Keyfactor PKI and Certificate Lifecycle Management

Keyfactor · Identity and Access Security

Discover, issue and renew certificates and keys automatically, and manage your own certificate authority.

Draft summary. This page summarises what the vendor's product family is generally known for. Each claim is pending confirmation against vendor documentation.

Overview

Keyfactor helps organisations manage the certificates and keys that machines, applications and devices use to prove who they are. It discovers certificates across the estate, automates issuance and renewal, and can run a private certificate authority.

Products in the family also cover secure code signing and help prepare for changes in cryptography, including shorter certificate lifetimes and post-quantum algorithms.

Primary capability: Machine identity: PKI, certificate lifecycle automation and code signing
Deployment models: SaaSPending vendor confirmation
On-premisesPending vendor confirmation
HybridPending vendor confirmation
Management effort: ModeratePending vendor confirmation

Customer challenges and business value

Expired certificates cause outages
Renewals tracked in spreadsheets are missed, and a lapsed certificate can stop a website, an API or a production line.
No inventory of certificates and keys
Certificates are issued by many teams and tools, so weak, orphaned or shadow certificates go unnoticed.
Cryptography is about to change
Shorter certificate lifetimes and post-quantum algorithms will force far more frequent renewal than manual processes can handle.

What this helps you achieve

Fewer certificate-related outages
A single inventory of certificates and keys with owners
Automation that scales as certificate lifetimes shorten

Key capabilities

Discovery of certificates across networks, cloud and certificate authoritiesPending vendor confirmation
Automated issuance, renewal and revocationPending vendor confirmation
Private PKI and certificate authority managementPending vendor confirmation
Secure code and software signingPending vendor confirmation
Policy enforcement for algorithms, key sizes and lifetimesPending vendor confirmation
Reporting for audits and cryptographic assessmentsPending vendor confirmation

Technical architecture and deployment

Where the product sits in a typical security architecture, and what it connects to.

Data sources

Servers and applications
Cloud services
Devices and IoT

This product

Keyfactor PKI and certificate lifecycle management

Outputs and actions

Issued and renewed certificates
Inventory and reports
Audit evidence

Generic placement for this category. Actual data sources and integrations depend on the product and your environment.

Integration ecosystem

Categories of systems this type of product commonly connects to. Specific connectors and versions are confirmed with the vendor.

Public and private certificate authoritiesPending vendor confirmation
Load balancers, web servers and cloud servicesPending vendor confirmation
DevOps pipelines and container platformsPending vendor confirmation
Hardware security modulesPending vendor confirmation

Common use cases

Preventing outages from expired certificates
Building or replacing a private certificate authority
Securing device and IoT identities
Signing software releases with protected keys

Frequently asked questions

Do we need our own certificate authority?

Not always. Many organisations use a public authority for internet-facing sites and a private one for internal systems and devices. We help decide what fits.

Where does the information on this page come from?

This page is a draft summary of what the vendor's product family is generally known for. Capabilities, deployment models and integrations are marked as pending until they are checked against vendor documentation. Ask us for a confirmed scope for your environment.