Keyfactor Command Test Drive

Get hands-on with Keyfactor Command, the enterprise Certificate Lifecycle Management (CLM) platform for centralized visibility, policy control, and automation across certificates and keys.

The Command Test Drive is a free, cloud-hosted SaaS environment, provisioned for individual use, that allows you to evaluate core CLM capabilities without installing or configuring infrastructure.

After setup, you’ll work through guided use cases covering certificate discovery, enrollment, monitoring, and renewal to understand how Command manages certificates across their lifecycle.

This is a demonstration environment for evaluation and learning only and is not intended for production use.

👉 Start the Command Test Drive

Who the Command Test Drive Is For

The Command Test Drive is for teams who want a hands-on way to evaluate Keyfactor Command before going deeper. It’s ideal for security, PKI, and platform teams managing certificates across hybrid environments and looking to reduce risk, prevent outages, and replace manual processes with automation, at any scale.

If the Test Drive isn’t the right fit for your evaluation, we can provide a guided technical walkthrough tailored to your environment.
👉 Request a demo

What You’ll Explore in the Command Test Drive

The Command Test Drive guided use cases are designed to mirror real-world scenarios, helping you understand how Keyfactor Command replaces manual processes with automation, visibility, and control.

Certificate Authority Integration & Synchronization
See how Keyfactor Command integrates natively with EJBCA to synchronize certificates using incremental and full scans for near real-time visibility.
Enrollment Patterns & Policy Control
Standardize certificate issuance and enforce security policies, such as wildcard controls, key reuse, and RFC 2818 compliance, without CA template sprawl.
Certificate Enrollment & Inventory
Enroll certificates directly from Command and instantly view, search, and investigate them from a centralized inventory.
Universal Orchestrator Deployment & Approval
Deploy and approve the Universal Orchestrator on Windows or Linux to enable discovery, CA operations, template sync, and certificate store management.
Discovery of Network Certificates
Run SSL discovery scans across defined networks to automatically find, inventory, and assess certificates for risk.
Certificate Stores & Lifecycle Automation
Inventory certificates from IIS and file-based stores and monitor automated jobs through orchestrator status and history.
One-Click Renewal & Deployment
Renew IIS certificates with a single click and automatically deploy them back to the target system.
Visibility, Reporting & APIs
Track operational status, fetch logs, and access certificate and job data through the Command UI and REST APIs.

👉 Command Use Cases

Get Started with the Command Test Drive

⏱ Estimated setup time: 20–30 minutes

Sign up for the Command Test Drive: Go to the Signup form
Read more in Sign Up for Keyfactor Test Drives.
Complete the initial setup
Configure browser trust, prepare the Universal Orchestrators, and connect to EJBCA.
For details, see Initial Setup of Command Test Drive.
Start exploring Command
Follow step-by-step guides to experience discovery, monitoring, and lifecycle workflows.

👉 Sign up for the Command Test Drive

About the Test Drive Trial Period

Each Test Drive instance is available for 30 days
Environments are automatically decommissioned at the end of the trial
Do not store data you need to retain beyond the Test Drive period

👉 Learn more About the Keyfactor Test Drive Architecture.

Technical Requirements

Java 17 or later (required for the SignServer Client CLI)
Mozilla Firefox recommended for the best experience
- Most major browsers are supported
- Safari is not supported