Certify The Web From $4.92/mo · Free plan 9.4 Visit 
ManageEngine Key Manager Plus
manageengine.com
What it is
ManageEngine Key Manager Plus centralizes SSL/TLS certificate lifecycle management across enterprise networks, from discovery and acquisition to deployment, renewal, and expiry tracking. It finds certificates across endpoints and stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. Renewal can be automated, with expiry alerts sent by email, SNMP traps, or syslog. Listed public CA integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte. It also manages SSH and PGP keys in a digital-key vault. Audit features cover key and certificate operations, privileged-session video, and activity reports. Controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and external storage for the master encryption key. The product is offered as SaaS and on premises. A free plan and 30-day trial are listed. The on-premises license for 25 managed keys is $59.00 per month, billed monthly.
Spec sheet
- What it does
- Key Manager Plus is a web-based system for discovering, consolidating, creating, deploying, rotating, renewing, monitoring and auditing SSH keys and SSL/TLS certificates.Read 15 Oct 2026 · getapp.com
- Purpose
- Key Manager Plus manages SSL/TLS certificate lifecycles across enterprise networks, from discovery and acquisition through deployment, renewal, and expiry tracking.Read 29 Sep 2026 · manageengine.com
- Intended users
- The product is positioned for enterprises seeking centralized management of certificates and machine identities across their IT infrastructure.Read 29 Sep 2026 · manageengine.com
- Platforms
- The FAQ lists Windows Server and Linux distributions as supported server operating systems, while downloads are offered as 64-bit EXE and BIN installers.Read 29 Sep 2026 · manageengine.com
- Deployment
- The product is offered as both a SaaS solution and an on-premises deployment.Read 29 Sep 2026 · manageengine.com
- Trial
- The vendor offers a 30-day free trial and states that no credit card is required.Read 29 Sep 2026 · manageengine.com
- Compliance
- The vendor says the product supports adherence to NIST, PCI-DSS, SOX, HIPAA, FISMA, GLBA, NERC-CIP, and COBIT standards and regulations.Read 29 Sep 2026 · manageengine.com
- Support
- Support is offered through on-premises and cloud email addresses, telephone callback options, forums and FAQs.Read 15 Oct 2026 · manageengine.com
- Headquarters
- Pleasanton, California, United StatesRead 28 Sep 2026 · manageengine.com
- Founded
- 1996Read 28 Sep 2026 · manageengine.com
- API authentication
- Only administrators can generate API keys, which act as host-bound authentication tokens and can be regenerated if compromised.Read 15 Oct 2026 · manageengine.com
- Audit and monitoring
- Operations are audited, certificate and key events can trigger email, SNMP or Syslog alerts, and remote SSH sessions can be video recorded.Read 15 Oct 2026 · manageengine.com
- Auditing
- It provides operation-wise audit trails for SSH keys and SSL/TLS certificates, session video recording for privileged sessions, and activity reports.Read 29 Sep 2026 · manageengine.com
- Azure secrets
- The product manages Azure Key Vault secrets and application secrets through a unified interface.Read 15 Oct 2026 · store.manageengine.com
- Browser support
- The HTML client supports Edge on Windows and Chrome, Firefox and Safari on Windows, Linux and macOS.Read 15 Oct 2026 · manageengine.com
- CA integrations
- Official CA integrations include Let’s Encrypt, DigiCert, GoDaddy, The SSL Store providers, GlobalSign, Sectigo and Microsoft Certificate Authority.Read 15 Oct 2026 · download.manageengine.com
- Certificate authority integrations
- Listed public CA integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte.Read 29 Sep 2026 · manageengine.com
- Certificate discovery
- It discovers certificates across endpoints and certificate stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates.Read 29 Sep 2026 · manageengine.com
- Certificate lifecycle
