Deployment
Let’s start with where you are in your cloud journey.

Cloud-First
Cloud-first enterprises need a cloud-native solution. For these organizations, we recommend Keyfactor PKI as a Service, which combines fully managed PKI and certificate lifecycle automation in a single cloud platform.
- Deploy in the cloud
- Get a fully managed PKI

Hybrid
Cloud-first isn’t right for everyone. For organizations with strict requirements to keep their root of trust in-house, we securely integrate on-prem PKI with Certificate Lifecycle Automation as a Service in a hybrid model.
- Deploy in the cloud
- Keep your PKI on-premise

On-Premise
Some enterprises need to deploy both PKI and certificate management software within their data center. For these cases, we offer the most flexible and scalable Certificate Lifecycle Automation solution for on-prem.
- Deploy on-premise
- Keep your PKI on-premise
Platform
Now let’s find the right fit for your organization.
Deployment Options
ON-PREM
Self-Hosted
Deploy our certificate lifecycle automation (CLA) solution on-premise or in a private or public cloud.
Keyfactor Cloud
HYBRID
CLA as a Service
Consume certificate lifecycle automation as a service (CLAaaS) hosted in the Keyfactor Cloud.
CLOUD
PKI as a Service
Combine certificate lifecycle automation with a fully-hosted, 24/7 managed PKI in the Keyfactor Cloud.
Included
Not Included
Optional
Modules
Extend the power of Keyfactor Command with flexible add-on or standalone modules.
Encryption Key Management
Centrally deploy, control, and manage cryptographic keys across your cloud and virtual environments.
SSH Key Management
Eliminate SSH key sprawl and enforce tight access controls access with the SSH Key Manager.
Enterprise Code Signing
Enable DevOps to sign any code, from anywhere, while security retains full control and auditability.