ManageEngine Key Manager Plus
SSL and SSH Key Management

Effortless certificate management, trusted by thousands of enterprises and
securing millions of certificates and keys.

Award-winning protection, trusted worldwide

Certified by AV-Comparatives (July 2025) for Business Security, our award-winning protection is recognized by experts and trusted by users worldwide.

442% ROI. $4.5 million in benefits.

From saving cyber insurance costs to improving security posture, our customers share how Endpoint Central delivered value over the years.

Powerful, end-to-end certificate life cycle management for enterprises.

ManageEngine Key Manager Plus is a complete SSL/TLS certificate and SSH key management solution trusted by thousands of enterprises. It automates every stage of certificate management from discovery to renewal all from a single, unified platform.

Empower

Everything

Centralized Key Management

Automation of Key Lifecycle

Compliance Readiness

Role-Based Access
Control

Secures

Everyone

Privileged Access Protection

Encrypted Storage

Policy Enforcement

Audit & Reporting

Manages

Everywhere

SSH Key Lifecycle

SSL/TLS Certificate Lifecycle

Multi-Platform
Integration

High Availability Setup

Exhaustive capabilities, customized for your enterprise needs

With shorter certificate validities come massive management overheads. Key Manager Plus’ comprehensive controls facilitate custom certificate management workflows that automate the entire process.

Automated certificate discovery

Discover every SSL and TLS certificate in your IT infrastructure. Key Manager Plus' automated scans discover and organize certificates from your critical servers, user directories, certificate stores, and third-party certificate authorities (CAs) periodically.

Beyond expiry notifications

Beyond mere certificate expiry alerts, with Key Manager Plus, you can seamlessly automate certificate renewal and life cycle management through an automated certificate management environment. This requires no manual intervention and significantly minimizes overheads.

One-touch workflows

Orchestrate end-to-end certificate life cycle management with Key Manager Plus' extensive workflows. With one-time configuration, Key Manager Plus' single-touch workflows will automate every step of certificate procurement, deployment, and renewal for your enterprise.

Diverse management options

With exhaustive integrations with popular CAs, such as Let's Encrypt, Digicert, and MSCA Integration, as well as built-in private CA capabilities, Key Manager Plus is the only platform you require to manage the complete life cycle of your digital certificates.

Vulnerability protection

Common server vulnerabilities, such as the Heartbleed bug and POODLE SSL, can affect your critical certificates and, in turn, your business operations. With Key Manager Plus' proactive vulnerability scans, you can defend against critical vulnerabilities.

Integrated enterprise experience

Leverage contextual integrations with ITSM and MDM solutions to seamlessly track and manage certificate operations using Key Manager Plus for reduced IT workload and improved security.

Ensure Undisrupted Functioning Of Your Domain And Resources

Secure your SSH keys and SSL/TLS certificates with robust functionalities

SSL/TLS certificate
lifecycle management

Proactively manage your SSL/TLS certificate infrastructure with comprehensive yet easy-to-use capabilities.

Automated discovery

Discover SSL certificates from heterogeneous endpoints—be it web server, load balancer, mail server, AWS-ACM, or MS-Certificate Store—Key Manager Plus has you covered.

Centralized inventory

Consolidate all your SSL certificates in an up-to-date repository, where you can perform all the required operations from a central location.

Creation and deployment

Create self-signed certificates effortlessly for your internal networks. Deploy all types of certificates on any platform-agnostic machine, browser, IIS server, AWS etc.

Certificate Expiration Alert and Auto renewal of Certificates

Configure to receive prompt notifications of impending expirations and automate the renewal of soon-to-expire certificates.

Public CA integration

Order, renew, and reissue certificates issued by third-party Certificate Authorities (CA) such as Let’s Encrypt (ACME), Microsoft-CA, GlobalSign, Sectigo, and DigiCert.

Generation and signing of CSRs

Generate, sign, and manage Certificate Signing Requests (CSRs) from a single interface.Learn More

SSH key lifecycle management

Seamlessly discover, consolidate, create, and associate SSH keys in your network.

