EJBCA® SaaS

SaaS-delivered PKI, hosted and maintained by experts.

Get all the advantages of EJBCA Enterprise PKI,
without the headache of setting up and managing
the underlying infrastructure.

It's PKI, Simplified

We'll handle everything from HSMs to databases to Kubernetes clusters while you run your enterprise.

Icon Icon

Full access to your PKI

You get full access to the backend EJBCA Enterprise PKI, without the need to manage or operate the underlying infrastructure.

Icon Icon

Up and running in no time

Choose your preferred subscription and scale on-demand with cloud-native elasticity, availability, and multi-region support.

Icon Icon

Hosted, managed, and secure

Reduce the need to manage another critical in-house infrastructure component and get a guaranteed SLA to ensure reliability.

Deploy fast and scale on-demand, without the hassle.

Choose your deployment size and region, and we’ll make sure your PKI is deployed and managed according to best practices and with the highest levels of assurance. Upgrade at any time with the click of a button and EJBCA SaaS will auto-scale on-demand.

Simplify PKI management
and stay in control.

With EJBCA SaaS, you manage and control your PKI without the need for support involvement. You have self-service access to features from dashboards and access controls to logging and root activation and deactivation, even direct access to the backend EJBCA Enterprise.

Maintain high assurance
and flexlibility.

Get a dedicated root CA backed by your choice of HSM, including AWS Key Management Service (KMS), AWS CloudHSM, Azure Key Vault, and Azure Managed HSM (coming soon). Key ownership can be transferred at any time, if needed, to avoid vendor lock-in.

Key features

Dedicated offline root

All customers have a dedicated offline root CA, with full user activation and deactivation control. Azure or AWS accounts holding the keys can be given back to the customer.

Self-service portal

Monitor and control your PKI from the EJBCA SaaS portal or directly access the backend EJBCA Enterprise PKI for advanced configuration of CAs, profiles, and protocols.

Flexibility and performance

EJBCA SaaS is available in the US, EU, and AP regions, it is fully redundant, including database replication, and easily scales to hundreds of millions of certificates.

Air-tight infrastructure

Ensure that your PKI is always secure and available with continuous monitoring and updates backed by guaranteed SLAs and 24/7 support by a team of PKI professionals.

On-demand scalability

Pay-as-you-go pricing ensures that you only pay for what you use. Scale your PKI on-demand with the ability to automatically re-size or upgrade EJBCA SaaS at any time.

Easy integration

Integrate with your tools and applications via protocols and APIs, including ACME, SCEP, CMP, Microsoft Autoenrollment, Web Services, and REST API.

Find the right fit for your team

EJBCA SaaS is available in five different size models, ranging from XS, which is designed
for non-production environments, to L and XL for hyper-scale deployments.

*Details for L and XL are available upon request.

XS

SMB production, Enterprise Test/Lab environments

Guaranteed service level agreement (SLA)

99%

Certificate capacity

10 K

Certificate performance capacity

10 certificates/second

OCSP performance capacity

25 responses/second

Geographic availability

1 Region, 1 Availability Zone

XS

SMB production, Enterprise Test/Lab environments

Guaranteed service level agreement (SLA)

99%

Certificate capacity

10 K

Certificate performance capacity

10 certificates/second

OCSP performance capacity

25 responses/second

Geographic availability

1 Region, 1 Availability Zone

S

Small production workloads, Enterprise IT workloads

Guaranteed service level agreement (SLA)

99.95%

Certificate capacity

250 K

Certificate performance capacity

25 certificates/second

OCSP performance capacity

50 responses/second

Geographic availability

1 Region, 2 Availability Zones

S

Small production workloads, Enterprise IT workloads

Guaranteed service level agreement (SLA)

99.95%

Certificate capacity

250 K

Certificate performance capacity

25 certificates/second

OCSP performance capacity

50 responses/second

Geographic availability

1 Region, 2 Availability Zones

M

Typical production workloads, manufacturing, large Enterprise IT workloads

Guaranteed service level agreement (SLA)

99.95%

Certificate capacity

2.5 M

Certificate performance capacity

80 certificates/second

OCSP performance capacity

100 responses/second

Geographic availability

1 Region, 2 Availability Zones

M

Typical production workloads, manufacturing, large Enterprise IT workloads

Guaranteed service level agreement (SLA)

99.95%

Certificate capacity

2.5 M

Certificate performance capacity

80 certificates/second

OCSP performance capacity

100 responses/second

Geographic availability

1 Region, 2 Availability Zones

L

Available upon request

L

Available upon request

XL

Available upon request

XL

Available upon request

Ready to get started?

Simplify and scale your PKI in the cloud.
Get started with EJBCA SaaS in AWS or Azure today.