EZCA - Cloud PKI for Azure, Intune, and Entra ID

EZCA allows you to run and scale a private CA service without the upfront investment and ongoing maintenance costs of operating a private CA or CA hierarchy.

Get started

EZCA lets you run a highly available, HSM-backed private CA without the upfront investment or the ongoing maintenance of operating your own PKI.

Start free trial See pricing Book a demo

Easy to set up

Root Certificate Authority More
Create a Root CA Sign a 3rd-party CSR Trust a Private Root CA
SCEP Certificate Authority More
Create a SCEP CA Jamf Microsoft Intune NinjaOne SimpleMDM ManageEngine
SSL Certificate Authority More
Create an SSL CA Manage Domains Manage Certificates ACME Certificates Azure Key Vault Entra ID Apps Azure IoT AD CS
Public Cert Management
Manage public certificates GlobalSign MSSL
TLS Traffic Inspection More
Sign a TLS inspection CSR Azure Firewall

Common tasks and guides

Subscription management Billing, RBAC, and more Self-service portal Allow users to create certs Clients & Tooling CLI, SDKs, and other tools PKI Concepts Learn the fundamentals