Freedom251 › Certificate Management Software
ManageEngine Key Manager Plus
What ManageEngine Key Manager Plus is
ManageEngine Key Manager Plus centralizes SSL/TLS certificate lifecycle management across enterprise networks. It can discover certificates on endpoints and in certificate stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. The product supports acquisition, deployment, automated renewal, expiry tracking, and alerts via email, SNMP traps, or syslog. Listed public certificate authority integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte. It also manages SSH and PGP keys in a digital-key vault. Audit features cover operations on keys and certificates, privileged-session video recording, and activity reports. Security controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and storage of the master encryption key outside the product server. Deployment is available as SaaS or on premises. A free plan and 30-day trial are listed; the trial requires no credit card. The on-premises license for 25 managed keys is $59 a month, billed monthly. A perpetual on-premises license for 25 keys is $1,188, paid once, with a $238 maintenance and support fee.
Who it suits
It suits enterprises that need centralized management of certificates and machine identities across their IT infrastructure. Both SaaS and on-premises deployment are available.
What it does well
- Discovers certificates across endpoints and certificate stores
- Automates renewal and sends expiry alerts through three channels
- Manages SSH and PGP keys in a digital-key vault
- Includes role-based access, two-factor authentication, and SAML SSO
- Offers SaaS and on-premises deployment
What to know first
- The monthly on-premises license covers 25 managed keys
- The perpetual license lists a $238 maintenance and support fee
Limits
The listed on-premises monthly and perpetual licenses each cover 25 managed keys. The trial lasts 30 days; the monthly license is $59 a month, and the perpetual license is $1,188, paid once with a 238 USD maintenance and support fee.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free Edition | perpetual · 5 keys maximum | Free |
| On-premises perpetual license (25 managed keys) | one-time license fee; maintenance and support fee $238 · 25 keys | $1,188, paid once |
| Perpetual — 25 keys | one-time license fee · 25 keys · annual maintenance and support fee $238 | $1,188, paid once |
| Subscription — 1,000 keys | annually · 1,000 keys · annual maintenance and support included | $2,645 a year |
| Subscription — 25 keys | annually · 25 keys · annual maintenance and support included | $475 a year |
| On-premises license (25 managed keys) | monthly · 25 keys | $59 a month |
| On-premises license (25 managed keys) | annually · 25 keys | $599 a year |
| Perpetual — 1,000 keys | one-time license fee · 1,000 keys · annual maintenance and support fee $1,323 | $6,613, paid once |
As manageengine.com lists them, read 15 Oct 2026. The maker's own page has the final word.
Getting started
- Open the ManageEngine Key Manager Plus website.
- Choose SaaS or on-premises deployment.
- Start the 30-day free trial; no credit card is required.
- Alternatively, select the free plan or an on-premises license.
- Use certificate discovery to locate certificates across endpoints and stores.
Verdict
Key Manager Plus brings certificate lifecycle tasks, SSH and PGP key management, and auditing into one product. Check the 25-key license terms and deployment option against your needs.
Questions
Is there a free plan or trial?
Yes. A free plan and a 30-day free trial are offered. The trial does not require a credit card.
How much does the on-premises license cost?
The 25-key license is $59 a month, billed monthly. The 25-key perpetual license is $1,188, paid once, with a 238 USD maintenance and support fee.
What deployment options are available?
The product is offered as a SaaS solution and as an on-premises deployment.
Which certificate authorities does it integrate with?
Listed public CA integrations include Let’s Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte.
Does it manage SSH and PGP keys?
Yes. It manages SSH and PGP keys and provides a vault for digital keys.
What support does the product offer?
Technical assistance is available around the clock by email, phone, and virtual conference. On-site assistance is available for large enterprises.
