Keytos Blog
  • Documentation
  • Blog
  • About
  • Status
English Español
Contact us

Solutions

Keytos Shield Cloud PKI Cloud RADIUS Entra ID SSH Passwordless Onboarding SSL Monitoring
Keytos Shield

One platform. Zero passwords.

Overview How it works Pricing Book a demo Start free trial
Cloud PKI

Cloud PKI for Azure, Intune, and Entra ID

Overview How it works Pricing Book a demo Start free trial
Cloud RADIUS

The best cloud RADIUS for Microsoft environments

Overview How it works Pricing Book a demo Start free trial
Entra ID SSH

Entra ID authentication to SSH endpoints

Overview How it works Pricing Book a demo Start free trial
Passwordless Onboarding

Passwordless authentication onboarding for Entra ID

Overview How it works Pricing Book a demo Get started
SSL Monitoring

SSL certificate monitoring tool

Overview How it works Pricing Book a demo Start free trial

Blog

News PKI Passwordless Cloud Security Engineering

Keytos Security News

Featured More

Announcing Keytos Shield - A new all-in-one passwordless identity platform

Keytos Team Aug 31, 2026

Announcing Keytos Connect - A Simple & Secure Way to Connect BYOD and Personal Devices to Enterprise & Campus Networks

Keytos Team Jun 29, 2026

PKI Guides and Best Practices

Featured More

What is The Best Certificate Lifecycle Management Software According to G2 in 2026

Keytos Team Aug 27, 2026

Do I Need to Move to Short-Lived 47-Day Certificates for Private PKI?

Aaron Crawfis Aug 11, 2026

Passwordless Guides and Best Practices

Featured More

Fixing NPS Event 6273 Reason Code 8 (And Why Cloud-Only Devices Always Hit It)

Aaron Crawfis Aug 10, 2026

Does Azure Have a Cloud RADIUS Server for Network Authentication?

Keytos Team Jun 19, 2026

Cloud Security Best Practices

Featured More

How to Set Up a Local RADIUS Server: The Easy Alternative to NPS and FreeRADIUS

Keytos Team Aug 19, 2026

Entra ID + RADIUS - How to Connect to Wi-Fi & VPNs Without NPS or On-Prem Active Directory

Aaron Crawfis Aug 14, 2026

Engineering and Insights

Featured More

Six Operating Systems, One App: How We Built Keytos Connect

Aaron Crawfis Aug 12, 2026

My First Months at Keytos: A Passwordless Journey

Aaron Crawfis Mar 4, 2026

Partner

Partner network Become a partner
Partner network

Your trusted partner for passwordless security

Reseller partners Managed service providers Technology partners Contact partner team
Become a partner

Join our global partner network

Become a partner
Keytos
    • Keytos Shield
    • Cloud PKI
    • Cloud RADIUS
    • Entra ID SSH
    • Passwordless Onboarding
    • SSL Monitoring
  • Documentation
    • News
    • PKI
    • Passwordless
    • Cloud Security
    • Engineering
    • Partner network
    • Become a partner
  • About
  • Status
Contact us

SmartCard

All News PKI Passwordless Cloud Security Engineering SmartCard
Entra CBA High Affinity Do I need it, how do I map a certificate to a user account in Entra ID
What is Entra CBA High Affinity?

December 14, 2025

Keytos Team Keytos Team
  • Entra CBA
  • Entra ID
  • SmartCard
  • EZCMS

Entra CBA High Affinity is a validation mode in Microsoft Entra CBA that allows organizations to map a certificate to a user account in Entra ID but do you need it? Learn how to enable High Affinity in Entra CBA

How To Enable Phishing Resistant Authentication in GCC High in Azure with Entra CBA
How To Go Passwordless in Azure GCC High with Entra CBA

July 4, 2025

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

Due to Government regulations you have to use phishing resistant authentication in Azure GCC High, this guide will show you how to set up Entra CBA in Azure GCC High.

