigo offering the best cost-performance ratio, a well-established brand with 2004 roots, offers better compatibility with Windows systems and supports more older operating systems.
Two methods: cloud signing and local signing
Two signing methods are offered: cloud signing, representing the future trend as code signing certificates are increasingly shorter in validity, and eliminating the need to wait for the USB key to be shipped; and local signing, a traditional method that does not rely on cloud services, suitable for signing environments without Internet access.Users can only choose one signing method because the key can only be stored in one location.
Use China-made UKey
For users choosing local signing, a China-made USB Key hardware with FIPS certification is used (optional USB interface or Type C interface), delivered via SF Express from Shenzhen, without the need to wait for the lengthy dozen-day US courier.
Dual algorithms: RSA and SM2
The plan will provide cloud signing users with dual-algorithm (RSA/SM2) dual signatures and dual-algorithm dual-timestamp signatures free of charge, meeting the cryptographic compliance signature application requirements of China operating systems.The plan is to provide cloud-signing users with free code signing services using hybrid PQC algorithms (RSA+MLDSA and SM2+MLDSA).