Keytos Blog
  • Documentation
  • Blog
  • About
  • Status
English Español
Contact us

Solutions

All-in-one platform Cloud PKI Cloud RADIUS Entra ID SSH Security key management SSL Monitoring
Keytos Shield

Cloud PKI, cloud RADIUS, passwordless onboarding, all in one platform.

Overview How it works Pricing Book a demo Start free trial Documentation
Cloud PKI

Cloud PKI for Azure, Intune, and Entra ID

Overview How it works Pricing Book a demo Start free trial Documentation
Cloud RADIUS

The best cloud RADIUS for Microsoft environments

Overview How it works Pricing Book a demo Start free trial Documentation
Entra ID SSH

Entra ID authentication to SSH endpoints

Overview How it works Pricing Book a demo Start free trial Documentation
EZCMS

Passwordless authentication onboarding for Entra ID

Overview How it works Pricing Book a demo Get started Documentation
SSL Monitoring

SSL certificate monitoring tool

Overview How it works Pricing Book a demo Start free trial Documentation

Blog

News PKI Passwordless Cloud Security Engineering

Keytos Security News

Featured More

Keytos Cloud PKI, RADIUS, and Smart Cards Now Available in Azure GCC High

Keytos Team Sep 16, 2026

Announcing Keytos Shield - A new all-in-one passwordless identity platform

Keytos Team Aug 31, 2026

PKI Guides and Best Practices

Featured More

eMudhra CA Key Compromise Explained: What Happened, Who's Affected, and What to Do

Igal Flegmann Oct 21, 2026

How to Migrate a Windows Certificate Authority (CA) to the Cloud

Keytos Team Sep 28, 2026

Passwordless Guides and Best Practices

Featured More

Should I Use Synced or Device-Bound Passkeys in Entra ID?

Aaron Crawfis Oct 23, 2026

How to Lock Down Access to Entra ID From Only Corporate Managed Devices Without Intune

Keytos Team Oct 7, 2026

Cloud Security Best Practices

Featured More

The 5 Best NAC Solutions for Entra ID and Intune Shops in 2026, Ranked

Igal Flegmann Oct 25, 2026

Can I Use Passkeys for Wi-Fi Networks? A Look at EAP-FIDO

Aaron Crawfis Oct 21, 2026

Engineering and Insights

Featured More

Six Operating Systems, One App: How We Built Keytos Connect

Aaron Crawfis Aug 12, 2026

My First Months at Keytos: A Passwordless Journey

Aaron Crawfis Mar 4, 2026

Partner

Partner network Become a partner
Partner network

Your trusted partner for passwordless security

Reseller partners Managed service providers Technology partners Contact partner team
Become a partner

Join our global partner network

Become a partner
Keytos
    • All-in-one platform
    • Cloud PKI
    • Cloud RADIUS
    • Entra ID SSH
    • Security key management
    • SSL Monitoring
  • Documentation
    • News
    • PKI
    • Passwordless
    • Cloud Security
    • Engineering
    • Partner network
    • Become a partner
  • About
  • Status
Contact us

PKI Guides and Best Practices

All News PKI Passwordless Cloud Security Engineering
eMudhra CA key compromise explained - eight intermediate certificate authority private keys so weak that one was the number 4
eMudhra CA Key Compromise Explained: What Happened, Who's Affected, and What to Do

October 21, 2026 - Updated: October 26, 2026

Igal Flegmann Igal Flegmann
  • PKI
  • Certificates
  • CTLogs
  • SSL Monitoring
  • EZMonitor
  • Best Practices

Eight eMudhra intermediate CA keys were so weak one was the number 4. Learn what happened, which CAs are affected, and how to protect your apps and devices.

Move your Windows ADCS CA to the Cloud and modernize your whole Identity Stack
How to Migrate a Windows Certificate Authority (CA) to the Cloud

September 28, 2026

Keytos Team Keytos Team
  • PKI
  • EZCA

When moving to the cloud, a question your security team will ask is, "How can I get an HSM-backed Certificate Authority / PKI in Azure?" We're here to help with EZCA!

