Choose your deployment size and region, and we’ll make sure your PKI is deployed and managed according to best practices and with the highest levels of assurance. Upgrade at any time with the click of a button and EJBCA SaaS will auto-scale on-demand.
SaaS-delivered PKI, managed by experts.
Get all the advantages of EJBCA Enterprise PKI,
without the headache of setting up and managing
the underlying infrastructure.

It's PKI, Simplified
We'll handle everything from HSMs to databases to Kubernetes clusters while you run your enterprise.


Full access to your PKI
You get full access to the backend EJBCA Enterprise PKI, without the need to manage or operate the underlying infrastructure.


Up and running in no time
Choose your preferred subscription and scale on-demand with cloud-native elasticity, availability, and multi-region support.


Hosted, managed, and secure
Reduce the need to manage another critical in-house infrastructure component and get a guaranteed SLA to ensure reliability.
Deploy fast and scale on-demand, without the hassle.


Simplify PKI management
and stay in control.
With EJBCA SaaS, users manage and control their PKI without the need for support involvement. Users have self-service access to features including dashboards, security access configurations, logging configurations, root activation and deactivation, and even direct access to the backend EJBCA Enterprise PKI.
Maintain high assurance
and flexlibility.
Get a dedicated root CA backed by your choice of HSM, including AWS Key Management Service (KMS), AWS CloudHSM, Azure Key Vault, and Azure Managed HSM (coming soon). Key ownership can be transferred at any time, if needed, to avoid vendor lock-in.

Key features
Dedicated offline root
All customers have a dedicated offline root CA, with full user activation and deactivation control. The Azure or AWS accounts holding the keys can be given back to the customer.
Self-service portal
Monitor and control your PKI from the EJBCA SaaS portal or directly access the backend EJBCA Enterprise PKI for advanced configuration of CAs, profiles, and protocols.
Flexibility and performance
EJBCA SaaS is available in the US, EU, and AP regions, it is fully redundant, including database replication, and easily scales to hundreds of millions of certificates.
Air-tight infrastructure
Ensure that your PKI is always secure and available with continuous monitoring and updates backed by guaranteed SLAs and 24/7 support by a team of PKI professionals.
On-demand scalability
Pay-as-you-go pricing ensures that you only pay for what you use. Scale your PKI on-demand with the ability to automatically re-size or upgrade EJBCA SaaS at any time.
Easy integration
Integrate with your tools and applications via protocols and APIs, including ACME, SCEP, CMP, Microsoft Autoenrollment, Web Services, and REST API.
Flexible deployment sizes
EJBCA SaaS is available in five different size models, ranging from XS, which is designed
for non-production environments, to L and XL for hyper-scale deployments.
*Details for L and XL are available upon request.
XS
Non-production (PoC/Lab/Dev/Test)
Guaranteed service level agreement (SLA)
Certificate capacity
Certificate performance capacity
OCSP performance capacity
Geographic availability
XS
Non-production (PoC/Lab/Dev/Test)
Guaranteed service level agreement (SLA)
Certificate capacity
Certificate performance capacity
OCSP performance capacity
Geographic availability
S
Small production workloads, Corporate IT workloads
Guaranteed service level agreement (SLA)
Certificate capacity
Certificate performance capacity
OCSP performance capacity
Geographic availability
S
Small production workloads, Corporate IT workloads
Guaranteed service level agreement (SLA)
Certificate capacity
Certificate performance capacity
OCSP performance capacity
Geographic availability
M
Typical production workloads, manufacturing, large Corporate IT
Guaranteed service level agreement (SLA)
Certificate capacity
Certificate performance capacity
OCSP performance capacity
Geographic availability
M
Typical production workloads, manufacturing, large Corporate IT
Guaranteed service level agreement (SLA)
Certificate capacity
Certificate performance capacity
OCSP performance capacity
Geographic availability
L
Available upon request
L
Available upon request
XL
Available upon request
XL
Available upon request
Ready to get started?
Simplify and scale your PKI in the cloud. Get started with EJBCA SaaS in AWS or Azure today.