AWS Certificate Manager vs ManageEngine Key Manager Plus
AWS Certificate Manager
aws.amazon.com
ManageEngine Key Manager Plus
manageengine.comSide by side
| Figure | AWS Certificate Manager | ManageEngine Key Manager Plus |
|---|---|---|
| Price from | Free | $39.58/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 3 | 8 |
| Spec score · Certificate Management Software | 7.7 (#16) | 8.9 (#4) |
| Purpose | AWS Certificate Manager provisions, manages, and deploys public and private SSL/TLS certificates for AWS, hybrid, and multicloud workloads. | Key Manager Plus manages SSL/TLS certificate lifecycles across enterprise networks, from discovery and acquisition through deployment, renewal, and expiry tracking. |
Plans
AWS Certificate Manager
- Public certificate for integrated AWS servicesFree
- ACME public certificatesPrice not published
- Exportable public certificatesPrice not published
ManageEngine Key Manager Plus
- Free EditionFree
- On-premises license (25 managed keys)$59 a month
- Subscription — 25 keys$475 a year
- On-premises license (25 managed keys)$599 a year
- On-premises perpetual license (25 managed keys)$1,188, paid once
- Perpetual — 25 keys$1,188, paid once
- Subscription — 1,000 keys$2,645 a year
- Perpetual — 1,000 keys$6,613, paid once
In their own words
AWS Certificate Manager
AWS Certificate Manager (ACM) provisions, manages and deploys public and private SSL/TLS certificates for AWS, hybrid and multicloud workloads. Certificates may cover one domain, multiple named domains, wildcard domains or combinations. Management is available through the AWS Management Console, AWS CLI and ACM APIs, with usage auditable in AWS CloudTrail logs. Amazon-issued certificates can renew automatically when DNS validation is used; otherwise ACM sends notices as expiration approaches. Public-certificate integrations include Elastic Load Balancing, Amazon CloudFront, Amazon API Gateway, AWS Elastic Beanstalk and AWS CloudFormation. AWS Key Management Service helps protect stored private keys. Customers can import third-party CA certificates and deploy them with Elastic Load Balancers, CloudFront and API Gateway; importing costs nothing. The default quota is 10 domain names per certificate, with requests up to 100. The integrated-services public-certificate plan is free and non-exportable. ACM is available on web and API platforms.
ManageEngine Key Manager Plus
ManageEngine Key Manager Plus centralizes SSL/TLS certificate lifecycle management across enterprise networks, from discovery and acquisition to deployment, renewal, and expiry tracking. It finds certificates across endpoints and stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. Renewal can be automated, with expiry alerts sent by email, SNMP traps, or syslog. Listed public CA integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte. It also manages SSH and PGP keys in a digital-key vault. Audit features cover key and certificate operations, privileged-session video, and activity reports. Controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and external storage for the master encryption key. The product is offered as SaaS and on premises. A free plan and 30-day trial are listed. The on-premises license for 25 managed keys is $59.00 per month, billed monthly.