- The product provides certificate discovery, inventory, CSR generation, deployment, renewal, post-deployment automation, public and private CA management, vulnerability scanning, audits and reports.Read 15 Oct 2026 · manageengine.com
- Company founding
- LinkedIn lists ManageEngine as founded in 2002.Read 15 Oct 2026 · linkedin.com
- Company size
- LinkedIn lists ManageEngine as privately held with 5,001–10,000 employees.Read 15 Oct 2026 · linkedin.com
- Database support
- PostgreSQL 14.7 is bundled and Microsoft SQL Server 2012 or later is supported.Read 15 Oct 2026 · manageengine.com
- Deployment model
- TrustRadius lists the deployment type as on-premise and the supported operating systems as Windows and Linux.Read 15 Oct 2026 · trustradius.com
- DevOps integrations
- The feature set includes Jenkins secrets support and Kubernetes secrets management for certificate deployment workflows.Read 15 Oct 2026 · manageengine.com
- Documentation
- The vendor documentation hub provides online help, quickstart material, FAQs, system requirements, security specifications, case studies, tutorials and release notes.Read 15 Oct 2026 · manageengine.com
- Identity integrations
- Authentication can use Microsoft Active Directory, LDAP-compatible directories, RADIUS or local accounts, with role-based access controls.Read 15 Oct 2026 · manageengine.com
- ITSM integrations
- Key Manager Plus integrates with ServiceNow and ManageEngine ServiceDesk Plus so certificate expiry and vulnerability events can drive ticketing workflows.Read 15 Oct 2026 · manageengine.com
- Licence
- The licence agreement grants a proprietary, non-exclusive, non-transferable ZOHO licence; it is not an open-source licence.Read 15 Oct 2026 · manageengine.cn
- Limit: Java resource usage
- A G2 reviewer reports that the Java implementation is resource hungry and that Linux deployment can be tricky because of Java dependencies.Read 15 Oct 2026 · g2.com
- Limit: performance at scale
- A Software Advice reviewer reports slow loading with large sets of keys and asks for stronger reporting.Read 15 Oct 2026 · softwareadvice.com
- Limit: reporting
- Software Advice reviewers say reporting is not robust enough for some audit and tracking requirements.Read 15 Oct 2026 · softwareadvice.com
- Limit: sparse review evidence
- GetApp shows only two verified reviews, so its 4.5 rating is based on a small sample.Read 15 Oct 2026 · getapp.com
- Maker ownership
- ManageEngine is identified as the enterprise IT-management division of Zoho Corporation.Read 15 Oct 2026 · gartner.com
- Mobile certificate integration
- Integration with ManageEngine MDM discovers and deploys certificates on iOS, Android, Windows, Chrome OS, macOS and Apple tvOS devices.Read 15 Oct 2026 · manageengine.com
- Notable news
- The September 2026 release added post-deployment actions, dynamic certificate script arguments, certificate-chain deployment to Microsoft stores and optional TripleDES encryption for deployments.Read 15 Oct 2026 · manageengine.com
- Other integrations
- The product features integrations with ServiceNow and ManageEngine ServiceDesk Plus for ticketing and with Active Directory for user synchronization.Read 29 Sep 2026 · manageengine.com
- PGP keys
- Administrators can create and manage PGP keys from the web interface and audit their use.Read 15 Oct 2026 · manageengine.com
- Praise: centralization
- Gartner reviewers repeatedly praise centralized encryption-key and certificate management for reducing manual effort.Read 15 Oct 2026 · gartner.com
- Praise: installation and integrations
- A G2 reviewer says installation and configuration are quick and highlights integrations with Windows services and tools.Read 15 Oct 2026 · g2.com
- Praise: usability
- A Gartner reviewer describes the interface as clean and intuitive and says it reduces compliance and operational overhead.Read 15 Oct 2026 · gartner.com
- Rating on G2
- 4.5 out of 5 from 3 reviewsRead 15 Oct 2026 · g2.com
- Rating on Gartner Peer Insights
- 4.9 out of 5 from 12 ratingsRead 15 Oct 2026 · gartner.com
