Now on Azure Marketplace
Your own private PKI — without the servers.
Create Root and Subordinate certificate authorities in minutes. Auto-enroll Intune devices over SCEP, automate TLS with ACME, issue into Azure Key Vault, rotate Entra app credentials and sign short-lived SSH certificates — with CA keys that never leave an HSM-backed Azure Key Vault.
HSM-protected CA keysGenerated and kept non-exportable in Azure Key Vault Premium.
Intune SCEP & ACMEDevice, user and server certificates, fully automated.
Key Vault & app credentialsIssue into your vault; never let an Entra app secret expire again.
SSH certificates includedShort-lived, audited SSH logins — no per-user fee.