# Keyfactor Command Reviews **Vendor:** Keyfactor **Category:** [Certificate Lifecycle Management (CLM) Software](https://www.g2.com/categories/certificate-lifecycle-management-clm) **Average Rating:** 4.5/5.0 **Total Reviews:** 83 ## About Keyfactor Command Keyfactor Command is a certificate lifecycle management solution that enables organizations to discover, control, and automate the lifecycle of keys and digital certificates across their IT landscape. It's the only solution that can be deployed on-premise, in the cloud, in a hybrid model, or in combination with a fully hosted PKI as a Service. The solution is also available in the Azure and AWS Marketplaces. ## Keyfactor Command Reviews ### 1. Automation of Certificates without Human Errors **Rating:** 5.0/5.0 stars **Reviewed by:** Luis M. | Security Senior Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** April 15, 2026 **What do you like best about Keyfactor Command?** I really like the customization and integration capabilities that Keyfactor Command has through PowerShell. This allows me to integrate custom developments and connect with tools like Remedy to log all changes in a visible way. I find it especially valuable to be able to use API endpoints for executing existing scripts, which facilitates the complete automation of certificates. Additionally, being a SaaS model, I save on the initial deployment, making the setup easier. **What do you dislike about Keyfactor Command?** Despite the Keyfactor Command catalog for integration with certain Identity Providers, I miss some. Being in a SaaS model, the initial configuration was easier, but even so, there were points that had some complications due to the degree of customization of the project. **What problems is Keyfactor Command solving and how is that benefiting you?** I use Keyfactor Command to automate certificates, reducing human errors in renewal and allowing custom integrations that facilitate use with other tools through PowerShell. ### 2. Effortless Certificate Management with Stellar Support **Rating:** 4.5/5.0 stars **Reviewed by:** Khalid A. | Chief Security Office: Cryptography, Small-Business (50 or fewer emp.) **Reviewed Date:** March 17, 2026 **What do you like best about Keyfactor Command?** I like that Keyfactor Command has a clean and easy-to-use user interface. The support from Keyfactor is highly responsive and quick to implement new features that we ask for. I also appreciate that the Terraform registry makes it very easy to implement custom modules into our KeyFactor automation, allowing us to build custom modules to make the provisioning of certificates across the company easier. Additionally, the initial setup of KeyFactor Command was easy and smooth to onboard and switch over. **What do you dislike about Keyfactor Command?** Currently the Terraform registry for Keyfactor lacks full support for applications and that is one thing we have had to work around until the team eventually implements this feature. The Terraform registry needs to be updated. **What problems is Keyfactor Command solving and how is that benefiting you?** KeyFactor Command automates provisioning and renewing digital certificates, simplifying companywide certificate management. The Terraform registry eases module implementation, enhancing automation by automatically inputting variable names. ### 3. Secure your IOT devices with this software **Rating:** 4.5/5.0 stars **Reviewed by:** Arup Kumar P. | Software Engineer II, Enterprise (> 1000 emp.) **Reviewed Date:** September 15, 2022 **What do you like best about Keyfactor Command?** Introduction of "Maintenance Mode" that allows users to toggle workflows on/off or revert to previous versions with a single click. **What do you dislike about Keyfactor Command?** If the edge network relies on very specific, older "thin client" operating systems or niche hardware, then custom API scripts need to be written rather than using a pre-built connector. **What problems is Keyfactor Command solving and how is that benefiting you?** With the increase in WFH culture since the start of the pandemic, people prefer to work from their native places and connect devices with one another. This software helped provide security to the company-owned devices, so there is no breach of security or leakage of valuable data from any spike points. ### 4. Efficient Certificate Management, Needs DB Improvement **Rating:** 4.0/5.0 stars **Reviewed by:** Ramesh R. | IAM-PKI Engineer | KMS | PAM -CyberArk| MFA | SSO., Enterprise (> 1000 emp.) **Reviewed Date:** April 30, 2026 **What do you like best about Keyfactor Command?** I like using Keyfactor Command for certificate enrollment and management as it acts as a robust front-end tool. I find the API call for certificate enrollment particularly useful. The ACME service and Orchestrator are special features that fulfill real-time automation requirements. **What do you dislike about Keyfactor Command?** Database Management could be improved, like unwanted data sync from CA servers, such as expired certs and failed requests. It would be better to improve the DB storage model and automatically clean up these expired or failed certificates. **What problems is Keyfactor Command solving and how is that benefiting you?** I use Keyfactor Command for certificate lifecycle management, providing renewal alerts, monitoring, and automation, acting as a front end for our certificate enrollment and management process. ### 5. Effortless Certificate Management with Powerful Customization **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** January 07, 2026 **What do you like best about Keyfactor Command?** Keyfactor command is very easy to use but also allows for a super customized setup with very granular controls that past platforms I have worked with in the past just do not have. We are able to issue 100s of thousands of certificates without an issue and the platform integrates with a ton of our tools seamlessly. We have had no major issues and any small problems are easily solved from support. **What do you dislike about Keyfactor Command?