ZoTrus Application Security Solution
Code Signing, Timestamps, Local Signing, Cloud Signing
- Zero trust applications without a trusted identity.
- Only trust applications with trusted digital signature and timestamp.
- Application software digital signature can be either local USB Key signing or cloud-based HSM signing.
- Digitally signed application software and upgrade packages are distributed only through HTTPS encrypted channel.
- Only install software update packages with trusted digital signature and timestamp signature.
Choose the Right Application Security Service
Code Signing in Cloud HSM
IV Edition
1388 Yuan/Year
- Sign now, no limit
OV Edition
2988 Yuan/Year
- Sign now, no limit
EV Edition
3988 Yuan/Year
- Sign now, no limit
Code Signing in Local UKey
OV Edition Pro
3988 Yuan/Year
- Sign with UKey,
delivered within 24 hours
EV Edition Pro
4988 Yuan/Year
- Sign with UKey,
delivered within 24 hours
Choosing code signing service, comparing brand, service, and technical.
ZoTrus Technology founder started by selling code signing certificates and was among the first in China to develop its own brand of code signing certificates. With over 20 years of experience in the industry, understanding every subtle need of users. ZoTrus carefully selects CAs to provide a variety of customized products and services to meet the diverse code signing application needs at different stages of development. ZoTrus is the first in China to implement a dual-algorithm (RSA/SM2) code signing cloud service, innovatively meeting users' application needs for achieving global trust and cryptographic compliance with one time signing.
Dual CA Brands
From the six CAs designated by Microsoft, ZoTrus selected two CAs offering the best cost-performance ratio: Sectigo, a well-established brand with 2004 roots, offers better compatibility with Windows systems and supports more older operating systems. SSL.com, provides a more affordable price and a wider selection of signing methods. This caters to the diverse needs of users regarding brand and application.
Two methods: cloud signing and local signing
Two signing methods are offered: cloud signing, representing the future trend as code signing certificates are increasingly shorter in validity, and eliminating the need to wait for the USB key to be shipped; and local signing, a traditional method that does not rely on cloud services, suitable for signing environments without Internet access.Users can only choose one signing method because the key can only be stored in one location.
Dual UKey support: domestic and foreign products
For users who choose local signing, selecting a Sectigo certificate uses China made USB Key hardware and is shipped via SF Express in Shenzhen, eliminating the need to wait for a 10-day US shipment.Users who choose SSL.com certificates can purchase a designated foreign brand USB key – Yubikey by themselves, without having to wait for US shipment.
Dual algorithms: RSA and SM2
The plan will provide cloud signing users with dual-algorithm (RSA/SM2) dual signatures and dual-algorithm dual-timestamp signatures free of charge, meeting the cryptographic compliance signature application requirements of China operating systems.The plan is to provide cloud-signing users with free code signing services using hybrid PQC algorithms (RSA+MLDSA and SM2+MLDSA).