EZCA

What EZCA is

EZCA is a cloud service for running certificate authorities (CAs) without operating the PKI infrastructure yourself. It manages certificates for users, devices, applications, Wi-Fi, VPNs, web services, and IoT, and issues them through ACME, EST, and SCEP. APIs support applications and workflows. For Microsoft environments, EZCA integrates with Azure, Entra ID, Intune, Azure Key Vault, and Azure applications; Intune and Jamf are also supported for device certificates. Organizations can connect an existing on-premises CA or bring an AD CS CA into the cloud setup. For IoT, it supports certificate-based device authentication with Azure IoT Hub and Azure IoT Central.

The maker says its CAs are backed by hardware security modules (HSMs): Basic uses FIPS 140-3 Level 2 and Premium Level 3. CA changes, certificate requests, and approvals are logged for export to a preferred SIEM. Certificate revocation checks use CRLs and OCSP. Pricing is per CA for Basic and Premium, and per location for the infrastructure plans. The maker says there is no certificate count limit; pricing depends on the number of CAs managed. A 30-day trial is listed, with no free plan. EZCA is made by Keytos, founded in 2021 in Boston.

Who it suits

EZCA suits organizations that need to issue and manage certificates across users, devices, applications, and IoT, particularly those using Azure or Entra ID. It also fits teams connecting an existing CA or choosing between cloud and isolated infrastructure options.

Limits

There is no free plan. Basic is limited to 1 certificate creation or OCSP response per CA per second; Premium allows 10 per CA per second, while Private Infrastructure allows 160. The listed support and availability also vary by plan.

Getting started

1. Open the EZCA website.
2. Start the listed 30-day trial.
3. Choose a plan based on whether pricing should be per CA or per location.
4. Connect Azure services or an existing CA as needed.
5. Issue certificates through ACME, EST, SCEP, or the available APIs.

Verdict

Choose EZCA if you need cloud CA management with protocol support, Microsoft integrations, and options for connecting an existing CA. Compare the per-CA and per-location plan costs against your deployment needs; there is no free plan.