** The only thing that I am not a fan of is the UI as it looks a bit older and plain but the product itself is great so that is my only complaint. **What problems is Keyfactor Command solving and how is that benefiting you?** Our main issue was the problem of managing certificates at a large scale. We had no previous visibility into our environment, therefore allowing expirations of certificates or certificates that did not match our security policies, and Keyfactor allowed us to scavenge our environment to find all of our certificates with issues and easily convert them to Keyfactor, further allowing us to control these certificates such as revoking them or renewing them easily without user intervention. ### 6. Efficient CLM with Minor UI Hiccups **Rating:** 4.5/5.0 stars **Reviewed by:** Akifhan Veysel B. | System Engineer **Reviewed Date:** December 06, 2025 **What do you like best about Keyfactor Command?** I like that Keyfactor Command makes SSL certificate discovery, enrollment, and renewal easy. I really appreciate the one-click renewal feature that allows me to renew lots of certificates in minutes by hand. I also find that Keyfactor Command can be used alongside a variety of different tools and software, which is a big plus for me. **What do you dislike about Keyfactor Command?** On version 25.4, I see dashboard bugs, such as I can't see all certificate manage buttons, and the sidebar sometimes makes it hard for me to use. A new training path to get used to using Command would help, as it can solve lots of problems, but sometimes you have to think harder to solve the problem you have. **What problems is Keyfactor Command solving and how is that benefiting you?** Keyfactor Command helps me easily discover SSL certificates, enroll and renew them, and manage CAs. I love the one-click renewal feature, allowing me to renew lots of certificates in minutes. ### 7. Complex installation, not out of the box integrations **Rating:** 2.5/5.0 stars **Reviewed by:** Daniela P. | IT Expert, Enterprise (> 1000 emp.) **Reviewed Date:** August 12, 2025 **What do you like best about Keyfactor Command?** It looks like Keyfactor Command has many useful functionalities but we are not yet live in production with our first workflow so it is difficult to give too much feedback about this at this point. **What do you dislike about Keyfactor Command?** We have faced several issues with the installation of Keyfactor Command, some of them due to GPOs or system antivirus however it was not straight forward to identify all root causes. Since the beginning of this year we are working on creating a workflow for Certificate Issuance and we are now getting close to going live. Overall, the process of deployment and of creating the workflow was quite long and we need(ed) also several feature requests to improve the user experience with the flow. Also what we noticed is that there are not many articles online that can help with troubleshooting Command, we always need to open a case if we run into issues. Regarding integrations, it seems that some integrations are more complicated compared to the Microsoft implementations, for example we have deployed FAS with Windows Enrollment Gateway and a new component was required for this purpose, together with extensive configuration on the server and then connecting it to Command. **What problems is Keyfactor Command solving and how is that benefiting you?** We are planning to use Command as the portal for Certificate Management: our customers will login to the portal to request certificates, to revoke or renew them. One benefit is that the users will be able to see and manage their own certificates directly in the portal, so this will remove the endless notifications for certificate expirations and hopefully will ensure that all certificates are handled properly. We are also interested in scanning the certificates to be sure we have a proper reporting in place. **Official Response from Maggie Splaine:** > Hi Daniela, thank you for taking the time to share your feedback on Keyfactor Command. We’re truly sorry to hear about the challenges you’ve faced during your deployment. Your experience matters to us, and we want to make sure you get the value you expect from the platform. I’ve shared your feedback with your account team, and they’ll be reaching out to work with you to resolve these deployment and workflow challenges you’re facing. We appreciate your honesty and the opportunity to improve both your experience and our solution. ### 8. Effortless Certificate Management with Powerful SSL Discovery **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** October 29, 2025 **What do you like best about Keyfactor Command?** The SSL discovery feature is highly effective at locating and cataloging all of our certificates throughout the network. It is also very convenient for our users to request and manage their own certificates, and having the ability to oversee all our certificates from a single platform makes management much simpler. **What do you dislike about Keyfactor Command?** I really dislike having to add endpoints manually as certificate stores. I wish Keyfactor offered a way to automatically pull our machines, either from Active Directory or another method that doesn't rely on using a CSV file. It would be great if this could be accomplished through the SSL discovery process itself. **What problems is Keyfactor Command solving and how is that benefiting you?** By centralizing our certificates, we can avoid missing expirations that could lead to P1 downtime. I also appreciate the capability to automate both the renewal and installation of certificates on our endpoints. ### 9. CLM is mandatory in an enterprise. Not something you can do on your own. **Rating:** 4.5/5.0 stars **Reviewed by:** Kevin H. | Managing Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** June 20, 2024 **What do you like best about Keyfactor Command?** Continious improvement from a responsive team. Great current feature set with modules that grow the capability. (constantly adding new features) PKIaaS is a game changer for large organizations that want to get out of the business of self-managed PKI. **What do you dislike about Keyfactor Command?