360° Managed PKI & CLM
No More
Expired Certificates!
Full Control. Fewer Errors. More Automation.
Take full control of your certificates – centrally, reliably, effortlessly. Automate workflows, reduce errors, and keep complete visibility at all times. Connect your existing Microsoft PKI (AD CS) or migrate seamlessly to our Certificate Authority (CA). Enjoy expert consulting and certified operations – Made & Managed in Germany.
Maximum Transparency
Full Control.
Defined Responsibilities.
Audit-Compliant Processes.
With the Certificate Lifecycle Manager (CLM), you can manage your certificate processes centrally, securely, and efficiently. Certificates are issued accurately, roles can be assigned flexibly, and smart notifications keep you always in control. Legal requirements are implemented easily, transparently, and fully compliant with audit standards.
More Possibilities & Less Effort
Bring Your Use Cases to Life.
Unlock the Power of Automation.
Our technology handles all typical enterprise certificate use cases, regardless of system environment or industry. Leverage established automation protocols, reduce manual work, and remove common sources of error. The outcome: certificate-driven processes that are efficient, scalable, and dependable.
Automation Protocols
Support for ACME, EST, CMP, SCEP, REST & CLI
Typical Use Cases
Identity & Access Management (IAM), Network Security (VPN), Network Access Control (NAC), Secure Email Communication, SSL/TLS Web Server Certificates, Mobile Device Management (MDM), Digital Document Signing, Code Signing, and more.
Automation Protocols
Support for ACME, EST, CMP, SCEP, REST & CLI
Typical use cases
Identity & Access Management (IAM), Network Security (VPN), Network Access Control (NAC), Secure Email Communication, SSL/TLS Web Server Certificates, Mobile Device Management (MDM), Digital Document Signing, Code Signing, and more.
Seamlessly integrate CLM & migrate PKI with flexibility
Optimize & Extend
Microsoft Active Directory Autoenrollment.
Using Microsoft AD CS? It’s your choice: extend your current infrastructure with our Certificate Lifecycle Manager (CLM), or migrate smoothly to our Certificate Authority using our purpose-built Autoenrollment Connector – all while keeping your familiar Active Directory workflows intact.
Managed in Germany
Certified Infrastructure.
Complete Data Control.
Ready for the Future.
Your 360° Managed PKI & CLM runs in our own certified, energy-efficient Green IT data centers in Darmstadt and Frankfurt am Main. All data stays in-country, and private keys are securely stored in high-security HSMs. A highly available, redundant fiber connection to central internet nodes in Frankfurt ensures global access and optimal performance.
Your fast track to a successful PKI project
Expert PKI Consulting.
Across Every Industry.
Fixed-Price Solutions.
Our partner XELANED has been assisting international companies for more than 25 years, with a strong focus on encryption and certificate solutions. Clients benefit from extensive expertise gained through successful PKI projects in both mid-sized businesses and large enterprises. Particularly popular are our Quickstart packages, which allow you to deploy your PKI with precision, efficiency, and at a fixed price.
Gain hands-on experience with a real PKI solution
Free Full Version.
Instant Access.
Start Right Away.
Many mid-sized companies currently rely on only a few certificates, but demand is rapidly increasing. With our free entry plan, you can start using the 360° Managed PKI & CLM productively right away – on a small scale, yet with the full set of features. This allows you to gain valuable hands-on experience and prepare the groundwork for your next step.
Start for free, upgrade flexibly!
FREE
Get productive immediately and gain valuable experience. Full version at no cost, no setup, up to 50 certificates.
FREE features at a glance:
- Import & Manage unlimited own certificates for free
- Issue & Manage up to 50 active certificates at no cost
- Automation with ACME, EST, SCEP, CMP Automation powered by standard PKI protocols: ACME, EST, SCEP, CMP.
- Automation with REST API & CLI client Automate certificate management through API or CLI.
- Microsoft AD CS integration Seamless CLM integration with Microsoft ADCS.
- Certificate Discovery Seamless discovery and tracking of server certificates in your network.
- Flexible Certificate Lifecycle Management Manage, monitor, issue, renew, and revoke certificates—plus reporting, role & access management, and policy control with certificate templates for all common applications.
- Powerful Certification Authority (CA) The MTG CARA Certification Authority is automatically connected to the CLM and ready for use.
- Own Root CA
- Own Sub CA
- Keys from your CA protected in shared HSM
- Hosted on shared infrastructure
-
Self‑service support
We offer you a comprehensive collection of resources for direct online help:
- Videos
- Guides & How Tos
- Online documentation
- Frequently Asked Questions (FAQ) - OCSP & HTTP CRLs OCSP validates certificates in real time, whereas HTTP CRLs rely on downloaded revocation lists.
- Comprehensive cryptography: RSA, EC, PQC Full support for all major PKI algorithms: classical, elliptic curve, and post‑quantum secure.
BUSINESS
Ideal for mid-sized companies with higher certificate volumes & support needs. Includes advanced features & flexible scalability.
BUSINESS features at a glance:
- Issue & manage up to 10,000 active certificates in 500-certificate price tiers
- Multiple Sub CAs
- Microsoft Active Directory integration (Microsoft Autoenrollment) Seamless certificate automation in Active Directory (AD) with Autoenrollment Connector
- Hosted on shared high-availability infrastructure
- 24/7 hotline support
Optional features:
- IP-based access rights
- VPN access
- Consulting & Premium Support + Quickstart Packages Find full details in Services.
ENTERPRISE
Customized software solutions designed precisely to your individual requirements and evolving business needs.
Custom pricing upon request
ENTERPRISE features at a glance:
- Issue & Manage unlimited active certificates with flexible pricing tiers
Optional features:
- Multiple Root CAs e.g., useful when multiple algorithms are required for different types of certificates.
- Offline Root CA
- Dedicated Hardware Security Module (HSM)
- Hosted on dedicated infrastructure