An EZCA subscription is your “account” within EZCA that allows you to create and manage cloud-based Certificate Authorities (CAs) and issue digital certificates. They contain important configuration such as:
When configured on an EZCA subscription, all Certificate Authorities created within that subscription will inherit those settings.
Most customers only need one EZCA subscription, as a single EZCA subscription can contain multiple Certificate Authorities, allowing you to manage different PKI deployments under one account. Each CA can have its own configuration, certificate templates, and issuance policies, but share a common set of PKI administrators and billing information.
When you create a new subscription, you can select a Basic or Premium tier, which allows you to create CAs of that tier within the subscription. Basic and Premium CAs cannot be mixed within the same subscription, and will require separate subscriptions for each tier.
There is no charge to create an EZCA subscription. You are only billed for the Certificate Authorities (CAs) you create within that subscription, including Root, SCEP, and SSL CAs. EZCA only charges for the CAs and their associated Hardware Security Module (HSM) space within the EZCA cloud infrastructure. Both subscriptions and certificates within your CAs are free of charge to create and manage.
For example, if you create a subscription but do not create any CAs, you will not incur any charges. If you create a Root CA and a SCEP CA within that subscription (totaling 2 CAs), you will be billed for both CAs according to the pricing tier you selected when creating the subscription. Whether you issue 10 certificates or 10,000 from your CAs, you will only pay the flat fee for the CAs themselves.
Learn more about EZCA Pricing over at our pricing page.
Check out our Getting Started Guide to learn how to create a new EZCA subscription and set up your new cloud-based Certificate Authority.
Create new EZCA SubscriptionPKI Admins are able to manage your Certificate Authorities, Certificates, and other settings within your EZCA subscription and CAs. Refer to How to Manage PKI Admins for steps on adding or removing PKI Admins from your EZCA subscription.
Manage PKI AdminsEZCA allows you to export audit logs to your own SIEM solution for enhanced monitoring and security analysis of your PKI infrastructure. Refer to this guide for steps on configuring audit log exports.
Export Audit Logs to SIEMNeed to update your payment information or billing details for your EZCA subscription? Follow these steps:
Navigate to your EZCA portal instance, such as portal.ezca.io.
From the left-hand menu, select Settings.
Under your EZCA subscription, find the Payment Information section.
If you’re not seeing the Payment Information section, this means your EZCA subscription is billed through the Azure Marketplace and is billed to your Azure subscription. Refer to your Azure billing portal to manage your payment information.
Update your credit card information as needed.
Click Save Billing Changes.
Follow these steps to delete an EZCA subscription.
Deleting an EZCA subscription will delete all associated Certificate Authorities (CAs) and will permanently revoke all certificates issued by those CAs. Be absolutely sure you want to proceed before deleting a subscription.
If your EZCA subscription or CA recently expired or was accidentally deleted and you need to restore it, please contact our support team at support@keytos.io to inquire about restoration options. While we cannot guarantee that all deleted subscriptions or CAs can be restored, we will do our best to assist you if you reach out to us as soon as possible after the deletion. Please provide as much information as you can about the subscription or CA that was deleted, including the name of the subscription, the name of the CA, and when it was deleted, to help us investigate potential restoration options for you.
If you deleted your cloud certificate authority subscription by mistake or would like to move it to a new subscription, you can follow these steps to transfer your certificate authorities to a new subscription.