** So far there's not much I dislike. I do wish there was more workflows and customization that would allow new apps to quickly integrate via APIs to the app. Integrations are a huge part of any interprise. Faster development times for all of the integrations and automation projects would be a huge benefit to our organization. **What problems is Keyfactor Command solving and how is that benefiting you?** Previously managing certs on a MS AD CS CA. KF COmmand is a better interface than the native one that comes with MS. Also offers management of public PKI certs. ### 10. Modern PKI Solutions **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Consumer Goods | Enterprise (> 1000 emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Keyfactor Command?** Keyfactor Command allows for flexibility and modern integrations when working with certificates, incentivizing modernisation of workflows. **What do you dislike about Keyfactor Command?** There are few dislikes when it comes to Command, atleast comparing to old ADCS solutions. The lack of User specific dashboards was one of my gripes with the software, but this is being addressed in a upcoming update. **What problems is Keyfactor Command solving and how is that benefiting you?** We run KF command in a large organization that has been on a modernisation journey where securing our infrastrucutre and endpoints is of high priority. Command allows for greater oversight and lets us solve several automation areas without needing to build solutions from scratch. ### 11. Certificate lifecycle management made easy **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** September 30, 2025 **What do you like best about Keyfactor Command?** Once implemented, KF Command provided our end users with one centralized location to manage their certificates. This tool has automated numerous formerly manual processes. **What do you dislike about Keyfactor Command?** There is a learning curve to implementation of the tool, and we have identified a few bugs that end up being a feature request to resolve. **What problems is Keyfactor Command solving and how is that benefiting you?** Our previous CLM strategy was completely manual. KF Command allowed my team to automate numerous steps in the CLM process. This frees up my team to focus on other tasks and empowers our end users to take ownership of their certificate needs without reliance on our support. ### 12. New in the business, loving the tool **Rating:** 5.0/5.0 stars **Reviewed by:** Chris C. | Network Security Consultant II, Enterprise (> 1000 emp.) **Reviewed Date:** October 07, 2025 **What do you like best about Keyfactor Command?** I like that there are customizable reports so that I can set up automatic email alerts for my expiring certificates. **What do you dislike about Keyfactor Command?** I don't have a "select all" button on pages where I could use one. **What problems is Keyfactor Command solving and how is that benefiting you?** Certifictae lifestyle management is a pain point for us, so we are very grateful to have a tool like this. ### 13. CLM and backend CA migration **Rating:** 5.0/5.0 stars **Reviewed by:** Marcus M. | Principal Cybersecurity Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** August 12, 2025 **What do you like best about Keyfactor Command?** We've experienced a strong, collaborative partnership with Keyfactor, marked by excellent support, strategic planning, and a clear understanding of enterprise-scale security needs. Their team is highly responsive, aligning closely with our goals and providing tailored solutions throughout implementation and beyond. **What do you dislike about Keyfactor Command?** Orchestrator automation could use more mature features. **What problems is Keyfactor Command solving and how is that benefiting you?** More robust backend PKI than typical ADCS deployments. Better usability and support for the CLM than previous. More innovation and speed to market with upcoming changes in the industry (ex: PQC). ### 14. Great platform and affordable, but initial setup can be a bit confusing depending on integrations **Rating:** 4.5/5.0 stars **Reviewed by:** Jacob R. | PKI Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** October 22, 2025 **What do you like best about Keyfactor Command?** Easy UI, SaaS, cheaper, lots of integrations which work with our environment, support is very quick and knowledgeable **What do you dislike about Keyfactor Command?** Complicated at first, some docs mismatch **What problems is Keyfactor Command solving and how is that benefiting you?** Cert automation, cert visibility, breadth of integrations, single plane of glass type of approach ### 15. my feedback back to Keyfactor **Rating:** 4.5/5.0 stars **Reviewed by:** Ningbo L. | VP, Mid-Market (51-1000 emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Keyfactor Command?** 1. Keyfactor has powerful certificate management feature cross internal/public certificate. cross different platform 2. Keyfactor has workflow with with can be customized for different needs. 3. Keyfactor has many orchestrator plugins to expend automation to many products. **What do you dislike about Keyfactor Command?** 1. the technical support needs to be improved 2. the product needs to be tested more before release, we see some obvious bugs in some new version. 3. the product should improve some features, for example expiring email notification. 4. Keyfactor is not easy to deploy 5. some feature lock of docs or examples, or some docs not updated **What problems is Keyfactor Command solving and how is that benefiting you?** it provides self-service solution for certificate life cycle management. ### 16. Excellent Support and Usability, But Orchestrator Upgrade Needs Improvement **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Government Administration | Enterprise (> 1000 emp.) **Reviewed Date:** October 22, 2025 **What do you like best about Keyfactor Command?** Ease of use. Customer Support/ Service Supoprt is always on top of things. Always have the answers to our issues. **What do you dislike about Keyfactor Command?