Used SuperSU to do a full unroot but custom ROM remnants (and some functions I assume) were still present. Root checker resulted in a 'Not Rooted' message, but Entrust still would not load. Removed the custom ROM and flashed the factory ROM again. Works fine, but I gave up too much functionality (carrier and manufacturer bloatware, data throttling, & restricted hot-spot), so I went back to the root. In the meantime will have to get that keychain thingy from the company when I get to the planet later this week. I do have an app guy I know trying a couple of workarounds. We will see, but I am not holding out much hope. I guess you could also use the company iPad, but not being an Apple guy I am really not sure.

You would think we were guarding national secrets.