Managed PKI | xcellhost

BENEFITS

Managed PKI Saves You Time, Money, & Hassle

PRE-BUILT INTEGRATIONS

DONE-FOR-YOU COMPLIANCE

SAVE TIME & DEPLOY FASTER

REDUCE COSTS

FLEXIBLE HOSTING OPTIONS

BUILT SECURE

PRE-BUILT INTEGRATIONS

Pre-Built Integrations

Having pre-built integrations between your PKI software and the platforms your company runs on will help you get your PKI fully-functional much more quickly, as well as saving a lot of development/IT hours. The Managed PKI systems we recommend include a variety of pre-built integrations for deploying and managing certificates in a variety of systems:

Servers such as Apache, NGINX, and Windows IIS

Load balancers such as F5, A10, Citrix, & AWS

Certificate protocols such as ACME, SCEP, and EST

User devices including Windows, MacOS, Android, and iOS

Microsoft Active Directory

Management systems such as ServiceNow

DONE-FOR-YOU COMPLIANCE

Done-For-You Compliance

Managing a fully-compliant private PKI system requires dotting a lot of i’s and crossing a lot of t’s. If you built your PKI from scratch, you’d be responsible for ongoing security, regular audits, policy documentation and enforcement, key ceremonies, platform updates, infrastructure testing, and more. With a fully-managed PKI solution, all of those compliance headaches are handled by your PKI vendor. In addition, mPKI platforms include customizable reporting features that make it easy for you to monitor and report on compliance at the individual certificate level.

SAVE TIME & DEPLOY FASTER

Save Time and Deploy Faster

Choosing a managed PKI (MPKI) solution means that many of the biggest time sinks have already been handled:

Infrastructure and software setup and managed for you

Pre-built integrations available for all of the most common systems

On-call PKI support to answer questions and resolve issues

Ongoing maintenance and compliance is taken care of

Default certificate profiles and configurations ready-to-go

REDUCE COSTS

Reduce Costs

A fully operational PKI system has a lot of moving parts that cost time and money:

Hardware (servers, databases, and HSMs)

Backups and contingency plans

Operational staff

Server & application software

PKI software

Security systems and staff (firewalls, penetration testing, audits, reporting, etc.)

Choosing a managed PKI solution gives you the benefit of scale and expertise—a PKI provider can handle these items efficiently because it’s what they do—all day, every day. With mPKI, you pay a predictable annual price with no budget surprises.

FLEXIBLE HOSTING OPTIONS

Flexible Hosting Options

You can choose from several different approaches to host your managed PKI solution:

Cloud-hosted for 100% managed infrastructure with unmatched reliability and near-continuous uptime.

Custom cloud-hosted if you prefer to host alongside your other cloud-hosted applications.

On-premise hosting for full control and additional options (such as offline/air-gapped hosting).

Most companies find that cloud hosting offers the best value, uptime, and simplicity, but managed PKI software can be deployed under any of the three models.

BUILT SECURE

Built Secure From the Ground Up

Offline storage for root certificates

Hardware security modules (HSMs) for issuing CAs

Strong access controls

Scheduled penetration testing

Regular backups

External compliance audits

FEATURES

Everything You Need From a PKI Platform

An effective PKI solution is about much more than a root and intermediate CA and certificate issuance—it’s in the
integration and management features where the right mPKI solution really shines.

Certificate Lifecycle Management

Automate certificate installation and management through your management

Cloud-Hosted
or On-Prem

A cloud-based PKI platform offers the fastest deployment, lowest cost, and minimal maintenance.

End-To-End
Security

Your PKI provider is responsible
for defense-in-depth for your
PKI, including HSM-protected
private keys.

Support Certificate
Protocols

Pre-built support for
popular certificate management
protocols including ACME, EST,
and SCEP.

Manage Public & Private
Certificates

Manage your private and public
certificates alongside each other, with full certificate lifecycle.

Pre-Built Integrations
for Your Systems

Leverage pre-built integrations
for servers, devices, platforms,
and other systems you use

Custom Certificate
Profiles

Start with pre-built certificate
profiles or create custom
profiles from scratch

User-Friendly
Control Panel

Get full visibility and control
over every certificate in
a user-friendly control panel.

MANAGED VS. DIY PKI

Managed PKI Simplifies Your Job

Spinning up and managing your own production-ready PKI is a lot like an iceberg—there are a lot of hidden risks and
costs lurking beneath the surface. Take a look at how managed PKI helps you save time and money.

MICROSOFT CA

Upgrade Your Microsoft CA to Managed PKI

Already have a private PKI setup through Microsoft CA, but frustrated with the lack of features and support? You can take your existing private CA and layer a managed PKI platform on top to get the features you’re missing:

Automated Certificate Management - Get full visibility and certificate lifecycle management for all certificates, including certs installed in non-Microsoft environments.

Reduce Your Staff’s Workload - Adding a managed PKI platform to your Microsoft CA removes the need for your staff to do many IT and development tasks.

Better Functionality - In addition to a feature-rich Active Directory integration you’ll get many new features—integrations, user-friend control panels, easy access delegation, management of public certificates, and more.

SOLUTIONS

Compare the Top Managed PKI Providers

Because PKI touches nearly every part of your organization’s IT systems, every company has a unique list of
requirements for a managed PKI provider. The SSL Store specializes in helping you vet and compare multiple PKI
software solutions to find the one that best meets your needs.

Bootstrap demo

PLATFORM	PRICE RANGE	HOSTING OPTIONS	FULLY MANAGED CA	FEATURE SET
	$ - $$$$$	Cloud or On-Prem
	$$$ - $$$$	Cloud or On-Prem
	$$ - $$$$	Cloud or On-Prem
	$ - $$$$	Cloud
	$ - $$	On-Prem
	$ - $$$$	Cloud or On-Prem
	$$$$ - $$$$$	Cloud or On-Prem