Facts from ManageEngine Key Manager Plus's own pages
- API authentication
- Only administrators can generate API keys, which act as host-bound authentication tokens and can be regenerated if compromised. · manageengine.com, 15 Oct 2026
- Audit and monitoring
- Operations are audited, certificate and key events can trigger email, SNMP or Syslog alerts, and remote SSH sessions can be video recorded. · manageengine.com, 15 Oct 2026
- Auditing
- It provides operation-wise audit trails for SSH keys and SSL/TLS certificates, session video recording for privileged sessions, and activity reports. · manageengine.com, 29 Sept 2026
- Azure secrets
- The product manages Azure Key Vault secrets and application secrets through a unified interface. · store.manageengine.com, 15 Oct 2026
- Browser support
- The HTML client supports Edge on Windows and Chrome, Firefox and Safari on Windows, Linux and macOS. · manageengine.com, 15 Oct 2026
- CA integrations
- Official CA integrations include Let’s Encrypt, DigiCert, GoDaddy, The SSL Store providers, GlobalSign, Sectigo and Microsoft Certificate Authority. · download.manageengine.com, 15 Oct 2026
- Certificate authority integrations
- Listed public CA integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte. · manageengine.com, 29 Sept 2026
- Certificate discovery
- It discovers certificates across endpoints and certificate stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. · manageengine.com, 29 Sept 2026
- Certificate lifecycle
- The product provides certificate discovery, inventory, CSR generation, deployment, renewal, post-deployment automation, public and private CA management, vulnerability scanning, audits and reports. · manageengine.com, 15 Oct 2026
- Company founding
- LinkedIn lists ManageEngine as founded in 2002. · linkedin.com, 15 Oct 2026
- Company size
- LinkedIn lists ManageEngine as privately held with 5,001–10,000 employees. · linkedin.com, 15 Oct 2026
- Compliance
- The vendor says the product supports adherence to NIST, PCI-DSS, SOX, HIPAA, FISMA, GLBA, NERC-CIP, and COBIT standards and regulations. · manageengine.com, 29 Sept 2026
- Database support
- PostgreSQL 14.7 is bundled and Microsoft SQL Server 2012 or later is supported. · manageengine.com, 15 Oct 2026
- Deployment
- The product is offered as both a SaaS solution and an on-premises deployment. · manageengine.com, 29 Sept 2026
- Deployment model
- TrustRadius lists the deployment type as on-premise and the supported operating systems as Windows and Linux. · trustradius.com, 15 Oct 2026
- DevOps integrations
- The feature set includes Jenkins secrets support and Kubernetes secrets management for certificate deployment workflows. · manageengine.com, 15 Oct 2026
- Documentation
- The vendor documentation hub provides online help, quickstart material, FAQs, system requirements, security specifications, case studies, tutorials and release notes. · manageengine.com, 15 Oct 2026
- Founded
- 1996 · manageengine.com, 28 Sept 2026
- Headquarters
- Pleasanton, California, United States · manageengine.com, 28 Sept 2026
- Identity integrations
- Authentication can use Microsoft Active Directory, LDAP-compatible directories, RADIUS or local accounts, with role-based access controls. · manageengine.com, 15 Oct 2026
- Intended users
- The product is positioned for enterprises seeking centralized management of certificates and machine identities across their IT infrastructure. · manageengine.com, 29 Sept 2026
- ITSM integrations
- Key Manager Plus integrates with ServiceNow and ManageEngine ServiceDesk Plus so certificate expiry and vulnerability events can drive ticketing workflows. · manageengine.com, 15 Oct 2026
- Licence
- The licence agreement grants a proprietary, non-exclusive, non-transferable ZOHO licence; it is not an open-source licence. · manageengine.cn, 15 Oct 2026
- Limit: Java resource usage
- A G2 reviewer reports that the Java implementation is resource hungry and that Linux deployment can be tricky because of Java dependencies. · g2.com, 15 Oct 2026
Where ManageEngine Key Manager Plus stands on Freedom251
- Certificate Management Software#10 of 31