EZCA The #1 SCEPman Alternative

Looking for a better PKI solution? Don't settle for SCEPman - try Keytos Azure PKI instead!

At Keytos, we understand that security is a top priority for your organization. That is why we have developed a powerful and easy-to-use PKI solution that is built specifically for Microsoft Azure. While both SCEPman and EZCA can be quickly setup and issue intune certificates in minutes, EZCA does not just stop at issuing Intune certificates. Our native Azure PKI integrations make EZCA is a full PKI solution that can replace your on-premises ADCS Certificate Authority.

Create a Secure Intune CA In Minutes

EZCA SaaS offering makes it easy to create an Intune CA in minutes, watch the video below to see it in action. Deploy yours by following our documentation.

Completely Replace Your ADCS with Azure based PKI

EZCA completely replaces your on premises ADCS CA by allowing you to achieve all the functions that your legacy CA did, without needing to worry about the maintenance and upkeep that it takes to run a highly available PKI. In addition to Intune SCEP certificates, EZCA can issue the following certificate types:

Domain Controller Certificates for Hello For Business Hybrid

One of the key components of passwordless authentication and any modern IT stack is Windows Hello for Business. It gives users a convenient passwordless way to authenticate to corporate resources. EZCA creates the domain controller certificates required for Hybrid Key Trust Hello For Business deployment

Regular SSL Certificates for Internal Sites and Service to Service Authentication

When EZCA was created, the main goal was to help organizations automate the issuance of SSL certificates for all scenarios. We do this via Azure Integrations in addition to enabling other modern certificate issuance methods such as local ACME enabling your engineers to use the tools they are familiar with for certificate lifecycle automation.

Smart Card Certificates

If you are looking at issuing SCEP certificates to intune devices, you are also probably looking at other passwordless authentication methods such as Smart Cards, authentication with Azure CBA, and perhaps even FIDO2 keys. EZCA connects to EZSmartCard the first fully passwordless authentication onboarding tool for Azure.

Why Choose EZCA?

Secure and Compliant While ease of use and quick setup are important factors for a PKI solution, ensuring security and compliance is paramount. EZCA is a globally trusted PKI solution that prioritizes security by adopting industry-leading measures to secure our infrastructure. Our team of experts constantly monitor and update our systems to ensure that they meet the highest security standards. Additionally, our PKIaaS offering's high availability SLA allow your team to focus on other pressing security issues while your CAs will automatically be updated and secured.

PKI Expertise and Guidance Creating a new Certificate Authority can be an intimidating process, our team of PKI experts will be with you every step of the way, When you book your first EZCA demo, a PKI expert will join the call and guide you through the whole process. Additionally, this same expert will be available to answer any questions you may have as you continue your PKI planning, ensuring you are following best practices.

Security that Meets Your Needs EZCA offers a range of plans designed to meet your security needs. Our Basic CA plan enables secure certificate issuance for most organizations, while our advanced plans offer additional features that can help you meet more stringent security requirements. These features include FIPS 140-2 Level 3 HSMs, private infrastructure options, bring-your-own-infrastructure, and bring-your-own-HSM options. Whether you are a small business or a large enterprise, EZCA has a plan that can meet your unique security needs.

Scepman Pricing vs EZCA Pricing

When evaluating certificate management solutions, it's essential to consider both the cost and the features offered. SCEPMan offers two versions: the Community Version, which is advertised as "free" with no licensing the only costs are for the Azure resources consumed, and the Enterprise Version for those seeking support, intermediate CAs, geo-redundancy, certificate management, or certificates for Domain Controllers for Hybrid hello for business authentication. The Enterprise version has a cost per user per month (for example a 400 user deployment will cost 295 Euros plus the Azure infrastructure expenses). On the other hand, Keytos EZCA provides a straightforward pricing model at $200 per month for each CA, including all infrastructure, user management, redundancy, support, and more. It's worth noting that while the costs of these solutions might initially seem high, such as $200 monthly just for issuing certificates, they can be more cost-effective and significantly simpler than managing the infrastructure they replace, like ADCS, CRL, and NDES, in Azure VMs.