** Orchestrator could use more work. I had a great environment with my old version of Ocrhestrator, since the upgrade, I have too many store types that are not working right for us. Still a great product just currently my biggest concern. **What problems is Keyfactor Command solving and how is that benefiting you?** Expiring Certs was a huge interruption in our environment. Services shutting down do to administrators not having calendars setup to replace certificate. Also provided a great way to push certificates out to servers via Commander. Great feature. ### 17. Positive experience with Keyfactor as a certificate management solutions provider **Rating:** 5.0/5.0 stars **Reviewed by:** Jeff G. | Director, Infrastructure and Operations, Enterprise (> 1000 emp.) **Reviewed Date:** July 28, 2025 **What do you like best about Keyfactor Command?** We have an excellent relationship with the sales and support team from Keyfactor and feel like their service has been personalized to meet our specific needs. **What do you dislike about Keyfactor Command?** Nothing to speak of. They've been a very good partner of ours. **What problems is Keyfactor Command solving and how is that benefiting you?** Prior to using Keyfactor Command, we were getting surprised by certificates expiring without being able to anticipate the work required to mitigate this from happening. We were doing cert management without automation and notifications capability. Keyfactor's been effective at helping us mature our practices. ### 18. Helpful Transition to Keyfactor **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Networking | Enterprise (> 1000 emp.) **Reviewed Date:** July 29, 2025 **What do you like best about Keyfactor Command?** The single pane of that the product can provide. It was immensely helpful during the transition to see our old and new certificate authorities all in one location. **What do you dislike about Keyfactor Command?** The workflows take a little bit of time to fully understand and craft. I wish there was an easier way to do this. **What problems is Keyfactor Command solving and how is that benefiting you?** This is providing a single pane of glass for all internal certificates as well as SSL scanning for potential self-signed certificates in the Enterprise. ### 19. Complex CLM with broad integration possibilities **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Automotive | Mid-Market (51-1000 emp.) **Reviewed Date:** July 23, 2025 **What do you like best about Keyfactor Command?** Simple integration into Active Directory Certificate Services and Directory Services. Good connection to other Keyfactor products; for example, with an existing EJBCA. The Keyfactor support is always very quick in their responses and can provide excellent assistance. The dashboard and web overview offer an easy-to-use interface that I can confidently recommend to any customer. **What do you dislike about Keyfactor Command?** One must, so to speak, install and configure it correctly directly. Command does not forgive any or few configuration errors. Certificate Templates, for example, cannot be deleted, but can only be compressed with a SQL script in a cumbersome way. So that would still be open as a feature. **What problems is Keyfactor Command solving and how is that benefiting you?** Poor overview of the lifecycle in, for example, MS AD CS. No overview of already issued certificates. ### 20. One stop for managing all your organization's SSL certificates **Rating:** 4.5/5.0 stars **Reviewed by:** Nitesh G. | PKI Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** July 17, 2025 **What do you like best about Keyfactor Command?** - Clean UI, no distractions, simple to use. - Vast integration capabilities (3rd party public CA or orchestrator) - I like how they account for and resolve bugs in releases **What do you dislike about Keyfactor Command?** Would be great if can get a faster on call support in case of an emergency. **What problems is Keyfactor Command solving and how is that benefiting you?** Automating the certificate lifecycle for various use cases in our org and flows that help reduce manual efforts for CLM ### 21. Sign server, CA **Rating:** 4.5/5.0 stars **Reviewed by:** Venkat S. | Senior DevOps Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** July 25, 2025 **What do you like best about Keyfactor Command?** Well versed product and very much features for Signserver and CA **What do you dislike about Keyfactor Command?** Documentation can be improved with latest releases **What problems is Keyfactor Command solving and how is that benefiting you?** Secure and digital certs sign ### 22. Engineer **Rating:** 4.0/5.0 stars **Reviewed by:** Mike C. | Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** October 01, 2025 **What do you like best about Keyfactor Command?** It’s a good solution for certifications and secret many **What do you dislike about Keyfactor Command?** User interface is not as intuitive as I would like **What problems is Keyfactor Command solving and how is that benefiting you?** Certificate management ### 23. Keyfactor Command enables us to deliver! **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** June 20, 2025 **What do you like best about Keyfactor Command?** The tracking and automation of our certificate monitoring, renewal and notification workflows. I also like the excellent support and product features, as they help me manage our significant numbers of certificates across our IT landscape. **What do you dislike about Keyfactor Command?** Some features are buried quite deep in the software, which is sometimes making it hard to find what I need. **What problems is Keyfactor Command solving and how is that benefiting you?** The tracking and maintaining of certificate lifecycles helps us to mitigate risks and outages, which is enabling us to stay in control in a proactive way, instead of a reactive way. ### 24. Great Open-Source Support, But Windows Architecture Needs Improvement **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Semiconductors | Enterprise (> 1000 emp.) **Reviewed Date:** October 31, 2025 **What do you like best about Keyfactor Command?