ManageEngine Key Manager Plus

C tier on Certificate Management SoftwareScore 6.6 · #8 of 31

Android app: Not listed
Free plan: Trial only
Paid plans from: $49.92/mo
Runs on: api, Linux, self-hosted, Web, Windows

manageengine.com

Summary

ManageEngine Key Manager Plus manages SSL/TLS certificates across enterprise networks, covering discovery, acquisition, deployment, renewal, and expiry tracking. It can find certificates across endpoints and certificate stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. Renewal can be automated, with expiry alerts sent through email, SNMP traps, or syslog. Listed public certificate authority integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte. The product also manages SSH and PGP keys in a digital-key vault. Auditing includes operation-wise trails for SSH keys and certificates, activity reports, and video recording of privileged sessions. Security controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and an option to store the master encryption key outside the product server. SaaS and on-premises deployment are available. A free plan and 30-day trial are listed. The on-premises license for 25 managed keys is $59.00 per month, billed monthly.

Who it is for

Key Manager Plus suits enterprises seeking centralized management of certificates and machine identities. It also fits teams that manage SSH or PGP keys and need certificate renewal alerts and audit trails.

What is good

Discovers certificates across endpoints and certificate stores
Automates renewal and sends expiry alerts
Manages SSH and PGP keys in a digital-key vault
Offers role-based access, two-factor authentication, and SAML SSO
Available as SaaS or on-premises

What to know first

On-premises monthly license covers 25 managed keys
On-premises perpetual license has a separate maintenance and support fee
Listed on-premises monthly price is $59.00 per month

Verdict

Key Manager Plus covers certificate lifecycle work alongside SSH and PGP key management, with audit and access controls. A free plan and 30-day trial are listed; the stated on-premises monthly license covers 25 managed keys.

ManageEngine Key Manager Plus plans and pricing

All plans

On-premises license (25 managed keys) $59/mo monthly 25 keys manageengine.com · 29 Sept 2026

On-premises license (25 managed keys) $599/yr annually 25 keys manageengine.com · 29 Sept 2026

On-premises perpetual license (25 managed keys) $1,188 once one-time license fee; maintenance and support fee $238 25 keys manageengine.com · 29 Sept 2026

Compared on certificate management software

Free plan: Yesmanageengine.com
Paid from: $59/momanageengine.com
Certificate discovery: Yesmanageengine.com
Automatic renewal: Yesmanageengine.com
Deployment automation: Yesmanageengine.com
Revocation workflows: Yesmanageengine.com
Certificate types: tlsmanageengine.com
CA integrations: Yesmanageengine.com

Facts

Purpose: Key Manager Plus manages SSL/TLS certificate lifecycles across enterprise networks, from discovery and acquisition through deployment, renewal, and expiry tracking.manageengine.com · 29 Sept 2026
Renewal and alerts: It supports certificate renewal automation and sends expiry alerts through email, SNMP traps, and syslog.manageengine.com · 29 Sept 2026
Certificate authority integrations: Listed public CA integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte.manageengine.com · 29 Sept 2026
Auditing: It provides operation-wise audit trails for SSH keys and SSL/TLS certificates, session video recording for privileged sessions, and activity reports.manageengine.com · 29 Sept 2026
SSH and PGP keys: The product also manages SSH and PGP keys and provides a vault for digital keys.manageengine.com · 29 Sept 2026
Other integrations: The product features integrations with ServiceNow and ManageEngine ServiceDesk Plus for ticketing and with Active Directory for user synchronization.manageengine.com · 29 Sept 2026
Security controls: Documented controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and the ability to store the master encryption key outside the product server.manageengine.com · 29 Sept 2026
Compliance: The vendor says the product supports adherence to NIST, PCI-DSS, SOX, HIPAA, FISMA, GLBA, NERC-CIP, and COBIT standards and regulations.manageengine.com · 29 Sept 2026
Deployment: The product is offered as both a SaaS solution and an on-premises deployment.manageengine.com · 29 Sept 2026
Platforms: The FAQ lists Windows Server and Linux distributions as supported server operating systems, while downloads are offered as 64-bit EXE and BIN installers.manageengine.com · 29 Sept 2026
Support: The product page says technical assistance is available around the clock by email, phone, and virtual conference, with on-site assistance for large enterprises.manageengine.com · 29 Sept 2026
Trial: The vendor offers a 30-day free trial and states that no credit card is required.manageengine.com · 29 Sept 2026
Intended users: The product is positioned for enterprises seeking centralized management of certificates and machine identities across their IT infrastructure.manageengine.com · 29 Sept 2026