home/glossary/Trust Anchor

Trust Anchor

nounid 4494·updated May 12, 2026
candidate

An established point of trust (usually based on the authority of some person, office, or organization) from which an entity begins the validation of an authorized process or authorized (signed) package. A "trust anchor" is sometimes defined as just a public key used for different purposes (e.g., validating a Certification Authority, validating a signed software package or key, validating the process [or person] loading the signed software or key).

polysemousMWE

Classifications

Entity Type

Credential0%rule-basedmulti_axis_classifier_low_confidence.v1

Sensitivity

Restricted80%llm-generatedllm:claude-haiku-4-5

Information Class

60%llm-generatedllm:claude-haiku-4-5

Variants

plural
Trust Anchors
possessive
Trust Anchor's
pluralpossessive
Trust Anchors'

Framework definitions

NISTIR 7298: Glossary of Key Information Security Terms, Revision 23 sensesview framework →
§1
A public key and the name of a certification authority that is used to validate the first certificate in a sequence of certificates. The trust anchor’s public key is used to verify the signature on a certificate issued by a trust anchor certification authority. The security of the validation process depends upon the authenticity and integrity of the trust anchor. Trust anchors are often distributed as self-signed certificates.
§2 · sense_2_pending_review
An established point of trust (usually based on the authority of some person, office, or organization) from which an entity begins the validation of an authorized process or authorized (signed) package. A "trust anchor" is sometimes defined as just a public key used for different purposes (e.g., validating a Certification Authority, validating a signed software package or key, validating the process [or person] loading the signed software or key).
§3 · sense_3_pending_review
A public or symmetric key that is trusted because it is directly built into hardware or software, or securely provisioned via out-of-band means, rather than because it is vouched for by another trusted entity (e.g. in a public key certificate).
CNSSI-4009 (Glossary of Information Assurance Terms)1 senseview framework →
§1
An established point of trust (usually based on the authority of some person, office, or organization) from which an entity begins the validation of an authorized process or authorized (signed) package. A "trust anchor" is sometimes defined as just a public key used for different purposes (e.g., validating a Certification Authority, validating a signed software package or key, validating the process [or person] loading the signed software or key).
NIST SP 800-631 senseview framework →
§1
A public or symmetric key that is trusted because it is directly built into hardware or software, or securely provisioned via out-of-band means, rather than because it is vouched for by another trusted entity (e.g. in a public key certificate).
NIST SP 800-57 Part 11 senseview framework →
§1
A public key and the name of a certification authority that is used to validate the first certificate in a sequence of certificates. The trust anchor’s public key is used to verify the signature on a certificate issued by a trust anchor certification authority. The security of the validation process depends upon the authenticity and integrity of the trust anchor. Trust anchors are often distributed as self-signed certificates.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.