Keytos Blog
  • Documentation
  • Blog
  • About
  • Status
English Español
Contact us

Solutions

All-in-one platform Cloud PKI Cloud RADIUS Entra ID SSH Security key management SSL Monitoring
Keytos Shield

Cloud PKI, cloud RADIUS, passwordless onboarding, all in one platform.

Overview How it works Pricing Book a demo Start free trial Documentation
Cloud PKI

Cloud PKI for Azure, Intune, and Entra ID

Overview How it works Pricing Book a demo Start free trial Documentation
Cloud RADIUS

The best cloud RADIUS for Microsoft environments

Overview How it works Pricing Book a demo Start free trial Documentation
Entra ID SSH

Entra ID authentication to SSH endpoints

Overview How it works Pricing Book a demo Start free trial Documentation
EZCMS

Passwordless authentication onboarding for Entra ID

Overview How it works Pricing Book a demo Get started Documentation
SSL Monitoring

SSL certificate monitoring tool

Overview How it works Pricing Book a demo Start free trial Documentation

Blog

News PKI Passwordless Cloud Security Engineering

Keytos Security News

Featured More

Keytos Cloud PKI, RADIUS, and Smart Cards Now Available in Azure GCC High

Keytos Team Sep 16, 2026

Announcing Keytos Shield - A new all-in-one passwordless identity platform

Keytos Team Aug 31, 2026

PKI Guides and Best Practices

Featured More

How to Migrate a Windows Certificate Authority (CA) to the Cloud

Keytos Team Sep 28, 2026

How to Prevent Costly Certificate Related Outages

Igal Flegmann Sep 23, 2026

Passwordless Guides and Best Practices

Featured More

How to Lock Down Access to Entra ID From Only Corporate Managed Devices Without Intune

Keytos Team Oct 7, 2026

What's the Difference Between Keytos Shield and EZCA + EZRADIUS and Which Should I Choose?

Aaron Crawfis Sep 8, 2026

Cloud Security Best Practices

Featured More

KB5127648 Breaks PEAP Wi-Fi and 802.1X Authentication: What Happened and How to Fix It

Aaron Crawfis Oct 14, 2026

What are the 8 Best Cloud RADIUS Providers for 2026, Ranked

Igal Flegmann Oct 11, 2026

Engineering and Insights

Featured More

Six Operating Systems, One App: How We Built Keytos Connect

Aaron Crawfis Aug 12, 2026

My First Months at Keytos: A Passwordless Journey

Aaron Crawfis Mar 4, 2026

Partner

Partner network Become a partner
Partner network

Your trusted partner for passwordless security

Reseller partners Managed service providers Technology partners Contact partner team
Become a partner

Join our global partner network

Become a partner
Keytos
    • All-in-one platform
    • Cloud PKI
    • Cloud RADIUS
    • Entra ID SSH
    • Security key management
    • SSL Monitoring
  • Documentation
    • News
    • PKI
    • Passwordless
    • Cloud Security
    • Engineering
    • Partner network
    • Become a partner
  • About
  • Status
Contact us

Entra CBA

All News PKI Passwordless Cloud Security Engineering Entra CBA
Restrict Entra ID access to corporate-managed devices without Intune using Entra CBA
How to Lock Down Access to Entra ID From Only Corporate Managed Devices Without Intune

October 7, 2026

Keytos Team Keytos Team
  • Entra ID
  • SCEP
  • Conditional Access
  • Entra CBA

Learn how to restrict access to Entra ID from only corporate managed devices without using Intune by leveraging certificate-based authentication with Entra CBA and Keytos solutions.

Entra CBA High Affinity Do I need it, how do I map a certificate to a user account in Entra ID
What is Entra CBA High Affinity?

December 14, 2025

Keytos Team Keytos Team
  • Entra CBA
  • Entra ID
  • SmartCard
  • EZCMS

Entra CBA High Affinity is a validation mode in Microsoft Entra CBA that allows organizations to map a certificate to a user account in Entra ID but do you need it? Learn how to enable High Affinity in Entra CBA

How To Go Passwordless For Help Desk Technicians
How to Use Passwordless Authentication for Help Desk Technicians with Entra CBA

November 12, 2025

Aaron Crawfis Aaron Crawfis
  • Entra CBA
  • Intune

Your help desk technicians should have strong authentication methods to protect your organization's most critical people and assets. Click here to learn how EZCMS makes it easy to implement Entra CBA for Intune Remote Help!

How To Enable Phishing Resistant Authentication in GCC High in Azure with Entra CBA
How To Go Passwordless in Azure GCC High with Entra CBA

July 4, 2025

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

Due to Government regulations you have to use phishing resistant authentication in Azure GCC High, this guide will show you how to set up Entra CBA in Azure GCC High.

How To deploy Yubikeys in Microsoft 365
How to Set Up and Use a Yubikey in Microsoft 365

June 17, 2025 - Updated: April 1, 2026

Keytos Team Keytos Team
  • EZCMS
  • FIDO2
  • YubiKey
  • Entra CBA
  • Entra ID
  • Azure
  • SmartCard

This post takes a look at the high-level steps associated with the process of deploying Yubikeys keys efficiently in a Microsoft 365 environment to go fully passwordless.

Should you set required affinity binding to high in Azure CBA?
What is Affinity Binding? Is Affinity Binding Required in Entra CBA?

April 9, 2025

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

In this article, we will go over what Required Affinity Binding is and whether or not you should set it to High in Entra CBA (Certificate-Based Authentication).

How to enable smartcard windows log-on with Entra CBA and troubleshoot common Entra ID issues
How To Enable SmartCard Windows Log-on with Entra CBA - Troubleshooting Common Entra CBA Issues

April 24, 2024

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

Going passwordless in Entra ID is a great way to improve security. Learn how to enable smartcard log-on in Windows with Entra CBA.

How phishing resistant authentication improves your security
Getting Started with Phishing Resistant Credentials

April 20, 2024

Keytos Team Keytos Team
  • EZCMS
  • Entra CBA

Phishing resistant authentication is a game-changer for security and user experience. Learn how it improves your security and user experience.

Is Entra CBA Phishing Resistant
A Look at CBA in EntraID - Are My Credentials Truly Phishing Resistant?

March 13, 2024

Keytos Team Keytos Team
  • Entra ID
  • Entra CBA
  • EZCMS

We know passwords are vulnerable to phishing attacks, and certificates are better but is all Certificate-Based Authentication in Entra Identity phishing resistant? Let's find out.

  • ««
  • «
  • 1
  • 2
  • 3
  • »
  • »»
Keytos
AICPA SOC 2 compliant ISO 27001 certified

Solutions

All-in-one platformCloud PKICloud RADIUSEntra ID SSHSecurity key managementSSL Monitoring

Blog

NewsPKIPasswordlessCloud SecurityEngineering

Company

AboutContact usPartner networkBecome a partnerCareers

Resources

DocumentationStatus

Mar 24, 2026

How to Secure Cloud Only Environments for Zero-trust with Entra ID - No Password Required Episode 3

In this episode, Igal Flegmann and Aaron Crawfis share their real-world experience working in Microsoft Security and break down how to secure a cloud-only environment using Microsoft Entra ID and native Microsoft security tools. They walk through modern, passwordless authentication strategies—including Entra Certificate-Based Authentication (CBA) and passkeys—and explain how to implement strong identity protection in practice.

Watch on YouTube
English Español

FEDERAL UEI: CE6BTTY7MT37|CAGE/NCAGE: 18UG8

©2026 KEYTOS

Terms of Use Privacy Policy