Keytos Blog
  • Documentation
  • Blog
  • About
  • Status
English Español
Contact us

Solutions

All-in-one platform Cloud PKI Cloud RADIUS Entra ID SSH Security key management SSL Monitoring
Keytos Shield

Cloud PKI, cloud RADIUS, passwordless onboarding, all in one platform.

Overview How it works Pricing Book a demo Start free trial Documentation
Cloud PKI

Cloud PKI for Azure, Intune, and Entra ID

Overview How it works Pricing Book a demo Start free trial Documentation
Cloud RADIUS

The best cloud RADIUS for Microsoft environments

Overview How it works Pricing Book a demo Start free trial Documentation
Entra ID SSH

Entra ID authentication to SSH endpoints

Overview How it works Pricing Book a demo Start free trial Documentation
EZCMS

Passwordless authentication onboarding for Entra ID

Overview How it works Pricing Book a demo Get started Documentation
SSL Monitoring

SSL certificate monitoring tool

Overview How it works Pricing Book a demo Start free trial Documentation

Blog

News PKI Passwordless Cloud Security Engineering

Keytos Security News

Featured More

Keytos Cloud PKI, RADIUS, and Smart Cards Now Available in Azure GCC High

Keytos Team Sep 16, 2026

Announcing Keytos Shield - A new all-in-one passwordless identity platform

Keytos Team Aug 31, 2026

PKI Guides and Best Practices

Featured More

eMudhra CA Key Compromise Explained: What Happened, Who's Affected, and What to Do

Igal Flegmann Oct 21, 2026

How to Migrate a Windows Certificate Authority (CA) to the Cloud

Keytos Team Sep 28, 2026

Passwordless Guides and Best Practices

Featured More

How to Lock Down Access to Entra ID From Only Corporate Managed Devices Without Intune

Keytos Team Oct 7, 2026

What's the Difference Between Keytos Shield and EZCA + EZRADIUS and Which Should I Choose?

Aaron Crawfis Sep 8, 2026

Cloud Security Best Practices

Featured More

Can I Use Passkeys for Wi-Fi Networks? A Look at EAP-FIDO

Aaron Crawfis Oct 21, 2026

KB5127648 Breaks PEAP Wi-Fi and 802.1X Authentication: What Happened and How to Fix It

Aaron Crawfis Oct 14, 2026

Engineering and Insights

Featured More

Six Operating Systems, One App: How We Built Keytos Connect

Aaron Crawfis Aug 12, 2026

My First Months at Keytos: A Passwordless Journey

Aaron Crawfis Mar 4, 2026

Partner

Partner network Become a partner
Partner network

Your trusted partner for passwordless security

Reseller partners Managed service providers Technology partners Contact partner team
Become a partner

Join our global partner network

Become a partner
Keytos
    • All-in-one platform
    • Cloud PKI
    • Cloud RADIUS
    • Entra ID SSH
    • Security key management
    • SSL Monitoring
  • Documentation
    • News
    • PKI
    • Passwordless
    • Cloud Security
    • Engineering
    • Partner network
    • Become a partner
  • About
  • Status
Contact us

Keytos Security Blog

All News PKI Passwordless Cloud Security Engineering
EZCA Cloud PKI is the best way to create a subordinate CA or issuing CA in Azure.
What is a Subordinate or Issuing Certificate Authority?

November 21, 2023 - Updated: August 6, 2026

Keytos Team Keytos Team
  • PKI
  • Certificates
  • EZCA

While the root CA is the primary trust anchor and sits at the pinnacle of CA hierarchy, the subordinate CA plays a more nuanced and specific role. Read this blog to learn more.

EZCA Cloud PKI is the best way to create a root CA in Azure.
What is a Root Certificate Authority (CA)?

November 20, 2023 - Updated: August 6, 2026

Keytos Team Keytos Team
  • PKI
  • Certificates
  • EZCA

A root certificate authority, often called the foundation of trust in your PKI system, is key to authenticate a certificate chain. Click here for an in-depth look at root CAs!

Use CAA Records to Protect Your SSL Certificates
How CAA Records Protect SSL Certificates

November 14, 2023

Keytos Team Keytos Team
  • SSL
  • Certificates
  • PKI
  • EZMonitor
  • CAA

How can you best protect your SSL certificates from being compromised? CAA Records. Check out this blog to learn how this straightforward solution is a potent defense mechanism.

How to Detect Shadow IT Certification Authorities
How to Detect Shadow IT CAs

November 13, 2023

Keytos Team Keytos Team
  • SSL Certificates
  • PKI
  • EZMonitor

Poorly configured CAs can become huge vulnerabilities for your organization. Check out this blog to learn about the best way to detect and combat shadow IT certificate authorities.

How to Remotely Onboard Users with Verifiable Credentials
How to Onboard Users Remotely with Verifiable Credentials

November 13, 2023

Keytos Team Keytos Team
  • FIDO2
  • SmartCard
  • EZCMS

Check out this blog to learn all you need to know about Azure Verifiable Credentials and how to use them for remote passwordless onboarding throughout your organization.

Certificate Lifecycle Management Best Practices
How to Best Manage Certificate Lifecycles

November 10, 2023

Keytos Team Keytos Team
  • Certificates
  • PKI
  • SSL

Whether you're decoding the intricacies of PKI or trying to gain insight into SSL, the core principles remain unchanged. Here are certificate lifecycle management best practices.

Certificate Authority in Azure Key Vault – How to Protect Your Keys
Certificate Authority in Azure Key Vault – How to Protect Your Keys

November 8, 2023

Keytos Team Keytos Team
  • PKI
  • Compliance
  • EZCA
  • Key Vault

As more systems are being moved from on-premises to the cloud, more people are considering how to move CAs to Azure. Learn about some alternatives to run CAs in the cloud here!

Unphishable MFA keeps your organization secure
How Phishing-Resistant MFA Improves Your Entra ID Security Posture

November 8, 2023

Keytos Team Keytos Team
  • EZCMS
  • Entra CBA
  • FIDO2
  • MFA

No matter what steps you take to make a password "strong," there are always hackers who can take it from you in an instant. That's where phishing-resistant MFA steps in.

How to protect Entra ID user identities
The Top 5 Ways to Secure Your Entra ID Identities

November 8, 2023 - Updated: March 4, 2026

Keytos Team Keytos Team
  • Entra ID
  • Best Practices

Protecting your Entra ID identities is a key step in enhancing your organization's cybersecurity posture. Check out this guide on Entra ID identity security best practices!

  • ««
  • «
  • 21
  • 22
  • 23
  • 24
  • 25
  • »
  • »»
Keytos
AICPA SOC 2 compliant ISO 27001 certified

Solutions

All-in-one platformCloud PKICloud RADIUSEntra ID SSHSecurity key managementSSL Monitoring

Blog

NewsPKIPasswordlessCloud SecurityEngineering

Company

AboutContact usPartner networkBecome a partnerCareers

Resources

DocumentationStatus

Mar 24, 2026

How to Secure Cloud Only Environments for Zero-trust with Entra ID - No Password Required Episode 3

In this episode, Igal Flegmann and Aaron Crawfis share their real-world experience working in Microsoft Security and break down how to secure a cloud-only environment using Microsoft Entra ID and native Microsoft security tools. They walk through modern, passwordless authentication strategies—including Entra Certificate-Based Authentication (CBA) and passkeys—and explain how to implement strong identity protection in practice.

Watch on YouTube
English Español

FEDERAL UEI: CE6BTTY7MT37|CAGE/NCAGE: 18UG8

©2026 KEYTOS

Terms of Use Privacy Policy