Keytos Blog
  • Documentation
  • Blog
  • About
  • Status
English Español
Contact us

Solutions

Keytos Shield Cloud PKI Cloud RADIUS Entra ID SSH Passwordless Onboarding SSL Monitoring
Keytos Shield

One platform. Zero passwords.

Overview How it works Pricing Book a demo Start free trial
Cloud PKI

Cloud PKI for Azure, Intune, and Entra ID

Overview How it works Pricing Book a demo Start free trial
Cloud RADIUS

The best cloud RADIUS for Microsoft environments

Overview How it works Pricing Book a demo Start free trial
Entra ID SSH

Entra ID authentication to SSH endpoints

Overview How it works Pricing Book a demo Start free trial
Passwordless Onboarding

Passwordless authentication onboarding for Entra ID

Overview How it works Pricing Book a demo Get started
SSL Monitoring

SSL certificate monitoring tool

Overview How it works Pricing Book a demo Start free trial

Blog

News PKI Passwordless Cloud Security Engineering

Keytos Security News

Featured More

Announcing Keytos Shield - A new all-in-one passwordless identity platform

Keytos Team Aug 31, 2026

Announcing Keytos Connect - A Simple & Secure Way to Connect BYOD and Personal Devices to Enterprise & Campus Networks

Keytos Team Jun 29, 2026

PKI Guides and Best Practices

Featured More

What is The Best Certificate Lifecycle Management Software According to G2 in 2026

Keytos Team Aug 27, 2026

Do I Need to Move to Short-Lived 47-Day Certificates for Private PKI?

Aaron Crawfis Aug 11, 2026

Passwordless Guides and Best Practices

Featured More

Fixing NPS Event 6273 Reason Code 8 (And Why Cloud-Only Devices Always Hit It)

Aaron Crawfis Aug 10, 2026

Does Azure Have a Cloud RADIUS Server for Network Authentication?

Keytos Team Jun 19, 2026

Cloud Security Best Practices

Featured More

How to Set Up a Local RADIUS Server: The Easy Alternative to NPS and FreeRADIUS

Keytos Team Aug 19, 2026

Entra ID + RADIUS - How to Connect to Wi-Fi & VPNs Without NPS or On-Prem Active Directory

Aaron Crawfis Aug 14, 2026

Engineering and Insights

Featured More

Six Operating Systems, One App: How We Built Keytos Connect

Aaron Crawfis Aug 12, 2026

My First Months at Keytos: A Passwordless Journey

Aaron Crawfis Mar 4, 2026

Partner

Partner network Become a partner
Partner network

Your trusted partner for passwordless security

Reseller partners Managed service providers Technology partners Contact partner team
Become a partner

Join our global partner network

Become a partner
Keytos
    • Keytos Shield
    • Cloud PKI
    • Cloud RADIUS
    • Entra ID SSH
    • Passwordless Onboarding
    • SSL Monitoring
  • Documentation
    • News
    • PKI
    • Passwordless
    • Cloud Security
    • Engineering
    • Partner network
    • Become a partner
  • About
  • Status
Contact us

EZCMS

All News PKI Passwordless Cloud Security Engineering EZCMS
How to Protect Your Microsoft Intune Environment
How to Protect Your Microsoft Intune Environment

March 25, 2026

Keytos Team Keytos Team
  • Intune
  • EZCMS
  • YubiKey
  • Best Practices

Learn how to protect your most critical users and devices by following these best practices to secure your Microsoft Intune environment. From implementing conditional access policies to using Yubikeys for MFA, we cover it all.

Zero Trust Network Access (ZTNA) architecture diagram showing identity-based access control
What is Zero Trust Network Access (ZTNA)?

March 16, 2026

Aaron Crawfis Aaron Crawfis
  • Architecture
  • Best Practices
  • EZSSH
  • EZCMS
  • Network Security

Learn what Zero Trust Network Access (ZTNA) is, how it works, how it differs from VPNs, and how to implement it in your organization.

