ManageEngine Key Manager Plus
SSL and SSH Key Management

Effortless certificate management, trusted by thousands of enterprises and
securing millions of certificates and keys.

ManageEngine scored above 4 in all four endpoint management use cases in the 2026 Gartner® Critical Capabilities report, highlighting strong performance across autonomous, unified, security-centric, and frontline device management

ManageEngine has been named a Leader in Digital Employee Experience (DEX) Solutions and AI-enabled Digital Workplace in the ISG Provider Lens™ – Future of Work Solutions 2025

Zoho Corp. (ManageEngine) has been recognised as a Leader in the IDC MarketScape: Worldwide Unified Endpoint Management Software 2025–2026 Vendor Assessment

We have been recognized as a Challenger – Fast Mover in the 2025 GigaOm Radar for Secure Enterprise Browsing, Patch Management, and Ransomware Prevention solutions. A Leader – Fast Mover in the 2026 GigaOm Radar for UEM.

Powerful, end-to-end certificate life cycle management for enterprises.

ManageEngine Key Manager Plus is a complete SSL/TLS certificate and SSH key management solution trusted by thousands of enterprises. It automates every stage of certificate management from discovery to renewal all from a single, unified platform.

Empower

Everything

Centralized Key Management

Automation of Key Lifecycle

Compliance Readiness

Role-Based Access
Control

Secures

Everyone

Privileged Access Protection

Encrypted Storage

Policy Enforcement

Audit & Reporting

Manages

Everywhere

SSH Key Lifecycle

SSL/TLS Certificate Lifecycle

Multi-Platform
Integration

High Availability Setup

Exhaustive capabilities, customized for your enterprise needs

With shorter certificate validities come massive management overheads. Key Manager Plus’ comprehensive controls facilitate custom certificate management workflows that automate the entire process.

Automated certificate discovery

Discover every SSL and TLS certificate in your IT infrastructure. Key Manager Plus' automated scans discover and organize certificates from your critical servers, user directories, certificate stores, and third-party certificate authorities (CAs) periodically.

Beyond expiry notifications

Beyond mere certificate expiry alerts, with Key Manager Plus, you can seamlessly automate certificate renewal and life cycle management through an automated certificate management environment. This requires no manual intervention and significantly minimizes overheads.

One-touch workflows

Orchestrate end-to-end certificate life cycle management with Key Manager Plus' extensive workflows. With one-time configuration, Key Manager Plus' single-touch workflows will automate every step of certificate procurement, deployment, and renewal for your enterprise.

Diverse management options

With exhaustive integrations with popular CAs, such as Let's Encrypt, Digicert, and MSCA Integration, as well as built-in private CA capabilities, Key Manager Plus is the only platform you require to manage the complete life cycle of your digital certificates.

Vulnerability protection

Common server vulnerabilities, such as the Heartbleed bug and POODLE SSL, can affect your critical certificates and, in turn, your business operations. With Key Manager Plus' proactive vulnerability scans, you can defend against critical vulnerabilities.

Integrated enterprise experience

Leverage contextual integrations with ITSM and MDM solutions to seamlessly track and manage certificate operations using Key Manager Plus for reduced IT workload and improved security.

Ensure Undisrupted Functioning Of Your Domain And Resources

Secure your SSH keys and SSL/TLS certificates with robust functionalities

SSL/TLS certificate
lifecycle management

Proactively manage your SSL/TLS certificate infrastructure with comprehensive yet easy-to-use capabilities.

Automated discovery

Discover SSL certificates from heterogeneous endpoints—be it web server, load balancer, mail server, AWS-ACM, or MS-Certificate Store—Key Manager Plus has you covered.

Centralized inventory

Consolidate all your SSL certificates in an up-to-date repository, where you can perform all the required operations from a central location.

Creation and deployment

Create self-signed certificates effortlessly for your internal networks. Deploy all types of certificates on any platform-agnostic machine, browser, IIS server, AWS etc.

Certificate Expiration Alert and Auto renewal of Certificates

Configure to receive prompt notifications of impending expirations and automate the renewal of soon-to-expire certificates.

