CERTIFICATE & KEY LIFECYCLE MANAGEMENT · MANAGEENGINE
KEY MANAGER PLUS
by ManageEngine · Authorized via Stackingo
KC MARKET LEADER 2024
100k+ companies
EXPIRED CERTIFICATES CAUSE OUTAGES. STOP THAT.
Centralized SSL/TLS and SSH lifecycle management — discovery to renewal, on-prem or cloud. ManageEngine list pricing is the starting point.
Stackingo gets you further.
SSL/TLS certificate automation
Tamper-proof centralized key store
SSH key discovery + rotation
ServiceNow + CMDB integration
Vulnerability + weak cipher scanning
FIPS 140-2 · GDPR · PCI DSS
FOUR REASONS WHY BUYERS CHOOSE STACKINGO
MORE THAN A DISCOUNT — A SMARTER
WAY TO BUY SOFTWARE.
15%
Average Cost Savings
Below OEM list price, structured within authorized programmes.
+
Advisory Included
Module fit, sizing & tier optimisation reviewed before quote.
1doc
One Commercial
Multi-region, multi-vendor stack on a single agreement.
25%
Renewal defence
Every cycle re-priced — never auto-renewed at list.
BUYER INTELLIGENCE
WHAT YOU SHOULD KNOW BEFORE
BUYING.
Six things experienced IT buyers wish they'd known earlier — plus the analyst evidence behind the OEM's market position.
01
Node count defines the pricing ceiling
Key Manager Plus licenses by managed node count. Cost inflects at node tiers, not IT headcount — audit endpoint estate before sizing.
04
PAM360 integration changes the cost model
Orgs on PAM360 already get native SSH key management—running Key Manager Plus in parallel duplicates SSH licensing. Clarify the scope split.
02
Agent deployment precedes discovery
Cert discovery needs the agent on each system; agentless visibility covers only public certs, so SSH mapping depends on agent coverage.
05
CA-signed renewals need CA connector setup
Automated cert renewal depends on connections to your issuing CA (Microsoft CA, DigiCert). No connector means manual renewal, any tier.
03
On-prem and cloud are architecturally distinct
Key Manager Plus On-Prem and Cloud share a brand but differ in capability — validate automation features per deployment mode first.
06
CMDB mapping accuracy needs ServiceDesk Plus
Machine-to-server CMDB mapping is only as accurate as ServiceDesk Plus/ServiceNow records. Stale CMDB = misleading cert-host links - issue
GARTNER MAGIC QUADRANT
Privileged Access Management · 2025
Recognised Leader — Trusted Consistently
CHALLENGER
FORRESTER'S WAVE
Enterprise Service Management · Q2 24
NOT FEATURED
ABOUT MANAGEENGINE
ENTERPRISE IT MANAGEMENT BUILT FOR OPERATIONAL DEPTH — NOT JUST VISIBILITY.
ManageEngine, a Zoho division, develops IT management software trusted by 100,000+ organisations. Its portfolio spans ITSM, ITOM, security, and identity — deployable on-prem or via cloud.
Key Manager Plus is part of ManageEngine's security and identity portfolio, which includes PAM360, AD360, and Password Manager Pro — enabling unified privileged access and cryptographic control from one vendor relationship.
ManageEngine's on-premises heritage gives Key Manager Plus configuration depth rare in cloud-native CLM tools — including CA connector flexibility, custom alerting logic, and SSH key deployment scripting not available in SaaS-only competitors.
BEST FOR
Reg. Enterprise IT
500+ endpoints; on-prem/cloud certificate governance
STRONG FIT
Hybrid Infra Sec
On-prem servers, cloud, internal CAs; one control plane
REPLACES
Manual Sheet Track
Track cert expiry in Excel; cut outage + audit gaps
Key Capabilities
INCLUDED IN ALL PLANS
Certificate Expiry Prevention Engine
Monitors SSL/TLS certs; threshold expiry alerts, auto DCV validation and renewal.
SSH Key Lifecycle Controller
Discovers SSH keys, maps authorised-key links, enforces rotation; kills orphan keys.
