Sub Rosa Pro for iOS

PKard Reader App

Sub Rosa Pro v4

**COMING SOONA subscription feature which will allow you to sign and edit PDF documents with our Sub Rosa suite of apps. LEARN MORE HERE** 

Sub Rosa® Pro supports secure web site access from an iPad or iPhone with strong two-factor authentication. Instead of a username and password, Sub Rosa Pro uses either U.S. Government CAC or PIV smart cards and PINs or derived credentials to authenticate to the site. Supported card readers include: Thursby's PKard Reader family and Tactivo.
Sign, encrypt, and decrypt email through the secure browser with zero data-at-rest (DAR). New features in v4 also give you full access to your OWA calendar, allowing you to view, create, and respond to calendar events. Web, web email, portal, and collaboration site access are supported, including AKO, NKO, and AF Portals. U.S. phone and email technical support is included for individual users at no additional cost.
Enterprise deployments are available through Apple's Volume Purchase Program (VPP)and can be configured to work with various Mobile Device Management (MDM) platforms. Call +1(817) 478-5070 or email for more information. 

PKard Reader (Sub Rosa)   PKard Reader App Enter Pin   PKard Reader App Connecting with OutLook   Sub Rosa Pro Calendar Options  Sub Rosa Pro Create OWA Calendar EventFIPS


Available on the App Store





  • **COMING SOON** A subscription feature which will allow you to sign and edit PDF documents with our Sub Rosa suite of apps. Click HERE to learn more.
  • iOS 8.4 or higher, iPad, iPhone or iPod, fully supported commercial software with a ten-year history
  • Sign, encrypt, decrypt email including the ability to configure zero-data-at-rest on the device
  • Full access to OWA calendars so you can view, edit, create, and respond to events
  • Secure browser, supporting Microsoft Outlook Web Access (OWA) web email, Defense Travel Systems (DTS), SharePoint portals, and collaboration sites - e.g. AKO, NKO, and AF Portal
  • Multi-card, supporting CAC, CAC Dual Persona, PIV, and PIV-I
  • Supports derived credentials (including Purebred)
  • Multi-reader: Thursby's PKard Reader Family and Tactivo
  • Multi-app part of a secure app ecosystem leveraging the PKard Toolkit for iOS
  • Full HTML5 and JavaScript support
  • Made and supported in the USA by Apple-Microsoft specialists from Arlington, Texas

Additional capabilities

  • Supports U.S. Government standards including TAA, HSPD-12, OMB-11-11, FIPS 140-2, FIPS 201 & GSA Approved Product List (APL)
  • The iTunes app is an individual/consumer distribution, custom builds are available for organizations, either standalone, or as part of third party mobile management solutions


PKard Pro







  • Android secure mobile CAC/PIV smart card web browser & authentication agent app - here
  • If you plan to purchase a Thursby reader and don't need support for derived credentials you already have free access to the Sub Rosa app.

More information


User Guide

Two-factor Authentication for Apple and Android Mobile Devices

Need to use a CAC, PIV, or Derived Credential on a phone or tablet? Thursby by Identiv's Sub Rosa suite of products provides you with the ability to access two-factor websites; sign, encrypt, and decrypt emails; view, edit, and create calendar events; and edit and sign PDF documents from your iPhone, iPad, or Android phone or tablet.

Sign, Encrypt, and Decrypt Email on a Mobile Device

Tired of dragging your laptop around? Learn how you can access your calendar and sign, encrypt, and decrypt email with your CAC, PIV, or Derived Credential (such as Purebred) from any mobile device.

NEW - OWA Calendar and Mail Features in Sub Rosa for iOS

Sub Rosa combines work and life more than ever before! Use your CAC or PIV to browse two-factor websites, read signed and encrypted email, and respond to calendar events on your iPad or iPhone.

Provisioning a Derived Credential with QR Code

This video shows how you can use a QR Code to load a derived credential into the Thursby PKard apps on iOS or Android.

Provisioning a Derived Credential in One Step

This video shows how you can provision a derived credential onto an iPad with PKard Pro using only a PIV card and Thursby's PKard Reader. This enrollment method is SP 800-157 compliant.

Sub Rosa Pro for iOS Video

A short demonstration of how you can use Thursby’s PKard Pro to access two-factor websites with derived credentials from Entrust. PKard Pro is also compatible with various readers and smart cards.