What's New: CMP Protocol, Partner Portal, Feature Licensing & More

The World's MostAdvancedEnterprise PKI Platform

Transform your certificate management with KeyGrid PKI—the only platform combining sub-second performance, 7 RFC-compliant protocols, and flexible HSM integration with enterprise-grade licensing and partner ecosystem.

Sub-second Certificate Issuance

Typically <200ms performance

7 RFC Protocols

ACME, SCEP, EST, CMP, TSA, OCSP, SPIFFE

Channel Partner Ecosystem

10-30% recurring commissions

Flexible Licensing

Trial, Professional, Enterprise

10+ HSM Providers
99.99% Uptime SLA
FIPS 140-2 Level 3

KeyGrid Dashboard

Certificate Management Platform

Live

Response Time

47ms

HSM Operations

15K+/sec

Test Coverage

100%

HSM Vendors

10+

Production Features

ACME
SCEP
EST
CMP
TSA
SPIFFE
Partner Portal
Lifecycle Events

Sub-second

<200ms typical

What's New in 2025

Latest Enterprise Features

KeyGrid PKI continues to evolve with cutting-edge features that set new standards in enterprise certificate management, partner ecosystems, and compliance automation.

RFC 4210

CMP Protocol Support

Complete Certificate Management Protocol implementation with IR/CR/KUR/RR operations, multi-tenant profiles, and three authentication modes.

Production-ready with 45 passing tests
New

Channel Partner Portal

Launch your PKI reseller business with white-label portals, automated commission management, OIDC SSO, and real-time analytics.

10-30% recurring commissions
Enterprise

Feature Licensing System

Flexible licensing with Trial/Professional/Enterprise tiers. Three-level feature control (license ∩ tenant ∩ service), grace periods, and 40+ toggleable features.

4 licensing editions available
Automation

Lifecycle Events

Never miss a certificate expiration again. Automated renewal, 5-level alert system, bulk operations, and customer self-service portal.

70% operational overhead reduction
RFC 3161

Time Stamp Authority (TSA)

RFC 3161-compliant trusted timestamping for code signing, document integrity, and legal non-repudiation requirements.

NTP-synchronized time sources
Zero-Trust

SPIFFE/SVID Workload Identity

Cloud-native workload identity with X.509 and JWT SVIDs, auto-rotation, and native Kubernetes integration for zero-trust architecture.

Cloud-native security
Post-Quantum

Post-Quantum Cryptography (PQC)

NIST-approved ML-DSA (Dilithium) and ML-KEM (Kyber) algorithms for quantum-resistant certificates. Hybrid classical + PQC signatures with configurable modes.

Future-proof certificate infrastructure

Ready to experience the future of PKI?

Request a demo to see how KeyGrid PKI's advanced features can transform your certificate management.