Public CA integration

Order, renew, and reissue certificates issued by third-party Certificate Authorities (CA) such as Let’s Encrypt (ACME), Microsoft-CA, GlobalSign, Sectigo, and DigiCert.

Generation and signing of CSRs

Generate, sign, and manage Certificate Signing Requests (CSRs) from a single interface.Learn More

SSH key lifecycle management

Seamlessly discover, consolidate, create, and associate SSH keys in your network.

Consolidated repository

Consolidate, store, and track the SSH keys in a secure repository to gain complete visibility of all the keys deployed in your network.

On-demand, scheduled discovery

Discover SSH keys in bulk, and easily identify SSH resources from remote machines via landing servers.

Periodic rotation of keys

Automate the periodic rotation of SSH keys, and get notified about the keys which aren’t rotated for extended periods.

Creation and deployment

Create new pairs of SSH keys with strong passphrases and associate them with the required user accounts.

Secure remote access

Regulate and restrict access to remote SSH resources with additional layers of security.

Common features

Best practice functionalities to eliminate gaps in machine identity management.

Audits

A sound auditing system to track and record all activities performed in the product as well as the commands executed during each terminal SSH session.

Dashboard

An intuitive dashboard with dedicated widgets for quick identification of expired certificates, SHA-1 certificates, and SSL vulnerabilities.

Compliance

Strict adherence to the industry standards and regulations issued by NIST, PCI-DSS, SOX, HIPAA, FISMA, GLBA, NERC-CIP, and COBIT.

Reports

A collection of more than 30 ready-to-download reports on public CA integrations and various operations involved in the SSH key and SSL certificate lifecycle management.

Access control

Centralized mechanism to monitor and regulate access permissions based on the user roles to prevent security violations by unauthorized users.

Disaster recovery

Scheduled backup of the entire database ensures quick and secure recovery of data due to the rare event of data loss or machine failure.

Help desk integration

Integration with enterprise ticketing systems such as ServiceNow and ManageEngine ServiceDesk Plus to automatically raise tickets for expiring and vulnerable SSL certificates.

Alerts

Periodic alerts and notifications via email, Syslog, and SNMP traps where the content and frequency of alerts can be customized.

Active Directory (AD) integration

AD users can be imported and managed from Key Manager Plus where periodic checks are executed to synchronize with the user database of an AD domain.

Deployment Options

On-Premises Deployment

Key Manager Plus is primarily a web-based application installed on your own infrastructure (Windows or Linux servers).

It requires standard system resources and an external SMTP server for notifications.

You can configure MS SQL Server as the backend database for scalability and failover support.

Agent-Based Deployment

Lightweight Key Manager Plus Agents can be installed on remote systems to perform certificate-related operations.

Useful for managing servers in DMZs or outside the domain where the main Key Manager Plus server resides.

Agents can be deployed:

Individually using an installer wizard.
In bulk using Windows Group Policy Objects (GPO).

Agents handle tasks like SSL certificate discovery, signing, and deployment.

Direct Deployment from
the Server

Certificates stored in the Key Manager Plus repository can be deployed directly to:

Windows MS Certificate Store
Internet Information Services (IIS)
Linux servers

Supports single-server, multi-server (bulk), or agent-based deployment modes.

For multi-server deployment, you can upload a CSV file with server details for automation.

Failover Service (FOS)

Key Manager Plus supports Failover Service configuration for high availability.

This ensures continuity in case the primary server goes down.

Why businesses love Key Manager Plus

Key Manager Plus makes managing certificates easy and fast.It stands out because of its customer-first approach, quick time to value, and strong industry expertise.

Rapid time to value

All ManageEngine solutions, including Key Manager Plus, are easy to deploy and adopt.

Can be set up in as little as two days.

Customers get free onboarding help from product experts.

Proven industry expertise

ManageEngine has been a leading certificate lifecycle management vendor for over a decade.

Strong integrations with third-party certificate authorities, cloud platforms, and IT security solutions.

Offers a complete enterprise experience.

Proactive assistance at every step

Provides timely, proactive support through preferred channels (email, phone, virtual conference).

24/7 technical assistance.

On-site support available for large enterprises.

