How-To: Manage EZCA Subscriptions

Frequently Asked Questions About EZCA Subscriptions

What is an EZCA Subscription and What Do They Contain?

An EZCA subscription is your “account” within EZCA that allows you to create and manage cloud-based Certificate Authorities (CAs) and issue digital certificates. They contain important configuration such as:

• Billing information
• PKI administrators
• Audit log/SIEM settings

When configured on an EZCA subscription, all Certificate Authorities created within that subscription will inherit those settings.

How Many EZCA Subscriptions Do I Need?

Most customers only need one EZCA subscription, as a single EZCA subscription can contain multiple Certificate Authorities, allowing you to manage different PKI deployments under one account. Each CA can have its own configuration, certificate templates, and issuance policies, but share a common set of PKI administrators and billing information.

When you create a new subscription, you can select a Basic or Premium tier, which allows you to create CAs of that tier within the subscription. Basic and Premium CAs cannot be mixed within the same subscription, and will require separate subscriptions for each tier.

How Much Does an EZCA Subscription Cost?

There is no charge to create an EZCA subscription. You are only billed for the Certificate Authorities (CAs) you create within that subscription, including Root, SCEP, and SSL CAs. EZCA only charges for the CAs and their associated Hardware Security Module (HSM) space within the EZCA cloud infrastructure. Both subscriptions and certificates within your CAs are free of charge to create and manage.

For example, if you create a subscription but do not create any CAs, you will not incur any charges. If you create a Root CA and a SCEP CA within that subscription (totaling 2 CAs), you will be billed for both CAs according to the pricing tier you selected when creating the subscription. Whether you issue 10 certificates or 10,000 from your CAs, you will only pay the flat fee for the CAs themselves.

Learn more about EZCA Pricing over at our pricing page.

How to Manage Your EZCA Subscriptions

How to Create a New EZCA Subscription

Check out our Getting Started Guide to learn how to create a new EZCA subscription and set up your new cloud-based Certificate Authority.

How to Manage PKI Administrators

PKI Admins are able to manage your Certificate Authorities, Certificates, and other settings within your EZCA subscription and CAs. Refer to How to Manage PKI Admins for steps on adding or removing PKI Admins from your EZCA subscription.

How to Export EZCA Audit Logs to a SIEM Solution

EZCA allows you to export audit logs to your own SIEM solution for enhanced monitoring and security analysis of your PKI infrastructure. Refer to this guide for steps on configuring audit log exports.

How to Manage Billing for Your EZCA Subscription

Need to update your payment information or billing details for your EZCA subscription? Follow these steps:

1. Navigate to your EZCA portal instance, such as portal.ezca.io.

2. From the left-hand menu, select Settings.

3. Under your EZCA subscription, find the Payment Information section.

   🤔 Not Seeing Payment Information?

   If you’re not seeing the Payment Information section, this means your EZCA subscription is billed through the Azure Marketplace and is billed to your Azure subscription. Refer to your Azure billing portal to manage your payment information.

4. Update your credit card information as needed.

5. Click Save Billing Changes.

How to Delete an EZCA Subscription

Follow these steps to delete an EZCA subscription.

1. Navigate to your EZCA portal instance, such as portal.ezca.io.
2. Go to the Settings tab.
3. Find the subscription you wish to delete and click Cancel Subscription.
4. Confirm the cancellation by following the prompts.