Cryptographic Vulnerability Scanner
Flags certs with SHA-1, MD5, weak keys, self-signed roots into a priority fix queue.
Versioned Cryptographic Key Repository
Stores keys, certs in an encrypted, versioned vault; role-based, audit-logged access.
ITSM + CMDB Workflow Bridge
Pushes expiring-cert alerts to ServiceDesk or ServiceNow; maps certs to CMDB CIs.
Dual-Mode Deployment Architecture
Runs on-prem Windows/Linux or cloud SaaS with agent discovery; air-gapped or none.
MORE FROM MANAGEENGINE
THE MANAGEENGINE ECOSYSTEM.
Key Manager Plus sits within ManageEngine's integrated security suite. Bundle with PAM360, Password Manager Pro, or ADSelfService Plus on one Stackingo agreement and unlock cross-product partner pricing.
CROSS OEM COMPARISON
FIND THE BEST FIT — NOT JUST ONE
PRODUCT
Not the right fit? We’ve got other options. One RFQ unlocks multiple solutions, compared side by side—with zero vendor bias.
FREQUENTLY ASKED QUESTIONS
GOT QUESTIONS?
WE'VE GOT ANSWERS.
The questions every buyer asks before purchasing through Stackingo—pricing, licensing, what's included, and what to expect.
01
What's the minimum discount on ManageEngine Identity360 through Stackingo?
At minimum, Stackingo prices ManageEngine Identity360 5% under ManageEngine's list rate, within the bounds of ManageEngine's authorized discount programme.
💡
One pricing detail to note: Identity360 licenses Identity Lifecycle Management and MFA+SSO as separate modules, so deploying both without scoping each user population independently creates budget overruns that surface only at renewal.
02
How much comes off ManageEngine Identity360 list price?
Most enterprises land around 15% off ManageEngine list on ManageEngine Identity360, a figure set through the authorized reseller channel.
⚠️
Context that matters here: Identity360 licenses Identity Lifecycle Management and MFA+SSO as separate modules. Deploying both without scoping each user population independently creates budget overruns that surface only at renewal.
03
Why buy ManageEngine Identity360 through Stackingo?
Beyond the 5%-to-15% discount, Stackingo's value on ManageEngine Identity360 is commercial clarity — flagging the traps that inflate ManageEngine bills:
Pricing splits across two independent meters
Cloud-only architecture eliminates on-prem failover
Directory federation depth varies by source type
MFA coverage depends on endpoint agent deployment
Conditional access logic is parameter-bound, not code-driven
Free tier caps at 10 users — not a POC replacement
✓
One RFQ covers your whole shortlist, the quote returns structured and board-ready, and Stackingo guards each renewal before it lapses to list price.
04
Can Stackingo also implement ManageEngine Identity360?
Either way. Stackingo can simply licence ManageEngine Identity360, or take it all the way through deployment — from Universal Directory, Lifecycle Orchestration, Single Sign-On (SSO), Adaptive MFA, Conditional Access Policies, and Compliance Audit Trails.
🛠️
Choose Stackingo's own delivery team, a certified partner Stackingo coordinates, or let Stackingo gather and benchmark competing implementation bids — all consolidated into one proposal alongside the licence.
05
What does ManageEngine Identity360 do, and who is it for?
Cloud-hosted identity lifecycle management, SSO, and MFA from a single console.
Best fit · Mid-Market IT
Best fit · Compliance-Driven Enterprises
Typically replaces · Legacy Active Directory
🎯
Mid-Market IT — 200–5,000 users, hybrid directories, no dedicated IAM infrastructure team.
Compliance-Driven Enterprises — Regulated sectors needing auditable provisioning
Typically replaces Legacy Active Directory for teams moving off on-prem AD without adopting a full Okta/Azure stack.
GET YOUR CUSTOM QUOTE
STOP CALLING SALES.
GET A QUOTE IN 1 DAY.
Tell us your scope. We'll return a structured, comparable, partner-priced quote — built around your real agent count, term length and module mix.
Quote returned in 1 business day
Up to 15% below list pricing
Reviewed by a licensing expert — not a chatbot
Your requirements never shared without consent
Add other vendors to the same RFQ for free