- Rating on GetApp
- 4.5 out of 5 from 2 reviewsRead 15 Oct 2026 · getapp.com
- Rating on Software Advice
- 4.5 out of 5 from 2 ratingsRead 15 Oct 2026 · softwareadvice.com
- Rating on Trustpilot
- 3.2 out of 5 from 15 reviews for ManageEngine overallRead 15 Oct 2026 · trustpilot.com
- Rating on TrustRadius
- 8 out of 10 from 2 reviewsRead 15 Oct 2026 · trustradius.com
- Renewal and alerts
- It supports certificate renewal automation and sends expiry alerts through email, SNMP traps, and syslog.Read 29 Sep 2026 · manageengine.com
- REST API
- A REST API lets applications create, fetch, associate and delete keys or certificates and manage users using GET, POST, PUT and DELETE requests.Read 15 Oct 2026 · manageengine.com
- SDK availability
- The public developer material documents HTTP REST endpoints but does not list vendor SDK packages.Read 15 Oct 2026 · manageengine.com
- Security controls
- Documented controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and the ability to store the master encryption key outside the product server.Read 29 Sep 2026 · manageengine.com
- Security encryption
- The security specification describes AES-256 encryption at application and database layers, with the master key kept separately from encrypted data.Read 15 Oct 2026 · manageengine.com
- Security fixes
- The August 2026 hotfix addressed multiple broken-access-control, authentication-bypass and remote-code-execution vulnerabilities identified by CVE or vendor advisory references.Read 15 Oct 2026 · manageengine.com
- SSH and PGP keys
- The product also manages SSH and PGP keys and provides a vault for digital keys.Read 29 Sep 2026 · manageengine.com
- SSH key management
- SSH capabilities include scheduled discovery, centralized storage, key creation and deployment, rotation, secure remote sessions and auditing.Read 15 Oct 2026 · manageengine.com
- System sizing
- Minimum sizing ranges from dual-core and 4 GB RAM for fewer than 500 keys to octa-core and 16 GB RAM for more than 1,000 keys, with 10–30 GB database storage.Read 15 Oct 2026 · manageengine.com
Plans and prices
Free Edition Free perpetual 5 keys maximum Read 15 Oct 2026 · manageengine.cn
On-premises license (25 managed keys) $59 a month monthly 25 keys Read 29 Sep 2026 · manageengine.com
Subscription — 25 keys $475 a year annually 25 keys · annual maintenance and support included Read 15 Oct 2026 · manageengine.com
On-premises license (25 managed keys) $599 a year annually 25 keys Read 29 Sep 2026 · manageengine.com
On-premises perpetual license (25 managed keys) $1,188, paid once one-time license fee; maintenance and support fee $238 25 keys Read 29 Sep 2026 · manageengine.com
Perpetual — 25 keys $1,188, paid once one-time license fee 25 keys · annual maintenance and support fee $238 Read 15 Oct 2026 · manageengine.com
Subscription — 1,000 keys $2,645 a year annually 1,000 keys · annual maintenance and support included Read 15 Oct 2026 · manageengine.com
Perpetual — 1,000 keys $6,613, paid once one-time license fee 1,000 keys · annual maintenance and support fee $1,323 Read 15 Oct 2026 · manageengine.com
Strong points and limits
Strong points
- Discovers certificates across endpoints and certificate stores
- Automates renewal and sends expiry alerts
- Manages SSH and PGP keys in a vault
- Offers SaaS and on-premises deployment
Limits
- On-premises monthly plan covers 25 managed keys
- Perpetual license costs $1188.00 per once
- Trial lasts 30 days
Who it suits
It suits enterprises seeking centralized management of certificates and machine identities across IT infrastructure. Teams needing SaaS or on-premises deployment, certificate automation, and SSH or PGP key management may find its scope relevant.
Verdict
Key Manager Plus combines certificate lifecycle management with SSH and PGP key handling, audit features, and access controls. The listed on-premises monthly price is $59.00 for 25 managed keys; a free plan is also listed.
Where Specifiction places it
- Certificate Management Software#4 of 318.9