** Open-source, good support and friendly experienced personnel **What do you dislike about Keyfactor Command?** Internal Windows architecture. E.g. IIS. **What problems is Keyfactor Command solving and how is that benefiting you?** ACME automation ### 25. Power and use **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** October 07, 2025 **What do you like best about Keyfactor Command?** Easy to use and powerful for standard administration **What do you dislike about Keyfactor Command?** Nothing so far, nothing has come up that is not expected **What problems is Keyfactor Command solving and how is that benefiting you?** Key lifecycle management automation ### 26. Keyfactor Command **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** October 07, 2025 **What do you like best about Keyfactor Command?** Good functionality and self service capabilities **What do you dislike about Keyfactor Command?** Long release cycles can make it difficult to resolve issues quickly **What problems is Keyfactor Command solving and how is that benefiting you?** Internal certificate management ### 27. Excellent tool to use for Certificate management and Automation **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 05, 2025 **What do you like best about Keyfactor Command?** Simple to setup and use the CLM tool..... **What do you dislike about Keyfactor Command?** Issues experienced when upgrading the .net framework on the Orchestrator servers, the Software was not fully compatible **What problems is Keyfactor Command solving and how is that benefiting you?** This is assisting our team with the Certificate management and automation to renew. ### 28. Low maintenace Certificate Management **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Food Production | Enterprise (> 1000 emp.) **Reviewed Date:** August 15, 2025 **What do you like best about Keyfactor Command?** Great product, easy to user, super integration, everything in one central place, great technical efficient customer support. **What do you dislike about Keyfactor Command?** No real challenges from the Keyfactor product. **What problems is Keyfactor Command solving and how is that benefiting you?** Centralised certificate management that works well. ### 29. Keyfactor **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** October 21, 2020 **What do you like best about Keyfactor Command?** The GUI is well laid out and getting certificates into Keyfactor is fairly easy. **What do you dislike about Keyfactor Command?** I know they are being worked on but more integrations **What problems is Keyfactor Command solving and how is that benefiting you?** Certificate inventory and certificate self service **Official Response from Ryan Sanders:** > Thanks for taking the time to review Keyfactor! We’re happy to hear that you've been able to leverage Keyfactor Command to enable certificate inventory and self-service. Regarding your concerns with API documentation, we’ve introduced a new, interactive API utility and updated documentation embedded within the application. You can learn more in the URL below: https://blog.keyfactor.com/whats-new-keyfactor-8 If you have any questions around updating to Keyfactor 8 (or later), please reach out to your customer success representative. Thanks, The Keyfactor Team ### 30. Keyfactor Review ver 9.10 **Rating:** 4.5/5.0 stars **Reviewed by:** Ivan N. | Cyber Security Engineer, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** December 01, 2021 **What do you like best about Keyfactor Command?** Complete visibility into my PKI environment to include an inventory of my CA's; monitoring of the CRLs and OCSP; workflows to manage the lifecycle of certificates from issuance to expiration. End-user management of the certificates via custom cert collections; automation via REST; ganualar RBAC controls; CA gateway to my public certificate provider(Sectigo) **What do you dislike about Keyfactor Command?** Configuration of some components such as the CA gateway is achieved via JSON config files. This method is prone to errors. As a mature product, I would prefer to use a UI for as many as the configurations as possible. **Recommendations to others considering Keyfactor Command:** With the aggressive release cycle, I recommend maintaining a Dev instance with versioning to vet the features before prod deployment. **What problems is Keyfactor Command solving and how is that benefiting you?** Benefits include providing a common portal for the requesting of certificates regardless of the client platform. Visibility into the health of my ADCS deployment. Certificate life cycle monitoring via automated expiration alerts. API support of 3rd party public CA, Sectigo, in my case. Key Archival and retrieval are much easier than using the native ADCS method. End-user management of certificates via collections Lessening the exposure of my ADCS CA's to direct interface ny my end-users. All cert operations from an end-user perspective are accomplished via the Command portal. ### 31. Robust platform that features and meets all the requirements for Certificate Lifecycle Management. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** September 25, 2024 **What do you like best about Keyfactor Command?** I like that it is the one stop shop for managing all of our enteprise Certificates, with api capabilities. The have 24 coustoer Support for the PKIaaS as well. Failry easy to implement and Integrate for several key platforms including windows, IIS, Linux, Apashe, SSH, PFX Enrollment, etc. I use this product on a daily basis to manage all certificate needs for Assurant. **What do you dislike about Keyfactor Command?** There is nothing I dislike at this poiint in time. **What problems is Keyfactor Command solving and how is that benefiting you?** Certificate Life management through a single pane of glass very helpfule in manging all forests and domain AD CS. ### 32. Decent System **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** June 19, 2024 **What do you like best about Keyfactor Command?