# Generate reports across every certificate, SSH key, and secret

Compliance reviews and operational audits rely on accurate, current data about your machine identities. Pulling this information together manually across public CAs, internal CAs, cloud platforms, and SSH environments can be a drain on your team's time.

Key Manager Plus comes with a comprehensive library of prebuilt reports covering every certificate, SSH key, and secret in your environment. Generate reports on demand or schedule them to be automatically delivered and get the exact data you need for compliance reports, audits, or day-to-day operations.

## Key Manager Plus can help with:

- CA-specific reports for public, private, and Microsoft CAs.
- Instant reports for Azure Key Vault and application secrets.
- SSH key inventory, rotation, and access reports.
- Vulnerability reports for SHA-1 and weak ciphers.
- Scheduled, periodic delivery in PDF, CSV, or via email.

## Cover every certificate in your inventory

With Key Manager Plus, get prebuilt reports across your complete certificate inventory, from SSL certificates and CSRs to wildcard, deployed, and expiring certificates. Get dedicated reports to track SHA-1 certificates, weak ciphers, certificate mismatches between Key Manager Plus and deployed servers, and the status of every auto-renewal attempt across your CAs.

![ ](https://cdn.manageengine.com/sites/meweb/images/key-manager/features/machine-identity-reports-1.png)

## Pull CA-specific reports in a click

Reports are available out of the box for every major public CA Key Manager Plus integrates with, including Sectigo, DigiCert, Let's Encrypt, and GlobalSign, cloud platforms, and any CA that supports the ACME protocol. Reports for Microsoft CA cover issued, signed, revoked, and deleted certificates, and reports for your private CAs cover internally issued certificates and their intermediates.

![ ](https://cdn.manageengine.com/sites/meweb/images/key-manager/features/machine-identity-reports-2.png)

## Track every secret in your environment

Get dedicated reports on all secrets managed through Key Manager Plus, including Azure Key Vault secrets, Azure application secrets, Kubernetes TLS secrets, and more. Track secret usage across multiple Azure subscriptions, monitor rotation status, and surface orphaned credentials before they become a risk.

![ ](https://cdn.manageengine.com/sites/meweb/images/key-manager/features/machine-identity-reports-3.png)

## Get SSH inventory, rotation, and access reports

SSH-specific reports cover the full operational picture, including discovered SSH resources, landing servers, private keys, public key deployments, key rotations, server access, and SSH user accounts. Additionally, the All Keys and Key Vault reports provide a single view of every SSH key, PGP key, and other digital secrets managed or stored in Key Manager Plus.

![ ](https://cdn.manageengine.com/sites/meweb/images/key-manager/features/machine-identity-reports-4.png)

## Schedule reports in the format you need

Every report can be exported as a PDF, CSV, or emailed to recipients on demand. Schedule recurring delivery on an hourly, daily, weekly, or monthly basis to keep auditors, stakeholders, and security teams aligned.

![ ](https://cdn.manageengine.com/sites/meweb/images/key-manager/features/machine-identity-reports-5.png)

## Do more with Key Manager Plus

Beyond comprehensive reporting, Key Manager Plus delivers complete life cycle management for all your SSL/TLS certificates, SSH keys, and secrets from a single, unified platform.