https://
Gain visibility and control over
your SSH and SSL environments
www.keymanagerplus.com
How unmanaged keys and
certificates impair your
layered security defenses
Over the years technology has been constantly growing and
evolving—as have cyberthreats and security breaches. Enterprises
are meticulously working with various solutions and strategies to
strengthen their security infrastructure. But, there’s no silver bullet when
it comes to security. A highly-recommended and widely-adopted
technique among enterprises today is following a layered approach
to information security. This technique combines multiple security
strategies that offset one another’s capabilities to prevent malicious
intrusions, ensuring tighter security.
SSH keys and SSL certificates are at the heart of this comprehensive
layered security framework. These digital identities serve as the
foundation of trust, over which all the other security strategies unfold
and operate.
www.keymanagerplus.com
As a result, encryption keys
have also become the prime
target for cybercriminals, who
exploit them to create
loopholes in your layered
security infrastructure.
Once hackers break into your
organization’s SSH and SSL
environment, they constantly
work to expand their access,
steal identities of higher
privileges, and establish
permanent backdoors.
Failing to protect your keys and certificates completely ends up
impairing your layered security defenses that blindly rely on the
trust provided by keys and certificates.
Here’s what you have to do to reinforce
trust in your SSH keys and SSL certificates:
Gain complete visibility over your SSH and SSL environments.
Centralize all key and certificate management operations.
Enforce policies for creating keys and certificates.
Create fined-grained access control regulations and log all
user activity.
www.keymanagerplus.com
Key Manager Plus helps you effectively take
control over your SSH and SSL environments
The average organization houses over 23,000 keys and certificates. Without
an automated way to streamline key and certificate life cycle management,
it’s almost impossible to achieve the required level of visibility and control
over your SSH and SSL environments. Key Manager Plus, our web-based key
and certificate management solution, helps you discover, consolidate,
deploy, renew, track, and manage the entire life cycle of SSH keys and SSL
certificates. It helps you take total control over your encryption keys to
preempt breaches and compliance issues.
SSH Key Life cycle Management
Discover and consolidate
Launch
SSH connection
KMP
Disaster recovery
Deploy keys to end servers
SSH key rotation
www.keymanagerplus.com
SSL Certificate Life cycle Management
CSR Generation
SSL vulnerability scan Discover and consolidate
CSR
SSL certificate issue
KMP
Certificate request
Expiry notification Direct certificate acquisition
Let’s Encrypt / MS Trusted third party
Certificate Authority certificate authorities
Deploy certificates to end servers
www.keymanagerplus.com
Highlights of Key Manager Plus
SSH key management SSL certificate management
Key Manager Plus automatically Managing an SSL environment can be
discovers SSH keys present in your daunting if your organization uses a large
network and consolidates them in its number of SSL certificates from various
secure, centralized repository. You can vendors with different expiration dates. Key
centrally launch remote SSH Manager Plus discovers and consolidates
sessions, perform scheduled key all SSL certificates within your network,
rotations, create and deploy new keys, tracks their usage, centralizes certificate
delete unwanted keys, and requests and deployment, scans and
obtain instant, comprehensive remediates configuration vulnerabilities,
reports on all key management and provides prompt alerts well ahead of
activity. certificate expiration.
Discover Discover and
Automatically discover all
consolidate
SSH resources within your Discover all SSL certificates
network and add users and within your network regardless
their respective private keys. of vendor, encryption algorithm,
etc., and consolidate them in a
Consolidate, create, and secure, centralized repository.
deploy
Consolidate all discovered keys Centralized deployment
in Key Manager Plus’ secure,
Centralize deployment of newly
centralized repository. Centrally
acquired or renewed certificates
create new SSH key pairs and
to their respective end-servers.
deploy them to target servers.
Key-user mapping
Expiration alerts
Get a holistic, graphical
Receive periodic, customized
representation of key-user
alerts on certificate expiration
relationships across your
well in advance.
organization.
www.keymanagerplus.com
Launch SSH sessions CSR CSR generation and
certificate request
Launch direct SSH sessions
workflow
with target systems from one
location and capture the Generate CSRs instantly and
sessions for your records. request and obtain certificates
from trusted third-party
certificate authorities with a
Configure key
hassle-free certificate request
management policies
workflow.
Enforce strict policies for key
creation. Remove all existing Let’s Encrypt integration
keys for a fresh start or create
Leverage our integration with
and append new keys.
the certificate authority Let’s
Encrypt to completely automate
Active Directory
end-to-end management of the
integration
certificate life cycle, including
Leverage our integration with certificate acquisition, deployment,
Active Directory to directly tracking, and renewal.
import users and user groups
into Key Manager Plus. Manage certificates from
Active Directory and the
Disaster recovery MS certificate store
Schedule automated backups Discover, import, and manage
of the entire database for certificates mapped to user
disaster recovery. accounts in Active Directory
and certificates present
in the MS certificate store.
Audits and reports
Completely automate their life
Generate instant, comprehensive
cycle management through an
reports on various key and
integration with your Microsoft
certificate management
Certificate Authority.
operations with tamper-proof
audit records of all user activity
SSL vulnerability scan
and provisions.
Scan SSL certificates and
end-servers after deployment
for configuration vulnerabilities
such as Heartbleed, POODLE,
certificate revocations, and weak
cipher suites, and remediate them
instantly.
www.keymanagerplus.com
“
ManageEngine Key Manager Plus is an efficient and surprisingly
user-friendly tool that can potentially help network administrators
anticipate and block security breaches and bypass annoying compliance
processes by providing all the necessary tools for monitoring and
controlling SSH keys and SSL certificates.
www.softpedia.com
“
We were quite impressed by this product that simplifies even complex
processes of key management, where most organizations fail, leaving
themselves vulnerable to cyber attacks.
www.thehackernews.com
“
...serves a one-stop solution for managing all digital identities.
Users are treated with total visibility into the SSH and SSL environments.
Administrators gain absolute control of the keys preventing instances
and the likelihood of breaches and ensure adherence to
compliance policies.
www.reviews.financesonline.com
“
A web-based tool that can help to consolidate, control, manage, monitor
and audit the entire life cycle of SSH keys and SSL certificates is
ManageEngine Key Manager Plus.
www.techtarget.com
www.keymanagerplus.com
“
ManageEngine’s Key Manager Plus
enables us to stay on top of SSL
certificates for all of our websites. With Key
Manager Plus, we’re able to monitor which
certificates are nearing expiration and roll out
new certificates in a timely manner.
Ken Odibe
Senior cloud infrastructure consultant,
Sapphire systems.
Download $ Get Quote
Zoho Corporation Pvt. Ltd.
4141 Hacienda Drive Pleasanton,
Over 180,000+
CA 94588, USA companies around the world trust
Phone: +1-925-924-9500
Fax: +1-925-924-9600
Email: sales@manageengine.com
www.keymanagerplus.com
