Keytos Blog
  • Documentation
  • Blog
  • About
  • Status
English Español
Contact us

Solutions

All-in-one platform Cloud PKI Cloud RADIUS Entra ID SSH Security key management SSL Monitoring
Keytos Shield

Cloud PKI, cloud RADIUS, passwordless onboarding, all in one platform.

Overview How it works Pricing Book a demo Start free trial Documentation
Cloud PKI

Cloud PKI for Azure, Intune, and Entra ID

Overview How it works Pricing Book a demo Start free trial Documentation
Cloud RADIUS

The best cloud RADIUS for Microsoft environments

Overview How it works Pricing Book a demo Start free trial Documentation
Entra ID SSH

Entra ID authentication to SSH endpoints

Overview How it works Pricing Book a demo Start free trial Documentation
EZCMS

Passwordless authentication onboarding for Entra ID

Overview How it works Pricing Book a demo Get started Documentation
SSL Monitoring

SSL certificate monitoring tool

Overview How it works Pricing Book a demo Start free trial Documentation

Blog

News PKI Passwordless Cloud Security Engineering

Keytos Security News

Featured More

Keytos Cloud PKI, RADIUS, and Smart Cards Now Available in Azure GCC High

Keytos Team Sep 16, 2026

Announcing Keytos Shield - A new all-in-one passwordless identity platform

Keytos Team Aug 31, 2026

PKI Guides and Best Practices

Featured More

How to Migrate a Windows Certificate Authority (CA) to the Cloud

Keytos Team Sep 28, 2026

How to Prevent Costly Certificate Related Outages

Igal Flegmann Sep 23, 2026

Passwordless Guides and Best Practices

Featured More

How to Lock Down Access to Entra ID From Only Corporate Managed Devices Without Intune

Keytos Team Oct 7, 2026

What's the Difference Between Keytos Shield and EZCA + EZRADIUS and Which Should I Choose?

Aaron Crawfis Sep 8, 2026

Cloud Security Best Practices

Featured More

KB5127648 Breaks PEAP Wi-Fi and 802.1X Authentication: What Happened and How to Fix It

Aaron Crawfis Oct 14, 2026

What are the 8 Best Cloud RADIUS Providers for 2026, Ranked

Igal Flegmann Oct 11, 2026

Engineering and Insights

Featured More

Six Operating Systems, One App: How We Built Keytos Connect

Aaron Crawfis Aug 12, 2026

My First Months at Keytos: A Passwordless Journey

Aaron Crawfis Mar 4, 2026

Partner

Partner network Become a partner
Partner network

Your trusted partner for passwordless security

Reseller partners Managed service providers Technology partners Contact partner team
Become a partner

Join our global partner network

Become a partner
Keytos
    • All-in-one platform
    • Cloud PKI
    • Cloud RADIUS
    • Entra ID SSH
    • Security key management
    • SSL Monitoring
  • Documentation
    • News
    • PKI
    • Passwordless
    • Cloud Security
    • Engineering
    • Partner network
    • Become a partner
  • About
  • Status
Contact us

SmartCard

All News PKI Passwordless Cloud Security Engineering SmartCard
Entra CBA High Affinity Do I need it, how do I map a certificate to a user account in Entra ID
What is Entra CBA High Affinity?

December 14, 2025

Keytos Team Keytos Team
  • Entra CBA
  • Entra ID
  • SmartCard
  • EZCMS

Entra CBA High Affinity is a validation mode in Microsoft Entra CBA that allows organizations to map a certificate to a user account in Entra ID but do you need it? Learn how to enable High Affinity in Entra CBA

How To Enable Phishing Resistant Authentication in GCC High in Azure with Entra CBA
How To Go Passwordless in Azure GCC High with Entra CBA

July 4, 2025

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

Due to Government regulations you have to use phishing resistant authentication in Azure GCC High, this guide will show you how to set up Entra CBA in Azure GCC High.

