Keyfactor:
Engineered for Impact

Spring 2026 EJBCA helps teams move toward post-quantum readiness while making PKI easier to deploy, scale, and maintain – so you can strengthen trust, meet compliance needs, and keep critical certificate operations running smoothly.

• Composite certificates to combine classical + quantum-safe algorithms for crypto agility
• ACME device attestation for hardware-backed device identity during enrollment
• Expanded HSM support + more automation and streamlined appliance updates

Spring 2026 Command reduces the day-to-day overhead of certificate operations while improving control as CA policies and validation expectations evolve. The latest updates help prevent disruptions, simplify migrations, and keep automation consistent at scale.

• DNS-based domain validation via REST Gateway DNS provider support
• Chain-building + trusted root store controls for safer CA change and migration scenarios
• One workflow can be applied to multiple triggers

Spring 2026 AgileSec expands visibility into where cryptography lives and how it’s being used, so teams can prioritize remediation, support shorter lifecycles, and plan post-quantum transitions with higher-confidence data.

• Expanded sensors/connectors (e.g., MS SQL Server, CBOM, CrowdStrike and more)
• Deeper Command integration with enriched context (network location, cipher usage, PQ capability)
• SaaS availability + customer portal for faster rollout and simpler management

Spring 2026 Signing updates protect long-term signature integrity while making quantum-ready signing easier to adopt, so you can reduce risk, leverage existing HSM investments, and shorten time-to-value.

• Composite certificates for timestamping to preserve long-term validity
• Expanded PQC support via PKCS#11 for hardware-backed quantum-resistant signing
• Managed Signum + SignServer SaaS offering to reduce operational overhead