Global partnerships

Extensive partnerships with global system integrators.

Helps with on-site implementations, proofs of concept, and customizations.

Localized technical assistance in preferred languages.

See the powerful capabilities of Key Manager Plus in action

Upgrade to a Fully Managed Security Posture

Introducing KIDAN’s Endpoint Management and Security as a Service powered by our 24/7 Swiss-led Technology Operations Center (TOC)

24/7 Proactive Security & Threat Mitigation

Our TOC operates around the clock to monitor your endpoints. We don’t just send you alerts; we actively investigate, validate, and remediate threats before they can impact your operations. This includes vulnerability management, patch deployment, and enforcing security configurations across your entire fleet of devices.

Expert Management & Optimization

Your Endpoint Central platform will be managed and optimized by certified engineers who live and breathe this technology. We handle all software deployments, policy configurations, and routine maintenance, ensuring the tool is always performing at its peak and aligned with the latest security best practices.

Strategic Reporting & Visibility

Move beyond raw data. We provide you with clear, executive-level monthly reports that translate technical activity into business-relevant insights. Understand your security posture, see the threats we’ve neutralized, and demonstrate compliance with ease.

We’ve been redefining IT for enterprises, excellence in every solution.

How KIDAN Works with You

Choose the Model That Fits You Best

We don’t just provide software we partner with you to ensure it delivers real, lasting value. Whether you’re looking for light-touch guidance or full-scale operational support, we offer flexible service models tailored to your needs.

License + Expert Guidance

Start with the right license and unlock full value.

Already have the tool or just getting started? We’ll help you provision the right licenses and guide you to unlock the full potential of your investment. Think of us as your strategic advisor always available, never intrusive.

Get Expert Guidance

Implementation & Onboarding

We’ll help you set up, onboard, and train your team.

We’ll help you set up, onboard, and train your team.Need help getting up and running? We’re with you every step of the way from setup and configuration to onboarding and training. Our experts ensure your team is confident, capable, and ready to go.

Launch with Confidence

Fully Managed Service

We manage everything so you don’t have to.

Prefer to stay hands-off? Let us run the tool for you. We’ll handle everything monitoring, maintenance, updates, and optimization so you can focus on what matters most: your
business.

Let KIDAN Run It

Introducing KIDAN’s Endpoint Management and Security as a Service powered by our 24/7 Swiss-led Technology Operations Center (TOC)

Live Demo

Go Beyond the Datasheet: A 3-
Minute Tour of the Endpoint Central
Console.

Deployment Options

On-Premises Deployment

Key Manager Plus is primarily a web-based application installed on your own infrastructure (Windows or Linux servers).

It requires standard system resources and an external SMTP server for notifications.

You can configure MS SQL Server as the backend database for scalability and failover support.

Agent-Based Deployment

Lightweight Key Manager Plus Agents can be installed on remote systems to perform certificate-related operations.

Useful for managing servers in DMZs or outside the domain where the main Key Manager Plus server resides.

Agents can be deployed:

Individually using an installer wizard.
In bulk using Windows Group Policy Objects (GPO).

Agents handle tasks like SSL certificate discovery, signing, and deployment.

Direct Deployment from
the Server

Certificates stored in the Key Manager Plus repository can be deployed directly to:

Windows MS Certificate Store
Internet Information Services (IIS)
Linux servers

Supports single-server, multi-server (bulk), or agent-based deployment modes.

For multi-server deployment, you can upload a CSV file with server details for automation.

Failover Service (FOS)

Key Manager Plus supports Failover Service configuration for high availability.

This ensures continuity in case the primary server goes down.

How KIDAN Works with You

Choose the Model That Fits You Best

License + Expert Guidance

Start with the right license and unlock full value.

Get Expert Guidance

Implementation & Onboarding

We’ll help you set up, onboard, and train your team.

Launch with Confidence

Fully Managed Service

We manage everything so you don’t have to.

Prefer to stay hands-off? Let us run the tool for you. We’ll handle everything monitoring, maintenance, updates, and optimization so you can focus on what matters most: your
business.