How to prevent PKI and certificate related outages
How to Prevent Costly Certificate Related Outages

September 23, 2026

Igal Flegmann Igal Flegmann
  • SSL Certificates
  • PKI
  • SSL Monitoring
  • CTLogs
  • EZMonitor

Preventing certificate and PKI related outages is essential for maintaining the integrity and availability of web services. Learn how to monitor and manage certificates to prevent outages and security incidents.

What is the Best Intune Cloud PKI? Microsoft Cloud PKI vs EZCA vs Keytos Shield
What is the Best Cloud PKI for Intune? Microsoft Cloud PKI vs EZCA vs Keytos Shield

September 18, 2026

Igal Flegmann Igal Flegmann
  • Intune
  • PKI
  • EZCA

Choosing the right Cloud PKI to issue your device certificates is Key. In this blog we will compare the three most common Cloud PKIs and tell you which one is the best for you.

The Best Certificate Lifecycle Management Software According to G2
What is The Best Certificate Lifecycle Management Software According to G2 in 2026

August 27, 2026

Keytos Team Keytos Team
  • PKI
  • Certificates
  • EZCA

Explore the top-rated certificate lifecycle management software on G2 and find the right solution for your organization's PKI needs.

With EZCA Cloud PKI, while 47-day certificates are a good idea, they are not required for private PKI. EZCA supports both 47-day and longer-lived certificates.
Do I Need to Move to Short-Lived 47-Day Certificates for Private PKI?

August 11, 2026

Aaron Crawfis Aaron Crawfis
  • PKI
  • Certificates
  • EZCA

Learn why private PKI does not require 47-day certificates and how EZCA Cloud PKI supports both short-lived and longer-lived certificates.

EZCA Cloud PKI is the best way to create a cloud certificate authority in Azure.
What is a Certificate Authority (CA)?

August 7, 2026

Aaron Crawfis Aaron Crawfis
  • PKI
  • Certificates
  • EZCA

Certificate authorities (CAs) issue digital certificates which can be used for authentication, encryption, and digital signatures. Learn more about what a CA is and how it works in this blog!

What are the Best SCEP Certificate Authorities (CAs) for SimpleMDM Environments?
What are the Best SCEP Certificate Authorities (CAs) for SimpleMDM Environments?

August 3, 2026

Daniel Gordon Daniel Gordon
  • EZCA
  • PKI
  • SimpleMDM
  • SCEP
  • Best Practices

SimpleMDM is a powerful tool for managing Apple devices, but choosing the right SCEP certificate authority is crucial. In this article, we compare EZCA, SCEPman, and SecureW2.

The best cloud PKI to Meet CMMC Level 2 requirements
The Best Cloud PKI for Microsoft Government Cloud

July 7, 2026 - Updated: September 16, 2026

Keytos Team Keytos Team
  • Intune
  • SCEP
  • PKI
  • EZCA

Built by ex-Microsoft Cloud PKI Engineers, EZCA is clearly the best option for organizations looking to button-up their security best practices around Intune GCC High certificates.

  • ««
  • «
  • 1
  • 2
  • 3
  • 4
  • 5
  • »
  • »»
Keytos
AICPA SOC 2 compliant ISO 27001 certified

Solutions

All-in-one platformCloud PKICloud RADIUSEntra ID SSHSecurity key managementSSL Monitoring

Blog

NewsPKIPasswordlessCloud SecurityEngineering

Company

AboutContact usPartner networkBecome a partnerCareers

Resources

DocumentationStatus

Mar 24, 2026

How to Secure Cloud Only Environments for Zero-trust with Entra ID - No Password Required Episode 3

In this episode, Igal Flegmann and Aaron Crawfis share their real-world experience working in Microsoft Security and break down how to secure a cloud-only environment using Microsoft Entra ID and native Microsoft security tools. They walk through modern, passwordless authentication strategies—including Entra Certificate-Based Authentication (CBA) and passkeys—and explain how to implement strong identity protection in practice.

Watch on YouTube
English Español

FEDERAL UEI: CE6BTTY7MT37|CAGE/NCAGE: 18UG8

©2026 KEYTOS

Terms of Use Privacy Policy