
Security software
Certificates that renew themselves.
Kiosks that sign themselves in.
Skyrsoft CertOps issues, renews and deploys the certificates your servers and appliances use. Skyrsoft Autologon Manager brings kiosks and unattended machines back to a signed-in desktop after every reboot, without a plain-text password in the registry.
Both products have a free edition that never expires.
What it automates
The admin we take off your plate.
Certificate lifetimes are about to get very short.
Public certificates are capped at 200 days now, 100 days from 15 March 2027 and 47 days from 15 March 2029, which is about eight renewals a year for every certificate. CertOps gets them over ACME from Let's Encrypt, ZeroSSL or Google Trust Services, which issue them without charge, and renews each one ahead of expiry.
The kiosk password sits in the registry in plain text.
Autologon Manager signs machines in through a native Windows credential provider, keeps the password encrypted and out of the registry, rotates it at the source, and audits every reset and rotation.
A certificate expired and took a service down.
CertOps renews certificates ahead of expiry, 30 days out by default, and puts the new one where the old one was: renewed in place on hosts running the agent, or pushed to the server or appliance that uses it.
Our certificates are all over the place.
Public certificates from three ACME CAs and private ones from your own internal CA, issued, renewed and audited from one console.
The renewal script with a password in it.
Deployment scripts get copied to file shares and scheduled tasks, and they can end up holding an admin password. CertOps has built-in deployment for 19 target types, including IIS, AD FS, RD Gateway, SQL Server, FortiGate, Kemp LoadMaster, Sophos Firewall and Splunk. Their credentials are stored encrypted in CertOps, not in a script.
The WinRM listener still points at last year's certificate.
WinRM over HTTPS is bound to one certificate thumbprint, so every renewal means re-binding it by hand. Tick one box on a device group and the CertOps agent sets up the HTTPS listener on port 5986 with the host's certificate, enables its firewall rule, and re-binds it each time the certificate renews.
The product line
Two products. One job: less admin.
Certificate lifecycle management
Skyrsoft CertOps
Your own certificate authority, running on your own server, issuing to every device you have rather than only the domain-joined ones. Agents cover Windows and macOS; SCEP, EST and a REST API cover everything else. Public certificates from Let's Encrypt, ZeroSSL or Google Trust Services, approval rules, a self-service portal and script signing all live in the same place.
Free: 10 certificates, 3 targets · Pro from $345 a year
Explore CertOpsWindows auto-logon management
Skyrsoft Autologon Manager
Kiosks and unattended machines come back to a signed-in desktop after every reboot, and the password never sits on the box in plain text. The credential lives encrypted on a server you run, travels over mutual TLS, and rotates on a schedule you can audit.
Free: 5 agent seats · Pro from $220 a year
Explore Autologon ManagerGet started
Try it on your own estate.
Both free editions never expire, so you can run either one on real work before you buy.