** Centralized storage of certificates - including private keys. Ability to generate and request certificates. Decent web interface for basic search, import, export, requests. **What do you dislike about Keyfactor Command?** Poor web interface for customization, reporting, dashboards. Incredibly difficult to set up network scanning with accurate details. Customer support is slow to respond. Struggles to assign ticket to correct personelle. **What problems is Keyfactor Command solving and how is that benefiting you?** Centralization of certificate requests, and key storage. ### 33. Support from Keyfactor for an individual user **Rating:** 4.5/5.0 stars **Reviewed by:** Gerard C. | Senior Telecommunications Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 13, 2024 **What do you like best about Keyfactor Command?** Their willingness to help is more than appreciative **What do you dislike about Keyfactor Command?** We cant reset passwords for users who forgot their previous password it doesnt seem as though what the priority you set a ticket to you receive the same response time **What problems is Keyfactor Command solving and how is that benefiting you?** Laptop certs for all users in our environment ### 34. Good certificate management tool with a lot of room for improvements **Rating:** 3.0/5.0 stars **Reviewed by:** Richard Paolo M. | Senior System Administrator, Enterprise (> 1000 emp.) **Reviewed Date:** July 04, 2024 **What do you like best about Keyfactor Command?** Centralizes your certificate management. **What do you dislike about Keyfactor Command?** SaaS customers have little freedom to customize implementation. Lot of adjustments/workarounds to be made when coming from a different solution. High dependency with support. **What problems is Keyfactor Command solving and how is that benefiting you?** We benefit from a centralized certificate management ### 35. Preventing Certificate Armageddon - The Gold Standard in Certificate Security **Rating:** 4.5/5.0 stars **Reviewed by:** Sau M. | Senior Cybersecurity Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** March 05, 2024 **What do you like best about Keyfactor Command?** Ability to preemptively identify and resolve certificate issues before they escalate. **What do you dislike about Keyfactor Command?** Navigating the advanced settings can be a bit daunting for new users. **What problems is Keyfactor Command solving and how is that benefiting you?** Preventing certificate-related outages and vulnerabilities. Automate and manage the lifecycle of digital certificates, ensuring our systems are always secure and compliant. **Official Response from Warsan Ahmed:** > Thank you for sharing your feedback! We're continuously working on improving user experience and providing more guidance. If you need any assistance, please don't hesitate to reach out to us. ### 36. KeyFactor Experience **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** June 20, 2024 **What do you like best about Keyfactor Command?** Single pane of glass for multiple Certificate Authorities **What do you dislike about Keyfactor Command?** Upgrades hasn't been seamless. Error messages hasn't been useful to diagnose the issue. **What problems is Keyfactor Command solving and how is that benefiting you?** Manage Certificate Issuance, Expiry Notification, Monitoring CRL's, ### 37. Command is a great tool for CLM **Rating:** 4.5/5.0 stars **Reviewed by:** Edgar E. | Enterprise (> 1000 emp.) **Reviewed Date:** February 28, 2024 **What do you like best about Keyfactor Command?** Help us to manage and control all of our certificates easily and keep them updated avoiding Bussiness impacts. **What do you dislike about Keyfactor Command?** The way to access devices and deploy the certificate, could be better and easier. **What problems is Keyfactor Command solving and how is that benefiting you?** The CLM, because before we didn't have anything about it. **Official Response from Warsan Ahmed:** > We appreciate your feedback! It's great to hear that Keyfactor Command is solving your CLM needs and providing a benefit that was previously lacking. ### 38. Cert Management that Works **Rating:** 5.0/5.0 stars **Reviewed by:** Gary L. | Field CISO | Security Services, Enterprise (> 1000 emp.) **Reviewed Date:** May 07, 2024 **What do you like best about Keyfactor Command?** The automated cert installation and renewal is complete. It works with all the applications and cert types we need **What do you dislike about Keyfactor Command?** Not as intuitive as some other solutions, but it works and the other solutions didn't **What problems is Keyfactor Command solving and how is that benefiting you?** Enabling end to end encryption by provisioning certs on the endpoints ### 39. KeyFactor Cert Automation **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** February 29, 2024 **What do you like best about Keyfactor Command?** KeyFactor helped us centralize the cert management **What do you dislike about Keyfactor Command?** Keyfactor is not easy to install and requires support **What problems is Keyfactor Command solving and how is that benefiting you?** Centralized cert management **Official Response from Warsan Ahmed:** > We appreciate your feedback about Keyfactor Command. It's great to hear that it has been beneficial for centralizing your certificate management. ### 40. Simplification of Certificate Management **Rating:** 4.5/5.0 stars **Reviewed by:** Willie C. | Director Identity & Access Management, Enterprise (> 1000 emp.) **Reviewed Date:** March 23, 2023 **What do you like best about Keyfactor Command?** Easy to use and deploy. The PKI-as-a-Service implementation was straightforward and helped us ensure our root keys were properly stored/managed. The ability to ingest certificates from multiple sources helps our team have a single pane of glass for management. We are currently integrating KeyFactor with ServiceNow to streamline and simplify the user experience. **What do you dislike about Keyfactor Command?** When you need customization, it can take some time for KeyFactor to respond. It's not terrible, and the turnaround should not be expected to be instantaneous. But we have had some delays waiting for their support team to facilitate our requests. **What problems is Keyfactor Command solving and how is that benefiting you?