How To Create an EZCA Cloud PKI Subscription in the Azure Marketplace

Prerequisites to Create an EZCA Cloud PKI Subscription in Azure

Before you can create an EZRADIUS cloud RADIUS subscription in Azure, you will need to ensure the following prerequisites are met:

• You have an active Azure subscription
• You have consented the Keytos Entra ID applications in your tenant

How To Create an EZCA Cloud PKI Subscription in Azure - Step-by-Step Guide

Follow these steps to create an EZCA cloud PKI subscription in Azure via the Azure Marketplace, using your existing Azure subscription and MACC credits:

How to Create an EZCA SaaS Subscription in Azure

1. Navigate to the Azure Portal and log in with your Azure credentials.

2. Click on + Create a resource.

3. Type “EZCA” in the search bar and press enter.

   

4. Select the EZCA offering from Keytos LLC which matches your data residency requirements.

   • EZCA PKI SaaS For Azure - A global is hosted globally in multiple global datacenters.
   • EZCA EU PKI SaaS For Azure - A European Union instance hosted only in European datacenters.
   • EZCA Australia - An Australia instance hosted only in Australian datacenters.

   

5. Select your desired Azure Subscription.

6. Select your desired plan. For more information refer to the EZCA Plan Comparison.

   

7. Click the Subscribe button

8. Enter your Azure Subscription and Resource Group information, and name your Resource.

9. Click the Review + subscribe button

10. Enter your email and phone number

    

11. Click the Subscribe button

12. Once the subscription is complete, click the “Configure account now” button.

    

How to Activate and Configure Your EZCA Cloud PKI Subscription in EZCA

1. This will redirect you to our portal. Sign in with the same Microsoft account which you used to create the resource in Azure.

2. Enter the AAD Users or Groups that represent your PKI Admins

   Warning

   PKI Administrators will be able to Create, Manage, and Delete Certificate Authorities. This should be a small group of security minded people.

   

3. Once the subscription details are correct, click the “Purchase Plan” button.

   

4. Once you have registered in EZCA, the status in your Azure resource will change to subscribed.

   

5. Once you are registered, you are ready to create your first CA:

   • Root CA
   • Issuing CA
   • SCEP CA
   • ADCS CA
   • Azure Firewall CA