Keytos Security and Carahsoft Technology Corp. have partnered to distribute passwordless identity and public key infrastructure (PKI) solutions to U.S. government agencies through Carahsoft’s public-sector procurement network.
Under the agreement, Carahsoft will serve as Keytos Security’s Master Government Aggregator, making the company’s passwordless authentication and certificate management tools available through NASA SEWP V, ITES-SW2, NASPO ValuePoint, TIPS, E&I Cooperative Services, and The Quilt contracts.
Keytos, founded by former Microsoft engineers, offers a suite of products centered on eliminating passwords and adopting certificate-based, phishing-resistant authentication. The core product, EZCA Cloud PKI, is a cloud-native certificate authority backed by FIPS 140-3 Level 3 hardware security modules that provides enterprise-grade certificate issuance and automated lifecycle management without requiring on-premise infrastructure.
“Government agencies face mounting pressure to eliminate passwords and adopt phishing-resistant Zero Trust architectures in line with Executive Order 14028 and CISA guidance,” said Igal Flegmann, Co-Founder and CEO of Keytos Security. “Carahsoft’s deep relationships across Federal, State and Local Government give us the reach to help agencies modernize their identity infrastructure quickly and cost-effectively.”
The Keytos product line includes EZCMS for smart card and security key onboarding with PIV-compliant credential provisioning; EZRADIUS for EAP-TLS network authentication using certificates rather than passwords; EZSSH for short-lived SSH certificates providing just-in-time access to servers and code repositories; and EZMonitor for continuous visibility across an agency’s certificate inventory to prevent outages from expired or misconfigured certificates.
All Keytos solutions are available across Azure commercial and government cloud environments. The company says its tools help agencies meet FedRAMP, Cybersecurity Maturity Model Certification (CMMC), and Executive Order 14028 requirements. Federal authorization requirements have driven growing demand for identity platforms that can operate within government cloud boundaries.
The partnership focuses on the Identity and Access Management segment of Carahsoft’s cybersecurity portfolio, which spans supply chain risk management, cloud security, zero trust, and network infrastructure.
Sources: Carahsoft
–
By the ID Tech Editorial Team
