EJBCA® Hardware Appliance

Powerful, flexible PKI as a
turnkey hardware appliance.

Deploy faster and reduce complexity with EJBCA Hardware Appliance, the easiest and most efficient way to run PKI in your datacenter or at the edge.

It's PKI in a Box

With EJBCA Hardware Appliance, you get the world's most widely used PKI solution,
packaged in a turnkey rack-mounted appliance with an integrated HSM.

Icon Icon

Complete PKI stack

Get all the components needed to successfully deploy your PKI, including an integrated FIPS 140-2 Level 3 Certified HSM.

Icon Icon

Turnkey solution

Deploy fast and find the right fit with a turnkey PKI solution that comes in five different sized models and three HSM performance levels.

Icon Icon

High performance

Run efficiently and scale easily with reliable and high-performance hardware, essential for the operation of critical infrastructure.

EJBCA Enterprise Hardware Appliance

Simplify your PKI

There’s no need to stand up multiple servers, software, and HSM. With EJBCA Hardware Appliance, you can operate a full-blown PKI in a single instance and run multiple certificate authorities (CAs), registration authorities (RAs), and validation authorities (VAs).

Eliminate complexity

Reduce operational heavy lifting and maintenance with an easy-to-maintain rack-mounted appliance. Updates and upgrades are delivered as complete and tested software packages so that you can run smoothly without errors and downtime.

Meet any use case

EJBCA Hardware Appliance is the best PKI solution for mission-critical, on-premises deployments – suitable for managed services providers, Internet of Things (IoT) and industrial environments, and eIDAS (qualified) Trust Service Providers.

Integrate easily

PKI is the foundation of trust for many applications, such as device authentication, VPN, servers, cloud workloads, and more. EJBCA Appliance offers multiple integration interfaces to support your various tools and applications.

Key features

Built-in HSM

Keep your cryptographic keys secure with an integrated FIPS 140-2 Level 3 Certified HSM, offering various performance levels depending on your needs.

High availability

Deliver high availability with just a few clicks. Built-in Master-Master database replication provides an easy way to run your PKI in a multi-node installation.

Easy to integrate

Integrate easily with your existing tools and use cases via Microsoft Autoenrollment, SCEP, ACME, EST, CMP, Web Services API, and REST API.

Resilient and reliable

EJBCA Appliance runs on enterprise-grade server components, including ECC-protected RAM memory, redundant performance SSD drives, and a redundant power supply.

Flexible deployment

Choose the right size for your business, from XS to XL, and meet any use case, including managed services, IoT deployments, and eIDAS (qualified) Trust Service Providers.

Simple maintenance

Manage your hardware appliances from an intuitive web-based interface. Backup and update routines are simplified to reduce manual errors.

Flexible deployment sizes

EJBCA Hardware Appliance is available in five different size models,
ranging from XS to L and XL for hyper-scale deployments.

XS

Ideal for an offline Root CA

Certificate Capacity

Up to 1 K

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Entry Level

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

CRL

XS

Ideal for an offline Root CA

Certificate Capacity

Up to 1 K

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Entry Level

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

CRL

S

Small production workloads

Certificate Capacity

Up to 1 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Entry Level

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

S

Small production workloads

Certificate Capacity

Up to 1 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Entry Level

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

M

Typical production workloads

Certificate Capacity

Up to 15 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Standard

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

M

Typical production workloads

Certificate Capacity

Up to 15 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

Standard

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

L

Multiple use cases, large-scale deployments

Certificate Capacity

Up to 60 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

High Speed

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

L

Multiple use cases, large-scale deployments

Certificate Capacity

Up to 60 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

High Speed

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

XL

Extremely large PKI deployments

Certificate Capacity

Up to 160 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

High Speed

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

XL

Extremely large PKI deployments

Certificate Capacity

Up to 160 M

Software Stack: EJBCA Enterprise & Secure Linux

FIPS 140-2 Level 3 HSM

HSM Performance

High Speed

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

Ready to get started?

Simplify and scale PKI in your datacenter. Contact us to learn more about EJBCA Hardware Appliance.