Foxpass Cloud PKI

Issue, manage, and automate certificates with a cloud-hosted private certificate authority (CA). Secure network, devices, and applications with certificate-based authentication.

Fully Managed Private PKI. No Infrastructure to Maintain.

Foxpass Cloud PKI delivers a cloud-native private certificate authority that helps organizations secure network access, establish trusted identities, and deploy certificates without managing traditional PKI infrastructure.

• Secure Wi‑Fi and VPN access with certificate-based authentication.
• Build flexible private PKI for users, devices, applications, services, and infrastructure.
• Issue and deploy certificates through SCEP-based enrollment workflows, CSR-based issuance, and manual certificate workflows.

Choose the Right PKI for Your Needs

Foxpass Cloud PKI supports both turnkey network certificate deployments and broader Enterprise PKI use cases. Advanced RADIUS includes the PKI capabilities needed for EAP-TLS network authentication, while Enterprise PKI expands Foxpass into broader private certificate authority use cases. Integrations with Microsoft Entra ID, Google Workspace, Okta, and OneLogin help organizations align certificate management with their existing identity infrastructure, so certificates can be issued and managed using the systems they already rely on.

Advanced RADIUS PKI

Certificate authority and certificate workflows included with Foxpass Advanced RADIUS to support EAP‑TLS authentication for secure Wi‑Fi and VPN access.

• Secure Wi‑Fi and VPN authentication
• Certificate-based network access
• Included with Advanced RADIUS

Enterprise PKI

A flexible private certificate authority for organizations that need broader certificate use cases beyond network authentication.

• Root and intermediate CA hierarchies
• Configurable certificate profiles, including standard and custom Extended Key Usages (EKUs)
• Certificates for users, devices, services, applications, and infrastructure

Certificate Enrollment

Deploy certificates across managed devices using SCEP-based enrollment workflows.

• SCEP-based enrollment
• Integrates Intune, Jamf, Google Admin, Iru, Addigy, Workspace ONE, Mosyle, and other SCEP-capable solutions
• Supports both network certificates and Enterprise PKI

Secure Access with Certificates

SaaS Access Network Access Trusted Identities

Passwordless Authentication with Entra CBA

• Enable phishing-resistant certificate-based authentication for Microsoft 365, Salesforce, Workday, and other SaaS applications.
• Eliminate password-related attack vectors with certificate-based authentication.
• Support Microsoft Entra Conditional Access policies using trusted certificates.

Secure Wi‑ Fi and Network Authentication

• Enable EAP-TLS authentication for Wi‑Fi and VPN access.
• Deploy with Foxpass Cloud RADIUS or compatible RADIUS infrastructure including Cisco ISE, Aruba ClearPass, FreeRADIUS, and Windows NPS.
• Establish secure, certificate-based network access without shared credentials.

Trusted Identities Across Your Environment

• Issue certificates for users, devices, services, and infrastructure.
• Support device trust and zero-trust access initiatives with certificate-based identity.
• Secure applications, machine identities, and internal systems with certificate-based authentication.

Why Foxpass Cloud PKI

Managing certificates shouldn't require maintaining on-premises certificate authorities, stitching together complex PKI tooling, or troubleshooting preventable certificate issues.

Foxpass Cloud PKI delivers a fully managed, cloud-native certificate authority that simplifies enterprise certificate issuance, enrollment, and visibility while strengthening certificate-based trust across your organization.

FAQs

What is the difference between Advanced RADIUS PKI and Enterprise PKI?

Advanced RADIUS PKI includes the certificate authority and certificate workflows needed to support EAP-TLS authentication for secure Wi-Fi and VPN access. Enterprise PKI expands this into a more flexible private CA offering for broader certificate use cases beyond network authentication.

What are Extended Key Usages, or EKUs?

Extended Key Usages define what a certificate is allowed to be used for, such as client authentication, server authentication, email protection, code signing, or organization-specific purposes.

Does Foxpass Cloud PKI replace my on-premises CA?

Foxpass Cloud PKI can help organizations reduce or avoid traditional CA infrastructure for supported private certificate use cases. The right deployment model depends on your existing PKI architecture, trust requirements, and certificate use cases.

Does the BYOD Certificate Installer support Enterprise PKI?

The Foxpass BYOD Certificate Installer is intended for RADIUS/network certificate enrollment use cases, such as secure Wi-Fi access. It does not currently support general-purpose Enterprise PKI certificate installation.