KeyTalk CKMS vs ManageEngine Key Manager Plus
KeyTalk CKMS
keytalk.com
ManageEngine Key Manager Plus
manageengine.comSide by side
| Figure | KeyTalk CKMS | ManageEngine Key Manager Plus |
|---|---|---|
| Price from | €5/mo | $39.58/mo |
| Free plan | — | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 12 | 8 |
| Spec score · Certificate Management Software | 8.9 (#3) | 8.9 (#4) |
| Certificate discovery | Smart Security Scan discovers certificates and keys on networks so valid findings can be imported into CKMS. | It discovers certificates across endpoints and certificate stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. |
| Certificate lifecycle | CKMS provides a central repository for certificates and keys, automated or semi-automated deployment and renewal, and reporting, notifications, and alerts. | The product provides certificate discovery, inventory, CSR generation, deployment, renewal, post-deployment automation, public and private CA management, vulnerability scanning, audits and reports. |
| Company founding | KeyTalk was founded in 2004. | LinkedIn lists ManageEngine as founded in 2002. |
| Company size | LinkedIn lists KeyTalk at 11–50 employees. | LinkedIn lists ManageEngine as privately held with 5,001–10,000 employees. |
| Deployment | CKMS is delivered as a virtual machine for customer infrastructure, private cloud environments including AWS, Azure, and Google Cloud, or KeyTalk-managed PKI as a service. | The product is offered as both a SaaS solution and an on-premises deployment. |
| Headquarters | Amersfoort, Netherlands | Pleasanton, California, United States |
| Licence | KeyTalk is a commercial licensed product; CKMS, agents and S/MIME issuance require licensing through KeyTalk or partners. | The licence agreement grants a proprietary, non-exclusive, non-transferable ZOHO licence; it is not an open-source licence. |
| Rating on Gartner Peer Insights | 4.0 out of 5 from 1 review | 4.9 out of 5 from 12 ratings |
| Support | KeyTalk says it offers customers 24/7 support. | Support is offered through on-premises and cloud email addresses, telephone callback options, forums and FAQs. |
| What it does | KeyTalk CKMS automates enrollment, distribution, renewal and management of digital certificates and keys. | Key Manager Plus is a web-based system for discovering, consolidating, creating, deploying, rotating, renewing, monitoring and auditing SSH keys and SSL/TLS certificates. |
Plans
KeyTalk CKMS
- S/MIME on-premise€5 a month
- S/MIME hosted SaaS€6.50 a month
- CKMS 0–49 seatsPrice not published
- CKMS 100,000+ seatsPriced on request
- CKMS 10,000–24,999 seatsPrice not published
- CKMS 1,000–2,499 seatsPrice not published
- CKMS 25,000–49,999 seatsPrice not published
- CKMS 2,500–9,999 seatsPrice not published
- CKMS 250–999 seatsPrice not published
- CKMS 50,000–74,999 seatsPrice not published
ManageEngine Key Manager Plus
- Free EditionFree
- On-premises license (25 managed keys)$59 a month
- Subscription — 25 keys$475 a year
- On-premises license (25 managed keys)$599 a year
- On-premises perpetual license (25 managed keys)$1,188, paid once
- Perpetual — 25 keys$1,188, paid once
- Subscription — 1,000 keys$2,645 a year
- Perpetual — 1,000 keys$6,613, paid once
In their own words
KeyTalk CKMS
KeyTalk CKMS automates PKI implementation and the enrollment, distribution and management of digital certificates. It keeps certificates and keys in a central repository and supports automated or semi-automated deployment and renewal, alongside reporting, notifications and alerts. Smart Security Scan finds certificates and keys on a network so valid findings can be imported. The product includes a private certificate authority that can operate beneath an existing root or as a standalone root. Integrations and protocols include DigiCert, DigiCert QuoVadis, GlobalSign, Microsoft CA, Intune, MobileIron, load balancers, HSMs, Citrix, SCEP and ACME. Access controls include AD and Entra ID authorization, multifactor authentication and role-based controls. CKMS can run as a virtual machine on customer infrastructure, in private cloud environments such as AWS, Azure and Google Cloud, or as KeyTalk-managed PKI service. General CKMS pricing is on request, and a free trial is available. Separate S/MIME plans cost €5 a month for on-premise service and €6.50 a month for hosted SaaS, billed per user per month.
ManageEngine Key Manager Plus
ManageEngine Key Manager Plus centralizes SSL/TLS certificate lifecycle management across enterprise networks, from discovery and acquisition to deployment, renewal, and expiry tracking. It finds certificates across endpoints and stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. Renewal can be automated, with expiry alerts sent by email, SNMP traps, or syslog. Listed public CA integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte. It also manages SSH and PGP keys in a digital-key vault. Audit features cover key and certificate operations, privileged-session video, and activity reports. Controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and external storage for the master encryption key. The product is offered as SaaS and on premises. A free plan and 30-day trial are listed. The on-premises license for 25 managed keys is $59.00 per month, billed monthly.