Useful Automated Tool to manage End to End Life Cycle of SSL Certificate Management
February 24, 2022

Useful Automated Tool to manage End to End Life Cycle of SSL Certificate Management

Anonymous | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User

Overall Satisfaction with ManageEngine Key Manager Plus

We use ManageEngine Key Manager plus to manage our SSL Certificates. We have SSL Certificates deployed in more than 50 Plus Web Applications and manually maintaining the renewals of each SSL certificate was a difficult task and there was no visibility that the SSL is deployed in which web apps since we are large financial services having 6 big companies and network is very complex in nature having presence in on-prem and in multi-cloud environments. We were maintaining SSL Certificate information in excel sheet and we had issues in renewing the SSL Certificates as the process got delayed as we did not have an alert mechanism to tell us the expiry date of the SSL Certificate and many times we were at risk of not renewing before expiry. Currently, we had deployed 2 instances (On Cloud and on Prem Setup).
  • SSL Certificate Discover Feature.
  • User Friendly Dashboard.
  • Automated Alerts to tell about expiry of the Certificate.
  • Different User Profiles can be configured.
  • Various Reports available to download.
  • Stable Product.
  • False Positives Issues (Sometimes getting alerts for certificates that are already renewed).
  • Alerting Emails can be improved.
  • Audit Trail need to be improved.
  • No Business Impact as SSL Certificates renewed on time.
  • Centralized Control over the SSL Certificate Exposure in the environment.
  • Security of Private Keys.
  • Able to discover hidden SSL Certificates.
Technical Support is good and available 24/7. Licensing Policy is also good and we have taken a yearly subscription model. Integration with Digi Cert is also possible. Secure Solution for management of SSL Certificates Life Cycle. We have not faced any issue with the deployment of the product and not many bugs in the products except some false positives and false negatives ratios.

Do you think ManageEngine Key Manager Plus delivers good value for the price?

Yes

Are you happy with ManageEngine Key Manager Plus's feature set?

Yes

Did ManageEngine Key Manager Plus live up to sales and marketing promises?

Yes

Did implementation of ManageEngine Key Manager Plus go as expected?

Yes

Would you buy ManageEngine Key Manager Plus again?

Yes

Overall good product. The solution was able to meet our business case. It is not an expensive product as compared to other key vault solutions. Implementation is an easy and user-friendly console. We got the training on how to use the solution after it was deployed. It is widely used by many organizations. With this solution, we managed to create a centralized SSL Certificates Inventory and other details which were very difficult to extract using the manual search.
The tool is really good for the enterprise having major exposure to public-facing web applications and this can be used to maintain the SSL Certificate Inventory and automated alerts can be set so that SSL Certificates can be renewed before the expiry. Organizations who don't have the visibility of the SSL Certificate deployed across various and then tool can be used to identify the certificates and inventory can be prepared. This tool must be handled by Information Security Team since the private key information is confidential in nature. This tool has the capability to extract the information from various cloud instances including Azure, GCP, and AWS. I will not recommend this tool for organizations that don't have many public-facing apps and for 8 to 10 apps this can be managed manually rather than purchasing this tool.