HID HydrantID Managed PKI-as-a-Service

HydrantID’s cloud-based private PKI-as-a-service enables organizations to quickly create and deploy their own enterprise private PKI trust hierarchies to secure their networks, IT systems and IoT devices.

Identity Lifecycle Management

PKI Made Simple

As a foundational security technology implemented for decades, Private Key Infrastructure (PKI) is already deployed in most enterprise IT infrastructures. However, the ongoing management and maintenance of an in-house PKI deployment can be difficult and require dedicated, skilled staff—adding to overall security costs.

  • Simplify operations by outsourcing the complexity of running a best-in-class PKI without losing control of trusted assets
  • Obtain PKI (Trust) infrastructure that aligns with industry best practices and leverages highly-secure and audited technical facilities with the expertise to deliver it all
  • Support Zero Trust with secure authentication and communications between machines, devices, IoT and virtual servers
  • Reduce cost and compliance risk related to internal PKI and CA management
  • Adapt to changing needs with complete flexibility to add new services at any time
  • Deploy scalable PKI services rapidly in weeks, not months
Building Blocks

Less Operational Complexity and Cost

HID HydrantID Managed PKI eliminates operational complexity and dramatically reduces costs related to operating and deploying an organizational private PKI.

Choose from a simple preconfigured service for a Dedicated Issuing Certificate Authority (CA) or a completely customized Private Root PKI Service that:

  • Provides unique trust anchor at the issuing CA level and management of all CAs
  • Offers full turnkey service including private root key generation ceremony and custody management of all off-line key material
  • Manages all certificate validation systems


Your CorpRoot CA(Offline) Your CorpIssuing CA 1DeviceCertificatesServerCertificatesx.509 SVIDCertificatesMS AutoenrollCertificatesYour CorpIssuing CA 2Your CorpIssuing CA 3Your CorpIssuing CA 4

How it Works

Complete Control With Account Certificate Management

HydrantID Account Certificate Management (ACM) offers complete control, delegated administration, on-demand auditing and reporting. Automate and scale certificate provisioning for every system and device.
  • Web-based certificate management portal supports both private and trusted certificate services
  • Automation support for Microsoft Autoenrollment and other standards-based certificate management protocols such as SCEP, EST, and ACME as well as API support
  • Trusted certificate services including OV, EV, Wildcard and SAN certificates as well as client certificates such as S/MIME and code signing

Download the datasheet >>

Key Benefits

One Simple Annual Subscription Fee

Say so long to hidden costs or surprises with predictable, all-inclusive pricing. Get what you need, when you need it.


Eliminate management of complex certificate-based pricing or credits

Add new services at any time

Tailor the subscription to your specific requirements

API and Third-Party Application Support

HID HydrantID is already integrated into key management solutions, such as Venafi. And, our RESTful certificate management API is easy to incorporate into custom or third-party applications.