Consolidated repository

Consolidate, store, and track the SSH keys in a secure repository to gain complete visibility of all the keys deployed in your network.

On-demand, scheduled discovery

Discover SSH keys in bulk, and easily identify SSH resources from remote machines via landing servers.

Periodic rotation of keys

Automate the periodic rotation of SSH keys, and get notified about the keys which aren’t rotated for extended periods.

Creation and deployment

Create new pairs of SSH keys with strong passphrases and associate them with the required user accounts.

Secure remote access

Regulate and restrict access to remote SSH resources with additional layers of security.

Common features

Best practice functionalities to eliminate gaps in machine identity management.

Audits

A sound auditing system to track and record all activities performed in the product as well as the commands executed during each terminal SSH session.

Dashboard

An intuitive dashboard with dedicated widgets for quick identification of expired certificates, SHA-1 certificates, and SSL vulnerabilities.

Compliance

Strict adherence to the industry standards and regulations issued by NIST, PCI-DSS, SOX, HIPAA, FISMA, GLBA, NERC-CIP, and COBIT.

Reports

A collection of more than 30 ready-to-download reports on public CA integrations and various operations involved in the SSH key and SSL certificate lifecycle management.

Access control

Centralized mechanism to monitor and regulate access permissions based on the user roles to prevent security violations by unauthorized users.

Disaster recovery

Scheduled backup of the entire database ensures quick and secure recovery of data due to the rare event of data loss or machine failure.

Help desk integration

Integration with enterprise ticketing systems such as ServiceNow and ManageEngine ServiceDesk Plus to automatically raise tickets for expiring and vulnerable SSL certificates.

Alerts

Periodic alerts and notifications via email, Syslog, and SNMP traps where the content and frequency of alerts can be customized.

Active Directory (AD) integration

AD users can be imported and managed from Key Manager Plus where periodic checks are executed to synchronize with the user database of an AD domain.

Deployment Options

On-Premises Deployment

Key Manager Plus is primarily a web-based application installed on your own infrastructure (Windows or Linux servers).

It requires standard system resources and an external SMTP server for notifications.

You can configure MS SQL Server as the backend database for scalability and failover support.

Agent-Based Deployment

Lightweight Key Manager Plus Agents can be installed on remote systems to perform certificate-related operations.

Useful for managing servers in DMZs or outside the domain where the main Key Manager Plus server resides.

Agents can be deployed:

Individually using an installer wizard.
In bulk using Windows Group Policy Objects (GPO).

Agents handle tasks like SSL certificate discovery, signing, and deployment.

Direct Deployment from
the Server

Certificates stored in the Key Manager Plus repository can be deployed directly to:

Windows MS Certificate Store
Internet Information Services (IIS)
Linux servers

Supports single-server, multi-server (bulk), or agent-based deployment modes.

For multi-server deployment, you can upload a CSV file with server details for automation.

Failover Service (FOS)

Key Manager Plus supports Failover Service configuration for high availability.

This ensures continuity in case the primary server goes down.

Why businesses love Key Manager Plus

Key Manager Plus makes managing certificates easy and fast.It stands out because of its customer-first approach, quick time to value, and strong industry expertise.

Rapid time to value

All ManageEngine solutions, including Key Manager Plus, are easy to deploy and adopt.

Can be set up in as little as two days.

Customers get free onboarding help from product experts.

Proven industry expertise

ManageEngine has been a leading certificate lifecycle management vendor for over a decade.

Strong integrations with third-party certificate authorities, cloud platforms, and IT security solutions.

Offers a complete enterprise experience.

Proactive assistance at every step

Provides timely, proactive support through preferred channels (email, phone, virtual conference).

24/7 technical assistance.

On-site support available for large enterprises.

Global partnerships

Extensive partnerships with global system integrators.

Helps with on-site implementations, proofs of concept, and customizations.

Localized technical assistance in preferred languages.