Let KIDAN Run It

Introducing KIDAN’s Endpoint Management and Security as a Service powered by our 24/7 Swiss-led Technology Operations Center (TOC)

Exhaustive capabilities, customized for your enterprise needs

With shorter certificate validities come massive management overheads. Key Manager Plus’ comprehensive controls facilitate custom certificate management workflows that automate the entire process.

Automated certificate discovery

Beyond expiry notifications

One-touch workflows

Diverse management options

Vulnerability protection

Integrated enterprise experience

Leverage contextual integrations with ITSM and MDM solutions to seamlessly track and manage certificate operations using Key Manager Plus for reduced IT workload and improved security.

Ensure Undisrupted Functioning Of Your Domain And Resources

Secure your SSH keys and SSL/TLS certificates with robust functionalities

SSL/TLS certificate
lifecycle management

Proactively manage your SSL/TLS certificate infrastructure with comprehensive yet easy-to-use capabilities.

Automated discovery

Discover SSL certificates from heterogeneous endpoints—be it web server, load balancer, mail server, AWS-ACM, or MS-Certificate Store—Key Manager Plus has you covered.

Centralized inventory

Consolidate all your SSL certificates in an up-to-date repository, where you can perform all the required operations from a central location.

Creation and deployment

Create self-signed certificates effortlessly for your internal networks. Deploy all types of certificates on any platform-agnostic machine, browser, IIS server, AWS etc.

Certificate Expiration Alert and Auto renewal of Certificates

Configure to receive prompt notifications of impending expirations and automate the renewal of soon-to-expire certificates.

Public CA integration

Order, renew, and reissue certificates issued by third-party Certificate Authorities (CA) such as Let’s Encrypt (ACME), Microsoft-CA, GlobalSign, Sectigo, and DigiCert.

Generation and signing of CSRs

Generate, sign, and manage Certificate Signing Requests (CSRs) from a single interface.Learn More

SSH key lifecycle management

Seamlessly discover, consolidate, create, and associate SSH keys in your network.

Consolidated repository

Consolidate, store, and track the SSH keys in a secure repository to gain complete visibility of all the keys deployed in your network.

On-demand, scheduled discovery

Discover SSH keys in bulk, and easily identify SSH resources from remote machines via landing servers.

Periodic rotation of keys

Automate the periodic rotation of SSH keys, and get notified about the keys which aren’t rotated for extended periods.

Creation and deployment

Create new pairs of SSH keys with strong passphrases and associate them with the required user accounts.

Secure remote access

Regulate and restrict access to remote SSH resources with additional layers of security.

Common features

Best practice functionalities to eliminate gaps in machine identity management.

Audits

A sound auditing system to track and record all activities performed in the product as well as the commands executed during each terminal SSH session.

Dashboard

An intuitive dashboard with dedicated widgets for quick identification of expired certificates, SHA-1 certificates, and SSL vulnerabilities.

Compliance

Strict adherence to the industry standards and regulations issued by NIST, PCI-DSS, SOX, HIPAA, FISMA, GLBA, NERC-CIP, and COBIT.

Reports

A collection of more than 30 ready-to-download reports on public CA integrations and various operations involved in the SSH key and SSL certificate lifecycle management.

Access control

Centralized mechanism to monitor and regulate access permissions based on the user roles to prevent security violations by unauthorized users.

Disaster recovery

Scheduled backup of the entire database ensures quick and secure recovery of data due to the rare event of data loss or machine failure.

Help desk integration

Integration with enterprise ticketing systems such as ServiceNow and ManageEngine ServiceDesk Plus to automatically raise tickets for expiring and vulnerable SSL certificates.

Alerts

Periodic alerts and notifications via email, Syslog, and SNMP traps where the content and frequency of alerts can be customized.

Active Directory (AD) integration

AD users can be imported and managed from Key Manager Plus where periodic checks are executed to synchronize with the user database of an AD domain.

Why businesses love Key Manager Plus

Key Manager Plus makes managing certificates easy and fast.It stands out because of its customer-first approach, quick time to value, and strong industry expertise.

Rapid time to value

All ManageEngine solutions, including Key Manager Plus, are easy to deploy and adopt.

Can be set up in as little as two days.

Customers get free onboarding help from product experts.

