Freedom251 › Certificate Management Software
KeyTalk CKMS
What KeyTalk CKMS is
KeyTalk CKMS automates PKI implementation and the enrollment, distribution, and management of digital certificates. It keeps certificates and keys in a central repository and supports automated or semi-automated deployment and renewal, with reporting, notifications, and alerts. Smart Security Scan can find certificates and keys across a network so valid findings can be imported. CKMS includes a private certificate authority that can run beneath an existing root CA or as a standalone root. Listed integrations and protocols include DigiCert, GlobalSign, Microsoft CA, Intune, SCEP, and ACME. Access controls include AD and Entra ID authorization, multifactor authentication, and role-based controls using security groups. Deployment options include a virtual machine on customer infrastructure, private cloud environments such as AWS, Azure, and Google Cloud, or KeyTalk-managed PKI as a service. Pricing is on request, and a free trial is available. Separate S/MIME plans cost €5 a month for on-premise service and €6.50 a month for hosted SaaS, billed per user per month.
Who it suits
CKMS suits organizations managing digital certificates across infrastructure and cloud environments, including managed service providers. It offers customer-hosted and KeyTalk-managed deployment options.
What it does well
- Central certificate and key repository
- Automated or semi-automated deployment and renewal
- Network scan can discover certificates and keys
- Private CA supports existing or standalone root
- Supports multifactor authentication and role-based access
What to know first
- Main CKMS pricing is available on request
- Listed S/MIME plans are billed per user per month
- Short-lived certificates depend on target CA support
Limits
The S/MIME on-premise plan covers up to 250 participants and supports multiple devices. Hosted S/MIME SaaS covers up to 250 participants. KeyTalk says larger organizations can receive staggered discounts for these plans.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| S/MIME on-premise | per user per month; just over € 5; up to 250 participants; multiple devices; staggered discount for larger organisations · Up to 250 participants · multiple devices | €5 a month |
| S/MIME hosted SaaS | per user per month; just over €6.50; up to 250 participants; staggered discount for larger organisations · Up to 250 participants | €6.50 a month |
| CKMS 50–249 seats | per year; VAT excluded · 50–249 licences | On request |
| CKMS 250–999 seats | per year; VAT excluded · 250–999 licences | On request |
| CKMS 1,000–2,499 seats | per year; VAT excluded · 1,000–2,499 licences | On request |
| CKMS 2,500–9,999 seats | per year; VAT excluded · 2,500–9,999 licences | On request |
| CKMS 10,000–24,999 seats | per year; VAT excluded · 10,000–24,999 licences | On request |
| CKMS 25,000–49,999 seats | per year; VAT excluded · 25,000–49,999 licences | On request |
The first 8 of 12 plans, as keytalk.com lists them, read 30 Sept 2026. The maker's own page has the final word. Every plan
Getting started
- Visit https://keytalk.com/ to contact KeyTalk about CKMS pricing and its free trial.
- Choose a deployment route: customer infrastructure, private cloud, or KeyTalk-managed PKI service.
- For S/MIME, choose on-premise service at €5 per user per month or hosted SaaS at €6.50 per user per month.
- Use the platform’s certificate discovery, repository, deployment, and renewal capabilities to manage certificates.
Verdict
KeyTalk CKMS combines certificate discovery, lifecycle management, access controls, and several deployment choices. Note that CKMS pricing is by request, while the listed S/MIME plans have per-user monthly prices.
Questions
How much does KeyTalk CKMS cost?
CKMS pricing is available on request. A free trial is offered.
What do the S/MIME plans cost?
S/MIME on-premise costs €5 per user per month. Hosted S/MIME SaaS costs €6.50 per user per month.
Where can CKMS be deployed?
It can run as a virtual machine on customer infrastructure, in private cloud environments including AWS, Azure, and Google Cloud, or as KeyTalk-managed PKI service.
Which platforms are listed?
Android, iOS, Linux, macOS, self-hosted, and Windows are listed.
What certificate and CA capabilities are included?
CKMS includes a private CA that can operate under an existing root CA or as a standalone root. KeyTalk lists TLS certificates and CA integrations.
Who makes KeyTalk CKMS?
