• Gain visibility and control Over SSH, SSL environments.
  • Sign certificates with custom root CA, watch out for expiring domains, and more...
  • Boost security for your mobile devices with fully automated, end-to-end certificate life cycle management.
  • End-to-end certificate life cycle
    management with Let's Encrypt.
  • Centralized discovery and management of SSL certificates from world-renowned CAs.
Gain Visibility and Control Over SSH, SSL Environments




Web-based SSH Key and SSL Certificate Management Solution for Enterprises

ManageEngine Key Manager Plus is a web-based key management solution that helps you consolidate, control, manage, monitor, and audit the entire life cycle of SSH (Secure Shell) keys and SSL (Secure Sockets Layer) certificates. It provides visibility into the SSH and SSL environments and helps administrators take total control of the keys to preempt breaches and compliance issues.

Quick Download
Download Key Manager Plus and start your free trial in less than 2 minutes!
By clicking 'Proceed to Download', you agree to the License Agreement and Privacy Policy.
For complete list of download options (64 - bit versions of Windows & Linux), visit our download page.

What Problems Does ManageEngine Key Manager Plus Solve?

Safeguarding data in transit has always been a big challenge for security administrators. While SSH keys have helped organizations ensure security in remote administrative access and data transfer, digital keys present some unique challenges.

Usually, SSH keys are left unmonitored and unmanaged, making organizations vulnerable to cyber attacks. In the absence of an automated system, getting the list of all the keys in use, finding and restricting access privileges, and ensuring periodic rotation is a herculean task.

Similarly, managing a Secure Socket Layer (SSL) environment can be daunting when organizations use a large number of SSL certificates issued by different vendors with varying validity periods. On the other hand, SSL certificates left unmonitored and unmanaged could expire, or rogue/invalid certificates could be used. Both scenarios could lead to service downtime or display of error messages that would destroy customer trust in data security and, in extreme cases, even result in security breaches.

ManageEngine Key Manager Plus has been designed to solve all these issues and serves a one-stop solution for managing all digital identities.

SSL Certificate Management

SSH Key Management

What industry experts are saying about Key Manager Plus

Common features

" The customer’s IT infrastructure posed a lot more challenges, but after the deployment of Key Manager Plus, the external security audit processes were successfully completed. Our customer is quite impressed with Key Manager Plus’ features and functionalities. We highly recommend Key Manager Plus."

Rajesh Singh

Senior Project Manager, Zensar Technologies


Benefits of Key Manager Plus

  • Gain complete visibility of all SSH keys and SSL certificates present in the organization and achieve centralized control.
  • Remove all existing public key-user trust relationships and generate new key pairs. Deploy the new public keys to users in bulk with just a couple of clicks.
  • Tighten security by periodically rotating keys and prevent their misuse.
  • Launch direct connections to remote devices by using the keys present in Key Manager Plus, saving time and enhancing productivity.
  • Delete any unwanted keys from the database, terminate access immediately, and prevent violations by obsolete accounts.
  • Get customizable, recurring notifications when the validity of an SSL certificate is about to expire.
  • Eliminate service downtime or display of error messages due to expired/invalid/rogue SSL certificates.


Supported platforms for product installation


Windows, Linux



Local, Active Directory (for Windows)

Supported SSH version



Backend database


PostgreSQL (bundled with the product)




Supported protocols


RSA (1024/2048/4096 bit) and DSA (1024 bit)

Editions & Licensing

Evaluation Free Standard

Manage upto 50 keys*

Valid for 30-days. Automatically turns into free edition at the end of the trial.

  • Valid forever
  • Manage upto 5 keys*
  • Licensing is based on the number of managed keys*

The term 'Keys' refers to the number of SSH private keys plus SSL certificates plus any other digital key being managed.