Skip to content
Download free
The Skyrsoft mark: a faceted glass polyhedron in indigo, coral and copper, held in a copper lattice, with points of light travelling its edges.

Security software

Certificates that renew themselves. Kiosks that sign themselves in.

Skyrsoft CertOps issues, renews and deploys the certificates your servers and appliances use. Skyrsoft Autologon Manager brings kiosks and unattended machines back to a signed-in desktop after every reboot, without a plain-text password in the registry.

Both products have a free edition that never expires.

What it automates

The admin we take off your plate.

CertOps

Certificate lifetimes are about to get very short.

Public certificates are capped at 200 days now, 100 days from 15 March 2027 and 47 days from 15 March 2029, which is about eight renewals a year for every certificate. CertOps gets them over ACME from Let's Encrypt, ZeroSSL or Google Trust Services, which issue them without charge, and renews each one ahead of expiry.

Autologon Manager

The kiosk password sits in the registry in plain text.

Autologon Manager signs machines in through a native Windows credential provider, keeps the password encrypted and out of the registry, rotates it at the source, and audits every reset and rotation.

CertOps

A certificate expired and took a service down.

CertOps renews certificates ahead of expiry, 30 days out by default, and puts the new one where the old one was: renewed in place on hosts running the agent, or pushed to the server or appliance that uses it.

CertOps

Our certificates are all over the place.

Public certificates from three ACME CAs and private ones from your own internal CA, issued, renewed and audited from one console.

CertOps

The renewal script with a password in it.

Deployment scripts get copied to file shares and scheduled tasks, and they can end up holding an admin password. CertOps has built-in deployment for 19 target types, including IIS, AD FS, RD Gateway, SQL Server, FortiGate, Kemp LoadMaster, Sophos Firewall and Splunk. Their credentials are stored encrypted in CertOps, not in a script.

CertOps

The WinRM listener still points at last year's certificate.

WinRM over HTTPS is bound to one certificate thumbprint, so every renewal means re-binding it by hand. Tick one box on a device group and the CertOps agent sets up the HTTPS listener on port 5986 with the host's certificate, enables its firewall rule, and re-binds it each time the certificate renews.

The product line

Two products. One job: less admin.

Get started

Try it on your own estate.

Both free editions never expire, so you can run either one on real work before you buy.