** It provides a central view of the managed certificates for the support team. It also provides a central spot for end users to request and manage their certificates on their own. We have a number of wildcard certificates in place It has helped us track down where they are used. This reduces possible outages when certificates are renewed and also allows us to replace those wildcards certificates with individual ones when possible. ### 41. Overall one of the best certificate management platforms available **Rating:** 4.5/5.0 stars **Reviewed by:** Jesse Y. | Systems Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** March 23, 2023 **What do you like best about Keyfactor Command?** Keyfactor Command offers a great management tool to help inventory and track certificates across our environment. The orchestration and automation pieces of the tool offer even more benefits and allow my team and me to focus on other areas of importance while still feeling like we have a good grasp on our certificates. **What do you dislike about Keyfactor Command?** There is not much to dislike about Keyfactor Command. If I had to nitpick, one feature I have requested many times over the years of being a customer is an automatic upgrade of their application for on-prem instances. (both the Keyfactor Command instance and each Orchestrator instance). Upgrades tend to be be more complicated than other software stacks. **What problems is Keyfactor Command solving and how is that benefiting you?** One of the biggest business needs that we have is certificate lifecycle management. Knowing where a certificate is deployed and who is responsible for that certificate has always been a challenge. Keyfactor Command helps solve that problem. ### 42. Review of Keyfactor PKIaaS Offering **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.) **Reviewed Date:** May 22, 2023 **What do you like best about Keyfactor Command?** Most components are in the cloud & managed by Keyfactor. Just a few Windows servers are needed to complete the infrastructure. **What do you dislike about Keyfactor Command?** Most changes are completed by the vendor, usually at their pace, not the customers. **What problems is Keyfactor Command solving and how is that benefiting you?** We had no internal PKI until deploying Keyfactor. ALL certs were signed by public CA. Now we can utilize Keyfactor internal PKI/CA to sign internal certs and lower public CA costs. **Official Response from Warsan Ahmed:** > Thank you for sharing your experience with Keyfactor Command. We're glad to hear that you appreciate the convenience of having most components in the cloud. We understand your concern about changes being completed at the vendor's pace and not the customers'. We will work on improving our communication and responsiveness to better meet your needs. It's great to hear that Keyfactor Command has helped you establish an internal PKI/CA, reducing costs associated with public CAs. If you have any further feedback or need assistance with anything, please don't hesitate to reach out. We value your input and are committed to providing the best service possible. ### 43. Great Product and support **Rating:** 4.5/5.0 stars **Reviewed by:** Kera D. | Enterprise (> 1000 emp.) **Reviewed Date:** March 23, 2023 **What do you like best about Keyfactor Command?** KeyFactor support is one of our most helpful vendors we work with. Their products are well-documented and perform as advertised. **What do you dislike about Keyfactor Command?** There is a bit of a learning curve event for PKI as a Service customers. **What problems is Keyfactor Command solving and how is that benefiting you?** Central private key repository, central self-service certificates, orchestration ### 44. One of the best ways to manage, track, and automate certificates! **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 19, 2023 **What do you like best about Keyfactor Command?** Very easy to use the tool, and any questions will be answered promptly by the support team. **What do you dislike about Keyfactor Command?** There is a little bit of a learning curve to use the tool. **What problems is Keyfactor Command solving and how is that benefiting you?** Tracking certificates and their expiration dates. **Official Response from Warsan Ahmed:** > We're thrilled to hear that you find Keyfactor Command easy to use and that our support team is providing prompt assistance. We understand that there may be a learning curve, and we're continuously working to improve user experience. ### 45. Keith's Review **Rating:** 5.0/5.0 stars **Reviewed by:** Keith S. | Senior PKI Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** September 02, 2022 **What do you like best about Keyfactor Command?** Keyfactor Command is very robust and the ability to use the API's is a great asset **What do you dislike about Keyfactor Command?** PAM solutions support is lacking; there are only 2-3 that are supported **What problems is Keyfactor Command solving and how is that benefiting you?** We need api's to be able to communicate with Akami, we developed our own, but they would not allow us to do it, so we are waiting on them. Also Because of the restructuring of the code the Development team did for v9, no longer being able to copy out of the Location's box was the new intentional behavior. Because of this, the feature request did have to be submitted. THis is to be resolved in V10 We really need to have the ability to “edit” scheduled jobs and to see the details to know the certificate, F5, and path of the delivery. Orchestrators scheduled jobs: We really need to have the ability to “edit” scheduled jobs and to see the details to know the certificate, F5, and path of the delivery. looking at V10 release ### 46. Tech Lead **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** April 11, 2023 **What do you like best about Keyfactor Command?** How simple the interface is and how easy it is to train new people to use it **What do you dislike about Keyfactor Command?