Proven industry expertise

ManageEngine has been a leading certificate lifecycle management vendor for over a decade.

Strong integrations with third-party certificate authorities, cloud platforms, and IT security solutions.

Offers a complete enterprise experience.

Proactive assistance at every step

Provides timely, proactive support through preferred channels (email, phone, virtual conference).

24/7 technical assistance.

On-site support available for large enterprises.

Global partnerships

Extensive partnerships with global system integrators.

Helps with on-site implementations, proofs of concept, and customizations.

Localized technical assistance in preferred languages.

Deployment Options

On-Premises Deployment

Key Manager Plus is primarily a web-based application installed on your own infrastructure (Windows or Linux servers).

It requires standard system resources and an external SMTP server for notifications.

You can configure MS SQL Server as the backend database for scalability and failover support.

Agent-Based Deployment

Lightweight Key Manager Plus Agents can be installed on remote systems to perform certificate-related operations.

Useful for managing servers in DMZs or outside the domain where the main Key Manager Plus server resides.

Agents can be deployed:

Individually using an installer wizard.
In bulk using Windows Group Policy Objects (GPO).

Agents handle tasks like SSL certificate discovery, signing, and deployment.

Direct Deployment from
the Server

Certificates stored in the Key Manager Plus repository can be deployed directly to:

Windows MS Certificate Store
Internet Information Services (IIS)
Linux servers

Supports single-server, multi-server (bulk), or agent-based deployment modes.

For multi-server deployment, you can upload a CSV file with server details for automation.

Failover Service (FOS)

Key Manager Plus supports Failover Service configuration for high availability.

This ensures continuity in case the primary server goes down.

How KIDAN Works with You

Choose the Model That Fits You Best

License + Expert Guidance

Start with the right license and unlock full value.

Get Expert Guidance

Implementation & Onboarding

We’ll help you set up, onboard, and train your team.

Launch with Confidence

Fully Managed Service

We manage everything so you don’t have to.

Prefer to stay hands-off? Let us run the tool for you. We’ll handle everything monitoring, maintenance, updates, and optimization so you can focus on what matters most: your
business.

Let KIDAN Run It

Introducing KIDAN’s Endpoint Management and Security as a Service powered by our 24/7 Swiss-led Technology Operations Center (TOC)

We’ve been redefining IT for enterprises, excellence in every solution.

See the powerful capabilities of Key Manager Plus in action

Pricing Plans Tailored to Fit Your Business

KeyManager Plus – Prices

Request a price demo

Datasheet

Key Manager Plus Datasheet

Download PDF

Solution

Key Manager Plus Solution Brief

Download PDF

Flyer

Key Manager Plus Solution Flyer

Download PDF

Integrations

Microsoft CA integration

KMP Live Demo

Your Questions, Answered with Clarity.

Direct answers to the most common strategic, technical, and commercial questions
about Endpoint Central.

Is there a SaaS version of Key Manager Plus available?

Yes, Key Manager Plus is available as both a SaaS solution as well as an on-premise deployment.

Are all the capabilities of Key Manager Plus bundled together?

Yes. Key Manager Plus offers both key and certificate management capabilities in a single interface. The SSH key management tool can be accessed as a separate module from within the Key Manager Plus interface.

Do you offer APIs for TLS certificate management?

Yes. You can leverage Key Manager Plus’ RESTful APIs to facilitate certificate life cycle automation and SSH key management. Using the APIs, you can allow applications to create, fetch, and associate digital keys, and add, retrieve, or manage users programmatically.

As a Service

Partner Program

IAM

Cloud

UEM

MSP

Security

...........

Help Desk

Networks

.....

....

IT Analytics

AlarmsOne

ManageEngine

IAM

AD360

Access Manager Plus

ADManager Plus

ADSelfService Plus

Access Manager Plus

Key Manager Plus

Identity 360

PAM360

Password Manager Pro

Recovery Manager Plus

IAM

UEM

Security

Networks

Cloud

MSP

Help Desk

IT Analytics

ColorTokens

Cloudflare

SentinelOne

Microsoft

Horizon3

Zoho

Xink

Sangfor

390+

115+

1'300+