Entrust Certificate Manager vs EZCA

Entrust Certificate Manager centralizes discovery and lifecycle management for digital certificates, from audit and issuance through renewal and revocation. It can find certificates across networks, cloud environments, and CA repositories, then provide continuous monitoring, reports, and alerts. Policy-driven workflows automate lifecycle steps, and certificates from Entrust and third-party CAs can be managed through one control point. Entrust describes deployment across on-premises, private cloud, and public cloud environments. Integration choices include cloud, automation, CA gateway, enrollment protocol, secrets management, and custom REST APIs. The API can query certificates by metadata, import certificates, and update custom-field metadata, subject to token permissions. Compatibility information lists PostgreSQL 15 or higher, OpenID Connect 1.0, LDAP v3, and other specified components. Entrust says the product supports crypto-agility and post-quantum readiness. Pricing is on request, and there is no free plan. Entrust was founded in 1969 and is headquartered in Minneapolis, Minnesota.

EZCA is a cloud PKI service for running certificate authorities without operating the underlying PKI infrastructure yourself. It issues certificates through ACME, EST, and SCEP, and provides APIs for applications and workflows. Certificate uses include users, devices, applications, Wi-Fi, VPN, web services, and IoT, including device authentication for Azure IoT Hub and Azure IoT Central. Integrations include Azure, Entra ID, Intune, Azure Key Vault, and Azure applications; Intune and Jamf are supported for device certificates. EZCA can chain to an existing on-premises CA or bring an AD CS CA into a cloud setup. The maker says its CAs are HSM-backed, with Basic using FIPS 140-3 Level 2 and Premium Level 3. CA changes, requests, and approvals are logged for export to a preferred SIEM, and revocation checks use CRLs and OCSP. Basic costs $200 a month per CA, and a 30-day trial is available; there is no free plan. Plans differ in throughput, support, availability, and infrastructure options.