Keytos Blog

Announcing security key management for YubiKeys, FIDO2 passkeys, and Entra CBA smart cards in Keytos Shield

Announcing Security Key Management in Keytos Shield

November 11, 2026

Keytos Team

Keytos Shield now manages YubiKeys and security keys for Entra ID. Track inventory, onboard FIDO2 passkeys and Entra CBA, and audit every key in one place.

How to secure Wi-Fi OT networks using RADIUS, EAP-TLS certificates, and dynamic VLANs with EZRADIUS cloud RADIUS

How to Isolate and Secure Wi-Fi OT (Operational Technology) Networks Using RADIUS

November 10, 2026

Aaron Crawfis

Learn how to secure Wi-Fi OT networks using RADIUS, EAP-TLS certificates, MAB, and dynamic VLANs, and how to isolate OT devices from your corporate network.

ChromeOS legacy SCEP profiles are being deprecated on June 30, 2027. Keytos Shield already supports Chromebook SCEP certificates through the new Certificate Provisioning API

Google Is Retiring Legacy SCEP for Chromebooks. What Does It Mean for Your Wi-Fi Certificates?

November 6, 2026

Aaron Crawfis

Google retires legacy ChromeOS SCEP profiles on June 30, 2027. Learn what the Certificate Provisioning API changes and how Keytos Shield issues Chromebook certificates.

What are verifiable credentials and how to use them with Microsoft Entra Verified ID for phishing-resistant onboarding and account recovery

What are Verifiable Credentials and How Do I Use Them?

November 3, 2026

Aaron Crawfis

Learn what verifiable credentials are, how they work in Entra ID, how to set them up, and how to use them for onboarding and account recovery without SMS or help desk calls.

Keytos Shield, the best cloud NAC and RADIUS for Microsoft shops using Entra ID and Intune

What is the Best Cloud NAC for Entra ID

November 1, 2026

Igal Flegmann

Discover the best cloud NAC solution for Entra ID and Intune, ensuring secure network access for Microsoft 365 environments while meeting and exceeding compliance requirements such as ISO 27001, CMMC, and SOC 2.

Best network access control (NAC) solutions for Entra ID and Intune in 2026, securing laptops, phones, Wi-Fi, and users

The 5 Best NAC Solutions for Entra ID and Intune Shops in 2026, Ranked

October 25, 2026

Igal Flegmann

Compare the 7 best NAC solutions for Entra ID and Intune in 2026. We rank Keytos Shield, EZRADIUS, Portnox, SecureW2, Juniper Mist Access Assurance, HPE Aruba Central NAC and Cisco ISE.

Synced vs. device-bound passkeys in Entra ID - which passkey type should you deploy for phishing-resistant MFA

Should I Use Synced or Device-Bound Passkeys in Entra ID?

October 23, 2026

Aaron Crawfis

Synced vs. device-bound passkeys in Entra ID - learn where the private key lives, the risks of syncing, and the two-passkey setup we recommend for every user.

Can I use passkeys for Wi-Fi networks? A FIDO2 passkey authenticating to a WPA Enterprise Wi-Fi network through a RADIUS server using the EAP-FIDO draft

Can I Use Passkeys for Wi-Fi Networks? A Look at EAP-FIDO

October 21, 2026

Aaron Crawfis

Can you use passkeys for Wi-Fi? Learn how WPA Enterprise and RADIUS work, what the IETF EAP-FIDO draft proposes, and how to get phishing-resistant Wi-Fi today.

eMudhra CA key compromise explained - eight intermediate certificate authority private keys so weak that one was the number 4

eMudhra CA Key Compromise Explained: What Happened, Who's Affected, and What to Do

October 21, 2026 - Updated: October 26, 2026

Igal Flegmann

Eight eMudhra intermediate CA keys were so weak one was the number 4. Learn what happened, which CAs are affected, and how to protect your apps and devices.

Keytos Security Blog