EJBCA® Cloud

A complete PKI software solution deployed directly from your cloud provider.

Run your own PKI in the cloud. EJBCA Cloud makes it easy to set up, configure, and manage your enterprise PKI in just a few clicks, directly from Azure or AWS.

Enterprise PKI, in the cloud

With EJBCA Cloud, you're up and running in just a few clicks with a fully configurable PKI instance.

Icon Icon

Fast, simple deployment

Get started faster than you thought possible with a complete, fully-customizable PKI instance in the cloud.

Icon Icon

PKI at cloud scale

Take advantage of cloud elasticity and availability to run a reliable and scalable PKI that adapts to changing demands.

Icon Icon

Simple, predictable billing

Leverage your existing AWS and Azure infrastructure spend with no long-term commitment or contract requirements.

Deploy fast and scale on-demand

Set up and scale your PKI quickly with a configuration wizard for step-by-step installation and several integrations with cloud-native infrastructure. Pay-as-you-go pricing ensures that you only pay for what you use, so you don’t break the budget.

Meet any use case with ease

EJBCA includes everything needed to issue and manage certificates, including Certificate Authorities (CA), Registration Authorities (RA), and Validation Authorities (VA). Integrate with any use case using built-in APIs and protocol-based automation.

It's your PKI, in your cloud

You retain full control over the configuration and maintenance of your PKI, with the ability to deploy in many available regions, including AWS GovCloud and Azure Government. Choose from several instance sizes to find the right fit for your use case.

Stay secure and compliant

EJBCA Cloud is Common Criteria certified, and CSfC approved. The PKI platform easily integrates with your choice of HSM, including AWS Key Management Service (KMS), AWS CloudHSM, Azure Key Vault, Azure Managed HSM, or an existing on-premise HSM.

Key features

Cloud-first deployment

Deploy your PKI instance from the Azure or AWS marketplace, backed by 8×5 or 24×7 expert support.

Multi-cloud, multi-region

Run your entire PKI hierarchy on a single instance or cluster nodes across multiple regions or cloud service providers.

Secure by design

Leverage a secure, open-source based PKI solution that offers complete transparency and time-tested reliability.

Secure key storage

Store keys in CloudHSM, AWS KMS, Azure Key Vault, in a PKCS11 connected HSM, or in the database (for demo).

Hybrid flexibility

Deploy an unlimited number of Root CAs and Subordinate CAs. Request cross-certificates and bridge certificates from other CAs.


Integrate with your tools and applications via ACME, SCEP, CMP, EST, Microsoft Autoenrollment, REST API, and plugins.

Ready to get started?

Experience PKI that scales without limits, integrates easily, and runs anywhere.
Get started with a free 30-day trial of EJBCA Cloud in Azure or AWS today.