Microsoft Cloud PKI
Microsoft Cloud PKI: A focused Cloud PKI service for automating device certificates through Microsoft Intune. Ranked #16 of 31 in Certificate Management Software by our editors (6.0/10); pricing: From $2/user/mo (annual); best for intune-managed device certificate deployments.
At a glance
- Editor score6.0 / 10
- PricingFrom $2/user/mo (annual)
- Best forIntune-managed device certificate deployments
- Free planNo
- Facts checked20 Sep 2026
Where it wins
- Automates issuance, delivery, renewal, and revocation
- Supports Windows, macOS, iOS, and Android devices
- Integrates with Intune and external private CAs
Where it doesn't
- Requires Microsoft Intune Plan 1 or Plan 2
- No free plan is available
- Focused on device mTLS rather than broader certificate use cases
Our verdict on Microsoft Cloud PKI
Microsoft Cloud PKI is a cloud-based public key infrastructure service for organizations managing certificates on Microsoft Intune-enrolled devices. It supports root and issuing certification authorities, SCEP-based certificate issuance, certificate monitoring, reporting, renewal, and revocation. Its intended audience is IT teams deploying certificate-based authentication for Wi-Fi and VPN access across Windows, macOS, iOS/iPadOS, and Android devices.
The published plan costs $2 USD per user per month with annual billing. The Microsoft Cloud PKI plan includes automated certificate lifecycle management, plus certificate issuance, delivery, and revocation. Microsoft Cloud PKI requires Microsoft Intune Plan 1 or Plan 2, and the service has no free plan. Its ecosystem fit is strongest for organizations already using Microsoft Intune and Microsoft Entra ID. It can also work with Active Directory Certificate Services and external private certificate authorities, including a model where an issuing CA is anchored to an external private CA.
Its standout capability is device-focused certificate automation: administrators can issue certificates through SCEP profiles, deploy them automatically to Intune-managed devices, renew and revoke end-entity certificates, and monitor active, expired, and revoked certificates through a reporting dashboard. That makes it a suitable choice for Microsoft-centered device fleets that need Wi-Fi or VPN authentication and managed mTLS certificates. Organizations seeking certificate management beyond device authentication, or without Microsoft Intune, should consider a broader alternative.
Microsoft Cloud PKI pricing
All 1 Microsoft Cloud PKI plans and prices →
Microsoft Cloud PKI fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Certificate discovery | Not verified |
| Automatic renewal | Yes |
| Deployment automation | Yes |
| Revocation workflows | Yes |
| Certificate types | Mtls |
| CA integrations | Yes |
| Deployment | Cloud |
| Platforms | Windows, macOS, iOS, Android |
| Support | Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 4 integrations: Microsoft Intune, Microsoft Entra ID, Active Directory Certificate Services, external private certificate authorities |
| Pricing | From $2/user/mo (annual) (source) |
| Website | learn.microsoft.com |
| Facts checked | 20 Sep 2026 |
Microsoft Cloud PKI integrations
Microsoft Cloud PKI lists 4 integrations on its own site.
- Microsoft Intune
- Microsoft Entra ID
- Active Directory Certificate Services
- external private certificate authorities
Alternatives to Microsoft Cloud PKI
- DigiCert Trust Lifecycle ManagerA broad certificate governance platform for hybrid infrastructure and enterprise PKI.9.4
- ManageEngine Key Manager PlusBroad certificate discovery and automation with flexible licensing and a five-key free edition.8.4
- DigiCert ONEFull certificate lifecycle control for large organizations managing diverse trust environments.8.2
See all Microsoft Cloud PKI alternatives →
Also listed in
Used Microsoft Cloud PKI? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Microsoft Cloud PKI for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Microsoft Cloud PKI is listed in our Certificate Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/microsoft-cloud-pki/"><img src="https://www.itechguides.com/best/badge/microsoft-cloud-pki.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Guides on certificate management software
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update