Replace AD CS

Transition from AD CS without network overhaul

Smallstep’s platform has backwards-compatible support for all of the legacy enrollment protocols and validation services supported by Active Directory Certificate services (AD CS) including SCEP, NDES, OCSP, and CRL. Don’t believe us? We also let you bring your existing root with you, so you can get up and running in minutes to see for yourself– with no risk.

Why people are moving from legacy AD CS PKI

Imagine relying on a piece of technology that hasn't been updated in years. It's like navigating a complex maze with an outdated map or using antique locks to secure a modern smart home — a recipe for inefficiency, and heightened risk.

Learn more >

You are only one step away

Remove the barriers preventing you from doing network security right, without sacrificing flexibility and scale.