Replace AD CS
Transition from AD CS without network overhaul
Smallstep’s platform has backwards-compatible support for all of the legacy enrollment protocols and validation services supported by Active Directory Certificate services (AD CS) including SCEP, NDES, OCSP, and CRL. Don’t believe us? We also let you bring your existing root with you, so you can get up and running in minutes to see for yourself– with no risk.
Try in Jamf
Try in Intune
Why people are moving from legacy AD CS PKI
Imagine relying on a piece of technology that hasn't been updated in years. It's like navigating a complex maze with an outdated map or using antique locks to secure a modern smart home — a recipe for inefficiency, and heightened risk.
Learn more >
You are only one step away
Remove the barriers preventing you from doing network security right, without sacrificing flexibility and scale.