PKI Guides and Best Practices

ChromeOS legacy SCEP profiles are being deprecated on June 30, 2027. Keytos Shield already supports Chromebook SCEP certificates through the new Certificate Provisioning API

Google Is Retiring Legacy SCEP for Chromebooks. What Does It Mean for Your Wi-Fi Certificates?

November 6, 2026

Aaron Crawfis

Google retires legacy ChromeOS SCEP profiles on June 30, 2027. Learn what the Certificate Provisioning API changes and how Keytos Shield issues Chromebook certificates.

eMudhra CA key compromise explained - eight intermediate certificate authority private keys so weak that one was the number 4

eMudhra CA Key Compromise Explained: What Happened, Who's Affected, and What to Do

October 21, 2026 - Updated: October 26, 2026

Igal Flegmann

Eight eMudhra intermediate CA keys were so weak one was the number 4. Learn what happened, which CAs are affected, and how to protect your apps and devices.

Move your Windows ADCS CA to the Cloud and modernize your whole Identity Stack

How to Migrate a Windows Certificate Authority (CA) to the Cloud

September 28, 2026

Keytos Team

When moving to the cloud, a question your security team will ask is, "How can I get an HSM-backed Certificate Authority / PKI in Azure?" We're here to help with EZCA!

How to prevent PKI and certificate related outages

How to Prevent Costly Certificate Related Outages

September 23, 2026

Igal Flegmann

Preventing certificate and PKI related outages is essential for maintaining the integrity and availability of web services. Learn how to monitor and manage certificates to prevent outages and security incidents.

What is the Best Intune Cloud PKI? Microsoft Cloud PKI vs EZCA vs Keytos Shield

What is the Best Cloud PKI for Intune? Microsoft Cloud PKI vs EZCA vs Keytos Shield

September 18, 2026

Igal Flegmann

Choosing the right Cloud PKI to issue your device certificates is Key. In this blog we will compare the three most common Cloud PKIs and tell you which one is the best for you.

What is The Best Certificate Lifecycle Management Software According to G2 in 2026

August 27, 2026

Keytos Team

Explore the top-rated certificate lifecycle management software on G2 and find the right solution for your organization's PKI needs.

With EZCA Cloud PKI, while 47-day certificates are a good idea, they are not required for private PKI. EZCA supports both 47-day and longer-lived certificates.

Do I Need to Move to Short-Lived 47-Day Certificates for Private PKI?

August 11, 2026

Aaron Crawfis

Learn why private PKI does not require 47-day certificates and how EZCA Cloud PKI supports both short-lived and longer-lived certificates.

EZCA Cloud PKI is the best way to create a cloud certificate authority in Azure.

What is a Certificate Authority (CA)?

August 7, 2026

Aaron Crawfis

Certificate authorities (CAs) issue digital certificates which can be used for authentication, encryption, and digital signatures. Learn more about what a CA is and how it works in this blog!

What are the Best SCEP Certificate Authorities (CAs) for SimpleMDM Environments?

August 3, 2026

Daniel Gordon

SimpleMDM is a powerful tool for managing Apple devices, but choosing the right SCEP certificate authority is crucial. In this article, we compare EZCA, SCEPman, and SecureW2.