EJBCA

Open source

Open-source certificate authority and PKI software for issuing and managing digital certificates.

by KeyfactorOfficial site ↗Source code ↗

Pricing: free, custom
Free tier: true
License: open-source
Open source: Yes

Editorial review

EJBCA has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://docs.keyfactor.com/ejbca/latest/tutorials-and-guidesVerified
Tags(open-source;cloud-native): PKI, certificate authority, digital identity, IoT security, DevOpsVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): self-hosted, SaaS, managed-cloud, applianceVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
Free trial(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): open-sourceVerified
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): free, customVerified
Source repository(HTTPS URL): https://github.com/Keyfactor/ejbca-ceVerified
SPDX license IDs(Apache-2.0;MIT): LGPL-2.1-or-laterVerification pending
Trial length(14): 30Verified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): X.509 certificate issuance and management (Certificate Authority), