About
OverviewWhat is AKARO?
AKARO gives administrators a clear, actionable picture of their ADCS environment. It enumerates certification authorities, validates templates, cross-checks enrollment agents, audits CDP and AIA paths, and produces exportable reports — tasks that otherwise require piecing together output from certutil, PowerShell, and the MMC snap-in.
Built for PKI engineers who need answers fast: whether you are troubleshooting a broken enrollment, preparing for a CA rebuild, or assessing readiness for post-quantum cryptography migration, AKARO consolidates the discovery and reporting work so you can focus on decisions rather than data collection.
CA Health Audit
Validate CA status, service state, CRL freshness, and key usage flags across all detected authorities.
Template Analysis
Enumerate published templates, check enrollment permissions, key usage, and CSP/provider compatibility.
Policy Validation
Confirm CDP, AIA, and OCSP extensions are reachable and correctly configured in issued certificates.
Health Reports
Generate exportable PKI health reports with findings, risk ratings, and remediation guidance.
Enrollment Diagnostics
Test and diagnose certificate enrollment flows, identify permission gaps, and surface delegation issues.
Multi-CA Support
Manage root, subordinate, and standalone CAs from a single view. Cross-forest discovery supported.
Self-Updating
Configurable update channels with SHA-256 verified delivery. Supports air-gapped environments via UNC paths.
PQC Readiness Check
Assess algorithm inventory and flag RSA/ECC configurations that will need migration ahead of post-quantum timelines.
PIN-Protected Settings
Sensitive configuration gated behind a PIN. Suitable for shared workstations and multi-admin environments.
Download
Latest ReleaseInstaller
Loading…
SystemRequirements
| OS | Windows 10 / Windows Server 2016 or later (64-bit) |
| Runtime | Self-contained — no .NET installation required |
| Permissions | Domain user with read access to ADCS objects; local admin for service interaction |
| Network | LDAP access to domain controllers; DCOM to target CA servers |
| Air-gapped | Fully supported; update channel can point to UNC path or internal web server |
Silent / Scripted Install
# Download and install silently (PowerShell)
$installer = "$env:TEMP\PIXA_AKAROSetup.exe"
Invoke-WebRequest -Uri "https://github.com/patxavier/AKARO/releases/latest/download/PIXA_AKAROSetup.exe" -OutFile $installer
Start-Process $installer -ArgumentList '/S' -Wait