EJBCA® Software Appliance

The most used PKI in the world, packaged as an easy-to-deploy software appliance.

Run anywhere, install within minutes, and simplify operations. EJBCA Software Appliance offers an easy and efficient way to deploy your enterprise PKI.

Next-generation PKI software

EJBCA Software Appliance redefines how enterprises deploy and manage PKI with a self-contained software package that runs on any virtual or cloud platform.

Icon Icon

Rapid deployment

Simplify deployment and install in minutes with a full-stack software package that includes everything needed to run your PKI.

Icon Icon

Ready to run, anywhere

Leverage a self-contained software package that runs on your virtualization or cloud platform and lets you plug into your existing HSM.

Icon Icon

Open and flexible

Support any use case from enterprise to IoT manufacturing with a highly extensible, multi-interace PKI

Reduce infrastructure complexity

Simplify and consolidate your PKI infrastructure. With EJBCA, you can run multiple certificate authorities (CAs), subordinate CAs, registration authorities (RAs), and OCSP/CRL revocation on a single virtual machine (VM).

Simplify maintenance and operations

Reduce operational heavy lifting and maintenance with an easy-to-maintain virtual appliance. Updates and upgrades are delivered as complete and tested software packages. Backup and restore routines are simplified to reduce manual errors.

Integrate easily

PKI is the foundation of trust for many applications, such as device authentication, VPN, servers, cloud workloads, and more. EJBCA Software Appliance offers multiple integration interfaces to support your various tools and applications.

Stay secure and compliant

Scale your PKI with confidence. EJBCA Software Appliance is built upon a Common Criteria certified and CSfC-approved PKI platform. Private keys can be protected using your existing HSM infrastructure, so you can rest easy that your root of trust is secure.

Key features

Quick deployment

Streamline PKI deployment with EJBCA delivered as an Open Virtual Appliance Image that is easy to configure and integrate with your infrastructure.

Full stack solution

Get the complete software stack, including EJBCA Enterprise, Open JDK, MariaDB, Wildfly, Industrial-grade Linux OS, and support for net-attached HSMs.

Intuitive UI

Easily configure and operate your PKI deployment with easy-to-navigate controls for installation and maintenance from an intuitive UI.

Multi-platform

Run EJBCA Software Appliance on your virtualization platform, including VMware ESXi, Microsoft Hyper-V, and Linux KVM.

Database support

Use the built-in MariaDB database or integrate with external databases, including MariaDB, PostgreSQL, MSSL, and Oracle.

Extensibility

Integrate with your tools and applications via ACME, SCEP, CMP, EST, Microsoft Autoenrollment, REST API, and plugins.

Find the right fit for your team

EJBCA Hardware Appliance is available in five different size models,
ranging from XS to L and XL for hyper-scale deployments.

XS

Ideal for an offline Root CA

Certificate Capacity

Up to 1 K

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

CRL

XS

Ideal for an offline Root CA

Certificate Capacity

Up to 1 K

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

CRL

S

Small production workloads

Certificate Capacity

Up to 1 M

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

S

Small production workloads

Certificate Capacity

Up to 1 M

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

M

Typical production workloads

Certificate Capacity

Up to 15 M

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

M

Typical production workloads

Certificate Capacity

Up to 15 M

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

L

Multiple use cases, large-scale deployments

Certificate Capacity

Up to 60 M

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

L

Multiple use cases, large-scale deployments

Certificate Capacity

Up to 60 M

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

XL

Extremely large PKI deployments

Certificate Capacity

Up to 160 M

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

XL

Extremely large PKI deployments

Certificate Capacity

Up to 160 M

Software Stack: EJBCA Enterprise & Secure Linux

External HSM Support

Protocols: SCEP, CMP, EST, ACME

REST & WebServices API

Certificate Validation (CRL/OCSP)

Ready to get started?

Experience PKI that scales without limits, integrates easily, and runs anywhere.
Get started with a free 30-day trial of EJBCA Cloud in Azure or AWS today.