Simplify and consolidate your PKI infrastructure. With EJBCA, you can run multiple certificate authorities (CAs), subordinate CAs, registration authorities (RAs), and OCSP/CRL revocation on a single virtual machine (VM).
EJBCA® Software Appliance
The most used PKI in the world, packaged as an easy-to-deploy software appliance.
Run anywhere, install within minutes, and simplify operations. EJBCA Software Appliance offers an easy and efficient way to deploy your enterprise PKI.
Next-generation PKI software
EJBCA Software Appliance redefines how enterprises deploy and manage PKI with a self-contained software package that runs on any virtual or cloud platform.
Rapid deployment
Simplify deployment and install in minutes with a full-stack software package that includes everything needed to run your PKI.
Ready to run, anywhere
Leverage a self-contained software package that runs on your virtualization or cloud platform and lets you plug into your existing HSM.
Open and flexible
Support any use case from enterprise to IoT manufacturing with a highly extensible, multi-interace PKI
Reduce infrastructure complexity
Simplify maintenance and operations
Reduce operational heavy lifting and maintenance with an easy-to-maintain virtual appliance. Updates and upgrades are delivered as complete and tested software packages. Backup and restore routines are simplified to reduce manual errors.
Integrate easily
PKI is the foundation of trust for many applications, such as device authentication, VPN, servers, cloud workloads, and more. EJBCA Software Appliance offers multiple integration interfaces to support your various tools and applications.
Stay secure and compliant
Scale your PKI with confidence. EJBCA Software Appliance is built upon a Common Criteria certified and CSfC-approved PKI platform. Private keys can be protected using your existing HSM infrastructure, so you can rest easy that your root of trust is secure.
Key features
Quick deployment
Streamline PKI deployment with EJBCA delivered as an Open Virtual Appliance Image that is easy to configure and integrate with your infrastructure.
Full stack solution
Get the complete software stack, including EJBCA Enterprise, Open JDK, MariaDB, Wildfly, Industrial-grade Linux OS, and support for net-attached HSMs.
Intuitive UI
Easily configure and operate your PKI deployment with easy-to-navigate controls for installation and maintenance from an intuitive UI.
Multi-platform
Run EJBCA Software Appliance on your virtualization platform, including VMware ESXi, Microsoft Hyper-V, and Linux KVM.
Database support
Use the built-in MariaDB database or integrate with external databases, including MariaDB, PostgreSQL, MSSL, and Oracle.
Extensibility
Integrate with your tools and applications via ACME, SCEP, CMP, EST, Microsoft Autoenrollment, REST API, and plugins.
Find the right fit for your team
EJBCA Hardware Appliance is available in five different size models,
ranging from XS to L and XL for hyper-scale deployments.
XS
Ideal for an offline Root CA
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
XS
Ideal for an offline Root CA
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
S
Small production workloads
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
S
Small production workloads
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
M
Typical production workloads
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
M
Typical production workloads
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
L
Multiple use cases, large-scale deployments
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
L
Multiple use cases, large-scale deployments
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
XL
Extremely large PKI deployments
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
XL
Extremely large PKI deployments
Certificate Capacity
Software Stack: EJBCA Enterprise & Secure Linux
External HSM Support
Protocols: SCEP, CMP, EST, ACME
REST & WebServices API
Certificate Validation (CRL/OCSP)
Latest Resources
Ready to get started?
Experience PKI that scales without limits, integrates easily, and runs anywhere.
Get started with a free 30-day trial of EJBCA Cloud in Azure or AWS today.