How To deploy Yubikeys in Microsoft 365
How to Set Up and Use a Yubikey in Microsoft 365

June 17, 2025 - Updated: April 1, 2026

Keytos Team Keytos Team
  • EZCMS
  • FIDO2
  • YubiKey
  • Entra CBA
  • Entra ID
  • Azure
  • SmartCard

This post takes a look at the high-level steps associated with the process of deploying Yubikeys keys efficiently in a Microsoft 365 environment to go fully passwordless.

Should you set required affinity binding to high in Azure CBA?
What is Affinity Binding? Is Affinity Binding Required in Entra CBA?

April 9, 2025

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

In this article, we will go over what Required Affinity Binding is and whether or not you should set it to High in Entra CBA (Certificate-Based Authentication).

What are the phishing resistant authentication methods in Azure Active Directory and Entra ID?
What Are the Phishing Resistant Options in Entra ID and Microsoft 365?

March 27, 2025

Keytos Team Keytos Team
  • FIDO2
  • SmartCard
  • Entra ID
  • EZCMS

phishing resistant authentication methods in Entra ID and Microsoft 365 can be overwhelming. This blog will help you understand the options available to you and how to implement them.

Cheaper Yubikey Alternative
Cheaper YubiKey Alternative

December 15, 2024

Keytos Team Keytos Team
  • FIDO2
  • SmartCard
  • EZCMS
  • MFA
  • YubiKey

Trying to go passwordless but Yubikeys are too expensive? Read this blog on how you can get Yubikey Alternatives for half the price

How use smartcards in Entra ID
How to Go Passwordless with Smartcards in Entra ID

November 30, 2024

Keytos Team Keytos Team
  • EZCMS
  • SmartCard

Smartcards are a great way to go passwordless in Entra ID, learn the basics of how to get started with smartcards in Entra ID.

Why use YubiKeys for phishing-resistant MFA with FIDO2 and SmartCard
How Phishing-Resistant MFA with YubiKey Improves Your Security Posture

November 25, 2024

Keytos Team Keytos Team
  • FIDO2
  • SmartCard
  • EZCMS
  • MFA

Phishing Attacks are getting more complex. Yubico, Microsoft and Keytos have been working together for years to ensure that implementing phishing-resistant MFA is as easy as possible.

Get pre-loaded YubiKey with FIDO2 Key in Entra ID
How to Get a YubiKey with a Pre-Loaded FIDO2 Key in Entra ID

November 7, 2024

Keytos Team Keytos Team
  • FIDO2
  • EZCMS
  • SmartCard
  • MFA
  • YubiKey

The hardest part of implementing FIDO2 is getting your users to enroll their keys. Can you send your users preloaded FIDO2 YubiKeys with their Entra ID credentials?

  • ««
  • «
  • 1
  • 2
  • 3
  • 4
  • 5
  • »
  • »»
Keytos
AICPA SOC 2 compliant ISO 27001 certified

Solutions

All-in-one platformCloud PKICloud RADIUSEntra ID SSHSecurity key managementSSL Monitoring

Blog

NewsPKIPasswordlessCloud SecurityEngineering

Company

AboutContact usPartner networkBecome a partnerCareers

Resources

DocumentationStatus

Mar 24, 2026

How to Secure Cloud Only Environments for Zero-trust with Entra ID - No Password Required Episode 3

In this episode, Igal Flegmann and Aaron Crawfis share their real-world experience working in Microsoft Security and break down how to secure a cloud-only environment using Microsoft Entra ID and native Microsoft security tools. They walk through modern, passwordless authentication strategies—including Entra Certificate-Based Authentication (CBA) and passkeys—and explain how to implement strong identity protection in practice.

Watch on YouTube
English Español

FEDERAL UEI: CE6BTTY7MT37|CAGE/NCAGE: 18UG8

©2026 KEYTOS

Terms of Use Privacy Policy