EJBCA® Hardware Appliance

Everything you need to run enterprise PKI in a turnkey hardware appliance.

Deploy faster and reduce complexity with EJBCA Hardware Appliance, the easiest and most efficient way to run PKI in your datacenter or at the edge.

It's PKI in a Box

With EJBCA Hardware Appliance, you get the world's most widely used PKI solution,
packaged in a turnkey rack-mounted appliance with an integrated HSM.

Icon Icon

Complete PKI stack

Get all the components needed to successfully deploy your PKI, including an integrated FIPS 140-2 Level 3 Certified HSM.

Icon Icon

Turnkey deployment

Deploy fast and find the right fit with a turnkey PKI solution that comes in five different sized models and three HSM performance levels.

Icon Icon

High performance

Run efficiently and scale easily with reliable and high-performance hardware, essential for the operation of critical infrastructure.

EJBCA Enterprise Hardware Appliance

Simplify your PKI

There’s no need to stand up multiple servers, software, and HSM. With EJBCA Hardware Appliance, you can operate a full-blown PKI in a single instance and run multiple certificate authorities (CAs), registration authorities (RAs), and validation authorities (VAs).

Eliminate complexity

Reduce operational heavy lifting and maintenance with an easy-to-maintain rack-mounted appliance. Updates and upgrades are delivered as complete and tested software packages so that you can run smoothly without errors and downtime.

Meet any use case

EJBCA Hardware Appliance is the best PKI solution for mission-critical, on-premises deployments – suitable for managed services providers, Internet of Things (IoT) and industrial environments, and eIDAS (qualified) Trust Service Providers.

Integrate easily

PKI is the foundation of trust for many applications, such as device authentication, VPN, servers, cloud workloads, and more. EJBCA Appliance offers multiple integration interfaces to support your various tools and applications.

Key features

Resilient and reliable

EJBCA Appliance runs on enterprise-grade server components, including ECC-protected RAM memory, redundant performance SSD drives, and a redundant power supply.

High availability

Deliver high availability with just a few clicks. Built-in Master-Master database replication provides an easy way to run your PKI in a multi-node installation.

Easy to integrate

Integrate easily with your existing tools and applications via Microsoft Autoenrollment, SCEP, ACME, EST, CMP, Web Services API, and REST API.

Built-in HSM

Keep your cryptographic keys secure with an integrated FIPS 140-2 Level 3 Certified HSM, offering various performance levels depending on your needs.

Flexible deployment

Choose the right size for your business, from XS to XL, and meet any use case, including managed services, IoT deployments, and eIDAS (qualified) Trust Service Providers.

Simplified management

Seamlessly manage your hardware appliances from an intuitive web-based interface. Backup and update routines are simplified to reduce manual errors.

Find the right fit for your team

EJBCA Hardware Appliance is available in five different size models,
ranging from XS to L and XL for hyper-scale deployments.

XS

Ideal for an offline Root CA

Certificate Capacity

Up to 1 K

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Entry Level

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

CRL

XS

Ideal for an offline Root CA

Certificate Capacity

Up to 1 K

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Entry Level

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

CRL

S

Small production workloads

Certificate Capacity

Up to 1 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Entry Level

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

S

Small production workloads

Certificate Capacity

Up to 1 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Entry Level

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

M

Typical production workloads

Certificate Capacity

Up to 15 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Standard

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

M

Typical production workloads

Certificate Capacity

Up to 15 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Standard

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

L

Multiple use cases, large-scale deployments

Certificate Capacity

Up to 60 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

High Speed

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

L

Multiple use cases, large-scale deployments

Certificate Capacity

Up to 60 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

High Speed

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

XL

Extremely large PKI deployments

Certificate Capacity

Up to 160 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

High Speed

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

XL

Extremely large PKI deployments

Certificate Capacity

Up to 160 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

High Speed

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

Ready to get started?

Want to see how you can make your PKI simple to manage?
Talk to one of our experts about EJBCA Hardware Appliance.