ManageEngine Key Manager Plus
ManageEngine Key Manager Plus manages SSL/TLS certificates across enterprise networks, covering discovery, acquisition, deployment, renewal, and expiry track…
What ManageEngine Key Manager Plus is
ManageEngine Key Manager Plus manages SSL/TLS certificates across enterprise networks, covering discovery, acquisition, deployment, renewal, and expiry tracking. It can find certificates across endpoints and certificate stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. Renewal can be automated, with expiry alerts sent through email, SNMP traps, or syslog. Listed public certificate authority integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte. The product also manages SSH and PGP keys in a digital-key vault. Auditing includes operation-wise trails for SSH keys and certificates, activity reports, and video recording of privileged sessions. Security controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and an option to store the master encryption key outside the product server. SaaS and on-premises deployment are available. A free plan and 30-day trial are listed. The on-premises license for 25 managed keys is $59.00 per month, billed monthly.
Good
- Discovers certificates across endpoints and certificate stores
- Automates renewal and sends expiry alerts
- Manages SSH and PGP keys in a digital-key vault
- Offers role-based access, two-factor authentication, and SAML SSO
- Available as SaaS or on-premises
Watch out
- On-premises monthly license covers 25 managed keys
- On-premises perpetual license has a separate maintenance and support fee
- Listed on-premises monthly price is $59.00 per month
Who it suits
Key Manager Plus suits enterprises seeking centralized management of certificates and machine identities. It also fits teams that manage SSH or PGP keys and need certificate renewal alerts and audit trails.
Verdict
Key Manager Plus covers certificate lifecycle work alongside SSH and PGP key management, with audit and access controls. A free plan and 30-day trial are listed; the stated on-premises monthly license covers 25 managed keys.
Plans and prices
From ManageEngine Key Manager Plus's own pricing page, checked 15 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free Edition | Free | 5 keys maximum · perpetual |
| On-premises license (25 managed keys) | $59 a month | 25 keys · monthly |
| Subscription — 25 keys | $475 a year | 25 keys · annual maintenance and support included · annually |
| On-premises license (25 managed keys) | $599 a year | 25 keys · annually |
| On-premises perpetual license (25 managed keys) | $1,188, paid once | 25 keys · one-time license fee; maintenance and support fee $238 |
| Perpetual — 25 keys | $1,188, paid once | 25 keys · annual maintenance and support fee $238 · one-time license fee |
| Subscription — 1,000 keys | $2,645 a year | 1,000 keys · annual maintenance and support included · annually |
| Perpetual — 1,000 keys | $6,613, paid once | 1,000 keys · annual maintenance and support fee $1,323 · one-time license fee |
The facts
Each one read from ManageEngine Key Manager Plus's own pages, with the date it was checked.
What it does
- API authentication
- Only administrators can generate API keys, which act as host-bound authentication tokens and can be regenerated if compromised.checked 15 Oct 2026
- Audit and monitoring
- Operations are audited, certificate and key events can trigger email, SNMP or Syslog alerts, and remote SSH sessions can be video recorded.checked 15 Oct 2026
- Auditing
- It provides operation-wise audit trails for SSH keys and SSL/TLS certificates, session video recording for privileged sessions, and activity reports.checked 29 Sep 2026
- Azure secrets
- The product manages Azure Key Vault secrets and application secrets through a unified interface.checked 15 Oct 2026
- CA integrations
- Official CA integrations include Let’s Encrypt, DigiCert, GoDaddy, The SSL Store providers, GlobalSign, Sectigo and Microsoft Certificate Authority.checked 15 Oct 2026
- Certificate authority integrations
- Listed public CA integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte.checked 29 Sep 2026
- Certificate discovery
- It discovers certificates across endpoints and certificate stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates.checked 29 Sep 2026
- Certificate lifecycle
- The product provides certificate discovery, inventory, CSR generation, deployment, renewal, post-deployment automation, public and private CA management, vulnerability scanning, audits and reports.checked 15 Oct 2026
- Compliance
- The vendor says the product supports adherence to NIST, PCI-DSS, SOX, HIPAA, FISMA, GLBA, NERC-CIP, and COBIT standards and regulations.checked 29 Sep 2026
- Database support
- PostgreSQL 14.7 is bundled and Microsoft SQL Server 2012 or later is supported.checked 15 Oct 2026
- Deployment
- The product is offered as both a SaaS solution and an on-premises deployment.checked 29 Sep 2026
- Deployment model
- TrustRadius lists the deployment type as on-premise and the supported operating systems as Windows and Linux.checked 15 Oct 2026
- DevOps integrations
- The feature set includes Jenkins secrets support and Kubernetes secrets management for certificate deployment workflows.checked 15 Oct 2026
- Documentation
- The vendor documentation hub provides online help, quickstart material, FAQs, system requirements, security specifications, case studies, tutorials and release notes.checked 15 Oct 2026
- Identity integrations
- Authentication can use Microsoft Active Directory, LDAP-compatible directories, RADIUS or local accounts, with role-based access controls.checked 15 Oct 2026
- Intended users
- The product is positioned for enterprises seeking centralized management of certificates and machine identities across their IT infrastructure.checked 29 Sep 2026
- ITSM integrations
- Key Manager Plus integrates with ServiceNow and ManageEngine ServiceDesk Plus so certificate expiry and vulnerability events can drive ticketing workflows.checked 15 Oct 2026
- Licence
- The licence agreement grants a proprietary, non-exclusive, non-transferable ZOHO licence; it is not an open-source licence.checked 15 Oct 2026
- Limit: Java resource usage
- A G2 reviewer reports that the Java implementation is resource hungry and that Linux deployment can be tricky because of Java dependencies.checked 15 Oct 2026
Where it runs
- Browser support
- The HTML client supports Edge on Windows and Chrome, Firefox and Safari on Windows, Linux and macOS.checked 15 Oct 2026
The company
- Company founding
- LinkedIn lists ManageEngine as founded in 2002.checked 15 Oct 2026
- Company size
- LinkedIn lists ManageEngine as privately held with 5,001–10,000 employees.checked 15 Oct 2026
- Founded
- 1996checked 28 Sep 2026
- Headquarters
- Pleasanton, California, United Stateschecked 28 Sep 2026
Alternatives to ManageEngine Key Manager Plus
- 1
EJBCA
Free planOpen sourceWebAPILinuxmacOS8.2From £62,065 a year - 2
Certify The Web
Free planWebAPILinuxmacOS7.7From $59 a year - 3
KeyTalk CKMS
AndroidiOSWebAPI7.7From €5 a month - 4
Let's Encrypt
Free planOpen sourceWebAPILinuxmacOS7.6Free plan - 5
GeoTrust
Free planWebAPILinuxWindows6.9From $2 a month - 6
ServiceNow Event Management
WebAPILinuxWindows6.5