See the powerful capabilities of Key Manager Plus in action

Upgrade to a Fully Managed Security Posture

Introducing KIDAN’s Endpoint Management and Security as a Service powered by our 24/7 Swiss-led Technology Operations Center (TOC)

24/7 Proactive Security & Threat Mitigation

Our TOC operates around the clock to monitor your endpoints. We don’t just send you alerts; we actively investigate, validate, and remediate threats before they can impact your operations. This includes vulnerability management, patch deployment, and enforcing security configurations across your entire fleet of devices.

Expert Management & Optimization

Your Endpoint Central platform will be managed and optimized by certified engineers who live and breathe this technology. We handle all software deployments, policy configurations, and routine maintenance, ensuring the tool is always performing at its peak and aligned with the latest security best practices.

Strategic Reporting & Visibility

Move beyond raw data. We provide you with clear, executive-level monthly reports that translate technical activity into business-relevant insights. Understand your security posture, see the threats we’ve neutralized, and demonstrate compliance with ease.

We’ve been redefining IT for enterprises, excellence in every solution.

How KIDAN Works with You

Choose the Model That Fits You Best

We don’t just provide software we partner with you to ensure it delivers real, lasting value. Whether you’re looking for light-touch guidance or full-scale operational support, we offer flexible service models tailored to your needs.

License + Expert Guidance

Start with the right license and unlock full value.

Already have the tool or just getting started? We’ll help you provision the right licenses and guide you to unlock the full potential of your investment. Think of us as your strategic advisor always available, never intrusive.

Get Expert Guidance

Implementation & Onboarding

We’ll help you set up, onboard, and train your team.

We’ll help you set up, onboard, and train your team.Need help getting up and running? We’re with you every step of the way from setup and configuration to onboarding and training. Our experts ensure your team is confident, capable, and ready to go.

Launch with Confidence

Fully Managed Service

We manage everything so you don’t have to.

Prefer to stay hands-off? Let us run the tool for you. We’ll handle everything monitoring, maintenance, updates, and optimization so you can focus on what matters most: your
business.

Let KIDAN Run It

Introducing KIDAN’s Endpoint Management and Security as a Service powered by our 24/7 Swiss-led Technology Operations Center (TOC)

Live Demo

Go Beyond the Datasheet: A 3-
Minute Tour of the Endpoint Central
Console.

Deployment Options

On-Premises Deployment

Key Manager Plus is primarily a web-based application installed on your own infrastructure (Windows or Linux servers).

It requires standard system resources and an external SMTP server for notifications.

You can configure MS SQL Server as the backend database for scalability and failover support.

Agent-Based Deployment

Lightweight Key Manager Plus Agents can be installed on remote systems to perform certificate-related operations.

Useful for managing servers in DMZs or outside the domain where the main Key Manager Plus server resides.

Agents can be deployed:

Individually using an installer wizard.
In bulk using Windows Group Policy Objects (GPO).

Agents handle tasks like SSL certificate discovery, signing, and deployment.

Direct Deployment from
the Server

Certificates stored in the Key Manager Plus repository can be deployed directly to:

Windows MS Certificate Store
Internet Information Services (IIS)
Linux servers

Supports single-server, multi-server (bulk), or agent-based deployment modes.

For multi-server deployment, you can upload a CSV file with server details for automation.

Failover Service (FOS)

Key Manager Plus supports Failover Service configuration for high availability.

This ensures continuity in case the primary server goes down.

How KIDAN Works with You

Choose the Model That Fits You Best

License + Expert Guidance

Start with the right license and unlock full value.

Get Expert Guidance

Implementation & Onboarding

We’ll help you set up, onboard, and train your team.

Launch with Confidence

Fully Managed Service

We manage everything so you don’t have to.

Prefer to stay hands-off? Let us run the tool for you. We’ll handle everything monitoring, maintenance, updates, and optimization so you can focus on what matters most: your
business.

Let KIDAN Run It

Introducing KIDAN’s Endpoint Management and Security as a Service powered by our 24/7 Swiss-led Technology Operations Center (TOC)

Exhaustive capabilities, customized for your enterprise needs

With shorter certificate validities come massive management overheads. Key Manager Plus’ comprehensive controls facilitate custom certificate management workflows that automate the entire process.