A private PKI that behaves like a cloud service, not a server.

Certificates are everywhere in a Microsoft estate: Wi-Fi and VPN on every laptop, certificate-based sign-in to Entra ID, TLS on internal services, credentials for automation apps, keys for SSH access. The traditional answer — Active Directory Certificate Services on Windows servers you patch, back up and eventually migrate — does not fit a company whose identity, devices and workloads already live in the cloud.

Radius365 PKI moves the certificate authority itself into Azure. Root and issuing CAs are created from a portal in minutes, their private keys are generated inside HSM-protected Azure Key Vault and never leave it, and every issuance path that Microsoft tooling expects — Intune SCEP, ACME, Key Vault, the REST API — is built in. What used to be a project becomes a subscription on Azure Marketplace.

The service is operated from the European Union and hosted on Microsoft Azure in West Europe (EU) and, for customers who choose it, in the United States. It is deliberately small in surface and honest in what it claims: the numbers on this site are measured, the security posture is published, and what is not certified yet is said so.