Zero Trust Framework for Virtual Infrastructure

This document is a technical report that outlines the Entrust Zero Trust framework for securing virtual infrastructure in organizations adopting Zero Trust models. It emphasizes the necessity of authenticating and authorizing administrators to access resources as part of a comprehensive security strategy. The framework utilizes Entrust CloudControl to extend security across distributed private cloud environments, operating on the principle that no entity can be trusted by default. It details the implementation of role-based and attribute-based access control (RBAC/ABAC) to restrict access based on defined roles and privileges. The report also discusses key features such as machine identity verification, keys and secrets management, and secondary approvals for critical actions. Additionally, it describes how CloudControl facilitates multi-factor authentication (MFA) and compliance automation while ensuring continuous monitoring and logging of access requests. The document concludes with an overview of the integration of Entrust PKI services to support machine identity and secure virtual environments.