** the amount of time I have to put into get the system upgraded to new versions **What problems is Keyfactor Command solving and how is that benefiting you?** it has helped streamlined our certificate issuing process ### 47. Limited time working in KeyFactor **Rating:** 3.5/5.0 stars **Reviewed by:** Henry C. | Mid-Market (51-1000 emp.) **Reviewed Date:** March 23, 2023 **What do you like best about Keyfactor Command?** Does it job without much management, which is good for teams with busy schedules. **What do you dislike about Keyfactor Command?** Keyfactor support, not sure if staff got decreased but support time to resolve an issue takes longer. **What problems is Keyfactor Command solving and how is that benefiting you?** Helps by sending sending email reminders about what certs will expire. ### 48. EJBCA PKI by Primekey solution for your PKI needs **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Telecommunications | Enterprise (> 1000 emp.) **Reviewed Date:** August 03, 2022 **What do you like best about Keyfactor Command?** Keyfactor Support (because the migration of cases from the old portal took time) responses by agents in the beginning were delayed. But once the migration was completed, the agents have been very responsive and technically sound in their support. If they are unable to help or make any progress, they escalate to the appliance/professional services contacts to get their input. **What do you dislike about Keyfactor Command?** The Primekey GUI error messages could be more descriptive and would like the feature of being able to export reports from the CA console. The documentation for Primekey should be updated for certain usecases like for the MIBs. **What problems is Keyfactor Command solving and how is that benefiting you?** My company uses the Primekey solution by Keyfactor for our PKI infrastructure. It has enabled us to issue certificates for thousands of end points. This helps us do secure authentication. ### 49. Best IoT Software Solutions to Secure IoT Devices **Rating:** 5.0/5.0 stars **Reviewed by:** DEEPAK K. | Manager, Enterprise (> 1000 emp.) **Reviewed Date:** October 10, 2022 **What do you like best about Keyfactor Command?** The Best part of this software is it will provide best solution to secure IoT Device and it has the best feature to process data with in a system and out of the system. On a Trail base we decided use this solution to IoT Devices and this software has best solution and service. **What do you dislike about Keyfactor Command?** Like the best solution, this Keyfactor provides like the bugs are getting raised which need to be cleared by Solution provider. **What problems is Keyfactor Command solving and how is that benefiting you?** It Can provide best solution for Remote Workers and secure Company Data. ### 50. Keyfactor is a great way to manage all my certificates. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** December 08, 2020 **What do you like best about Keyfactor Command?** The greatest thing about Keyfactor is that I can easily see all my certificates in one place. Also the ability to auto renew certificates that is about to expired **What do you dislike about Keyfactor Command?** Keyfactor orchestrator only support a couple known Cert stores. I wish we could leverage more out of the orchestrator to automate renewal of out of box applications. **What problems is Keyfactor Command solving and how is that benefiting you?** This is our first PKI system to manage our certificates. It's proven that it helps us managing all our certificates. We can now see what we have in inventory and create workflows to alerts us with expiring certs. Keyfactor is able to auto renew certificate that are in inventory. I can now automate and manage majority of our certifications in my organization. ## Keyfactor Command Discussions - [What is certificate life cycle management?](https://www.g2.com/discussions/what-is-certificate-life-cycle-management) - [Who owns Keyfactor?](https://www.g2.com/discussions/who-owns-keyfactor) - [What is Keyfactor API?](https://www.g2.com/discussions/what-is-keyfactor-api) - [What is keyfactor Command?](https://www.g2.com/discussions/what-is-keyfactor-command) - [View Keyfactor Command pricing details and edition comparison](https://www.g2.com/products/keyfactor-command/reviews?section=pricing&secure%5Bexpires_at%5D=2026-06-05+23%3A12%3A14+-0500&secure%5Bsession_id%5D=82acd313-70fb-40da-a38e-e36a4bd0171f&secure%5Btoken%5D=944dc29688545f57f3a9e05607e942e02968019774b5c0deec0ba385e1734d6f&format=llm_user) ## Keyfactor Command Integrations - [Azure Functions](https://www.g2.com/products/azure-functions/reviews) - [DigiCert CertCentral](https://www.g2.com/products/digicert-certcentral/reviews) - [IBM Vault (formerly HashiCorp Vault)](https://www.g2.com/products/ibm-vault-formerly-hashicorp-vault/reviews) - [Keyfactor EJBCA®](https://www.g2.com/products/keyfactor-ejbca/reviews) - [Microsoft Active Directory Certificate Services (AD CS)](https://www.g2.com/products/microsoft-active-directory-certificate-services-ad-cs/reviews) - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) - [RDP Hosting](https://www.g2.com/products/rdp-hosting/reviews) - [SSH Client/ Server](https://www.g2.com/products/ssh-client-server/reviews) ## Keyfactor Command Features **Functionality** - Durability - Envelope Encryption - Automation **Functionality** - Certificate Discovery - Expiration Monitoring - Automated Certificate Operations - Policy And Role-Based Access Controls - Workflow - Protocol Support - Reporting And Search - Audit And Enforcement - Key Storage **Availability** - API/Integrations - Service Integration - Regional Support - Scalability **Administration** - API / integrations **Administration** - Auditing - Compliance - Management Console ## Top Keyfactor Command Alternatives - [AppViewX CERT+](https://www.g2.com/products/appviewx-cert/reviews) - 4.5/5.0 (44 reviews) - [DigiCert CertCentral](https://www.g2.com/products/digicert-certcentral/reviews) - 4.4/5.0 (31 reviews) - [Sectigo Certificate Manager](https://www.g2.com/products/sectigo-certificate-manager/reviews) - 4.5/5.0 (183 reviews)