KeyTalk describes itself as a 100% Dutch European IT security company founded in 2004, with headquarters in Amersfoort, Netherlands.
Facts from KeyTalk CKMS's own pages
- Access controls
- The platform supports AD and Entra ID authorization, multifactor authentication, and role-based access control using security groups. · keytalk.com, 30 Sept 2026
- API
- The product exposes client and administrator REST APIs using JSON over TLS and publishes an OpenAPI specification. · keytalk.com, 15 Oct 2026
- Appliance system
- The 8.1.4 virtual appliance is Ubuntu 24.04 Pro based and distributed as an 18.1 GB OVF/VMDK package. · keytalk.com, 15 Oct 2026
- Automated deployment
- Certificates can be deployed and renewed automatically or through notification and authorization workflows on servers, network devices and user devices. · keytalk.com, 15 Oct 2026
- Certificate authorities
- The system supports multiple public and private CAs, including Microsoft AD CS, GlobalSign and DigiCert QuoVadis. · keytalk.com, 15 Oct 2026
- Certificate discovery
- Smart Security Scan discovers certificates and keys on networks so valid findings can be imported into CKMS. · keytalk.com, 15 Oct 2026
- Certificate lifecycle
- CKMS provides a central repository for certificates and keys, automated or semi-automated deployment and renewal, and reporting, notifications, and alerts. · keytalk.com, 30 Sept 2026
- Company and location
- KeyTalk describes itself as a European IT security company, founded in 2004 and 100% Dutch, with headquarters in the Netherlands. · keytalk.com, 30 Sept 2026
- Company founding
- KeyTalk was founded in 2004. · gartner.com, 15 Oct 2026
- Company headquarters
- The company headquarters is in Amersfoort, Netherlands. · gartner.com, 15 Oct 2026
- Company ownership
- LinkedIn describes KeyTalk as privately held and 100% European-owned. · linkedin.com, 15 Oct 2026
- Company size
- LinkedIn lists KeyTalk at 11–50 employees. · linkedin.com, 15 Oct 2026
- Deployment
- CKMS is delivered as a virtual machine for customer infrastructure, private cloud environments including AWS, Azure, and Google Cloud, or KeyTalk-managed PKI as a service. · keytalk.com, 30 Sept 2026
- Deployment models
- The CKMS server is offered as an on-premises or cloud virtual appliance, hybrid installation or hosted managed service. · keytalk.com, 15 Oct 2026
- Device authentication
- It supports certificate-based device authentication for VPN and 802.1X Wi-Fi access. · keytalk.com, 15 Oct 2026
- Documentation and support
- The support area provides manuals, release notes, downloadable agents, firmware and OpenAPI documentation; production or trial licences require contacting a partner or KeyTalk. · keytalk.com, 15 Oct 2026
- Encryption key storage
- KeyTalk says asymmetric key pairs can be stored in its AES256-encrypted management database or a linked hardware security module. · keytalk.com, 30 Sept 2026
- Headquarters
- Amersfoort, Netherlands · keytalk.com, 28 Sept 2026
- High availability
- High-availability clustering requires a load balancer and MySQL database shared by multiple CKMS front ends. · keytalk.com, 15 Oct 2026
- Identity and access
- AD and Azure AD integration supports multifactor authentication and role-based access controls. · keytalk.com, 15 Oct 2026
- Integrations
- Documented integrations include Microsoft Intune, MobileIron, VMware Workspace ONE, JAMF, RADIUS, LDAP, MySQL and HSMs. · keytalk.com, 15 Oct 2026
- Licence
- KeyTalk is a commercial licensed product; CKMS, agents and S/MIME issuance require licensing through KeyTalk or partners. · keytalk.com, 15 Oct 2026
- Limit: complexity and cost
- The Gartner page records complaints about certificate-management complexity, insufficient overview/dashboard, provider integration difficulty and expense. · gartner.com, 15 Oct 2026
- Linux support
- Linux agent 7.9.0 supports Ubuntu 24.04 with TPM key attestation and updates Ubuntu 22.04 TPM support. · keytalk.com, 15 Oct 2026
Where KeyTalk CKMS stands on Freedom251
- Certificate Management Software#14 of 31
- Public Key Infrastructure Software#14 of 26