How to Enable Passwordless RDP with FIDO2 Security Keys in Microsoft Intune
How to Enable Passwordless RDP with FIDO2 Security Keys in Microsoft Intune

March 11, 2026

Keytos Team Keytos Team
  • FIDO2
  • EZCMS
  • Entra ID
  • Intune

Using hardware tokens like YubiKeys and the FIDO2 protocol is becoming increasingly popular. Learn how you can enable these methods for Microsoft Intune.

How to Enroll a YubiKey for FIDO2 Passkeys and Entra CBA on macOS
How to Enroll a YubiKey for FIDO2 Passkeys and Entra CBA on macOS

March 2, 2026 - Updated: July 14, 2026

Aaron Crawfis Aaron Crawfis
  • YubiKey
  • Entra ID
  • FIDO2
  • Smart Card
  • EZCMS
  • Passwordless
  • MFA

Are you looking for a way for your macOS users to set up their YubiKeys for passwordless and unphisable Entra ID authentication? This blog will show how EZCMS can help you onboard YubiKeys for both FIDO2 Passkeys and Entra CBA on macOS, providing a …

Entra CBA High Affinity Do I need it, how do I map a certificate to a user account in Entra ID
What is Entra CBA High Affinity?

December 14, 2025

Keytos Team Keytos Team
  • Entra CBA
  • Entra ID
  • SmartCard
  • EZCMS

Entra CBA High Affinity is a validation mode in Microsoft Entra CBA that allows organizations to map a certificate to a user account in Entra ID but do you need it? Learn how to enable High Affinity in Entra CBA

How To Enable Phishing Resistant Authentication in GCC High in Azure with Entra CBA
How To Go Passwordless in Azure GCC High with Entra CBA

July 4, 2025

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

Due to Government regulations you have to use phishing resistant authentication in Azure GCC High, this guide will show you how to set up Entra CBA in Azure GCC High.

How To deploy Yubikeys in Microsoft 365
How to Set Up and Use a Yubikey in Microsoft 365

June 17, 2025 - Updated: April 1, 2026

Keytos Team Keytos Team
  • EZCMS
  • FIDO2
  • YubiKey
  • Entra CBA
  • Entra ID
  • Azure
  • SmartCard

This post takes a look at the high-level steps associated with the process of deploying Yubikeys keys efficiently in a Microsoft 365 environment to go fully passwordless.

How To Onboard Authentrend Biometric Smart Card, FIDO2, Entra ID
Authentrend Biometric Smart Card, FIDO2, Entra ID Onboarding got Easier with EZCMS

May 28, 2025

Keytos Team Keytos Team
  • Authentrend
  • Entra ID
  • FIDO2
  • EZCMS

Our latest partnership is with Authentrend will propel secure passwordless authentication in Entra ID to the next level by allowing biometric smartcards and FIDO2 Keys in Entra ID.

Should you set required affinity binding to high in Azure CBA?
What is Affinity Binding? Is Affinity Binding Required in Entra CBA?

April 9, 2025

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

In this article, we will go over what Required Affinity Binding is and whether or not you should set it to High in Entra CBA (Certificate-Based Authentication).

  • ««
  • «
  • 1
  • 2
  • 3
  • 4
  • 5
  • »
  • »»
Keytos
AICPA SOC 2 compliant ISO 27001 certified

Solutions

Keytos ShieldCloud PKICloud RADIUSEntra ID SSHPasswordless OnboardingSSL Monitoring

Blog

NewsPKIPasswordlessCloud SecurityEngineering

Company

AboutContact usPartner networkBecome a partnerCareers

Resources

DocumentationStatus

Mar 24, 2026

How to Secure Cloud Only Environments for Zero-trust with Entra ID - No Password Required Episode 3

In this episode, Igal Flegmann and Aaron Crawfis share their real-world experience working in Microsoft Security and break down how to secure a cloud-only environment using Microsoft Entra ID and native Microsoft security tools. They walk through modern, passwordless authentication strategies—including Entra Certificate-Based Authentication (CBA) and passkeys—and explain how to implement strong identity protection in practice.

Watch on YouTube
English Español

FEDERAL UEI: CE6BTTY7MT37|CAGE/NCAGE: 18UG8

©2026 KEYTOS

Terms of Use Privacy Policy