Entrust Certificate Manager vs Keyfactor Platform
Entrust Certificate Manager
entrust.com
Keyfactor Platform
keyfactor.comSide by side
| Figure | Entrust Certificate Manager | Keyfactor Platform |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Public Key Infrastructure Software | 7.7 (#13) | 7.9 (#12) |
| Spec score · Certificate Management Software | 7.7 (#18) | 7.9 (#13) |
| Deployment | Entrust says it can be deployed across on-premises, private cloud, and public cloud environments. | The product can be deployed as a service, container, software appliance, on-premises installation, or with hosted PKI as a Service. |
| Discovery | It discovers certificates across networks, cloud environments, and CA repositories, with continuous monitoring, reporting, and alerts. | It inventories certificates by integrating with public and private CAs, network endpoints, key stores, and CA databases. |
| Founded | 1969 | 2001 |
| Headquarters | Minneapolis, Minnesota, USA | Independence, Ohio, United States |
| Purpose | Certificate Manager centralizes visibility, control, and automated lifecycle management, covering discovery, audit, issuance, renewal, and revocation. | Keyfactor Certificate Lifecycle Automation discovers, manages, and automates digital certificates across an enterprise. |
| Support | Entrust lists customer service centers for immediate assistance in the Americas, EMEA, and Asia Pacific regions. | Keyfactor advertises PKI expertise and provides customers with a support portal. |
Plans
Entrust Certificate Manager
- Entrust Certificate ManagerPriced on request
Keyfactor Platform
- Keyfactor Certificate Lifecycle AutomationPriced on request
In their own words
Entrust Certificate Manager
Entrust Certificate Manager centralizes discovery and lifecycle management for digital certificates, from audit and issuance through renewal and revocation. It can find certificates across networks, cloud environments, and CA repositories, then provide continuous monitoring, reports, and alerts. Policy-driven workflows automate lifecycle steps, and certificates from Entrust and third-party CAs can be managed through one control point. Entrust describes deployment across on-premises, private cloud, and public cloud environments. Integration choices include cloud, automation, CA gateway, enrollment protocol, secrets management, and custom REST APIs. The API can query certificates by metadata, import certificates, and update custom-field metadata, subject to token permissions. Compatibility information lists PostgreSQL 15 or higher, OpenID Connect 1.0, LDAP v3, and other specified components. Entrust says the product supports crypto-agility and post-quantum readiness. Pricing is on request, and there is no free plan. Entrust was founded in 1969 and is headquartered in Minneapolis, Minnesota.
Keyfactor Platform
Keyfactor Platform, through Keyfactor Command, gives PKI, security, infrastructure, and DevOps teams visibility into certificates and tools to govern their lifecycle. It can inventory certificates from certificate authorities, scan networks for unknown SSL/TLS certificates, and connect to key and certificate stores. Teams can automate enrollment, renewal, revocation, and provisioning, with self-service workflows available through a user interface or API. Listed enrollment protocols are SCEP, ACME, and EST. Administrators can set role-based permissions, protect private keys with retention and storage policies, and require enrollment or approval workflows. Integrations span CI/CD, cloud, HSM, IoT, ITSM, public and private certificate authorities, and web servers. Deployment options are on premises, as a hosted certificate lifecycle service, or as fully managed PKI in a single-tenant cloud platform. Keyfactor says Command has been tested for deployments with more than 500 million certificates. A 30-day trial is offered. Pricing is available on request, and there are no per-certificate fees listed.