How To deploy Yubikeys in Microsoft 365
How to Set Up and Use a Yubikey in Microsoft 365

June 17, 2025 - Updated: April 1, 2026

Keytos Team Keytos Team
  • EZCMS
  • FIDO2
  • YubiKey
  • Entra CBA
  • Entra ID
  • Azure
  • SmartCard

This post takes a look at the high-level steps associated with the process of deploying Yubikeys keys efficiently in a Microsoft 365 environment to go fully passwordless.

Should you set required affinity binding to high in Azure CBA?
What is Affinity Binding? Is Affinity Binding Required in Entra CBA?

April 9, 2025

Keytos Team Keytos Team
  • Entra CBA
  • EZCMS
  • SmartCard

In this article, we will go over what Required Affinity Binding is and whether or not you should set it to High in Entra CBA (Certificate-Based Authentication).

What are the phishing resistant authentication methods in Azure Active Directory and Entra ID?
What Are the Phishing Resistant Options in Entra ID and Microsoft 365?

March 27, 2025

Keytos Team Keytos Team
  • FIDO2
  • SmartCard
  • Entra ID
  • EZCMS

phishing resistant authentication methods in Entra ID and Microsoft 365 can be overwhelming. This blog will help you understand the options available to you and how to implement them.

Cheaper Yubikey Alternative
Cheaper YubiKey Alternative

December 15, 2024

Keytos Team Keytos Team
  • FIDO2
  • SmartCard
  • EZCMS
  • MFA
  • YubiKey

Trying to go passwordless but Yubikeys are too expensive? Read this blog on how you can get Yubikey Alternatives for half the price

How use smartcards in Entra ID
How to Go Passwordless with Smartcards in Entra ID

November 30, 2024

Keytos Team Keytos Team
  • EZCMS
  • SmartCard

Smartcards are a great way to go passwordless in Entra ID, learn the basics of how to get started with smartcards in Entra ID.

Why use YubiKeys for phishing-resistant MFA with FIDO2 and SmartCard
How Phishing-Resistant MFA with YubiKey Improves Your Security Posture

November 25, 2024

Keytos Team Keytos Team
  • FIDO2
  • SmartCard
  • EZCMS
  • MFA

Phishing Attacks are getting more complex. Yubico, Microsoft and Keytos have been working together for years to ensure that implementing phishing-resistant MFA is as easy as possible.

Get pre-loaded YubiKey with FIDO2 Key in Entra ID
How to Get a YubiKey with a Pre-Loaded FIDO2 Key in Entra ID

November 7, 2024

Keytos Team Keytos Team
  • FIDO2
  • EZCMS
  • SmartCard
  • MFA
  • YubiKey

The hardest part of implementing FIDO2 is getting your users to enroll their keys. Can you send your users preloaded FIDO2 YubiKeys with their Entra ID credentials?

  • ««
  • «
  • 1
  • 2
  • 3
  • 4
  • 5
  • »
  • »»
Keytos
AICPA SOC 2 compliant ISO 27001 certified

Solutions

Keytos ShieldCloud PKICloud RADIUSEntra ID SSHPasswordless OnboardingSSL Monitoring

Blog

NewsPKIPasswordlessCloud SecurityEngineering

Company

AboutContact usPartner networkBecome a partnerCareers

Resources

DocumentationStatus

Mar 24, 2026

How to Secure Cloud Only Environments for Zero-trust with Entra ID - No Password Required Episode 3

In this episode, Igal Flegmann and Aaron Crawfis share their real-world experience working in Microsoft Security and break down how to secure a cloud-only environment using Microsoft Entra ID and native Microsoft security tools. They walk through modern, passwordless authentication strategies—including Entra Certificate-Based Authentication (CBA) and passkeys—and explain how to implement strong identity protection in practice.

Watch on YouTube
English Español

FEDERAL UEI: CE6BTTY7MT37|CAGE/NCAGE: 18UG8

©2026 KEYTOS

Terms of Use Privacy Policy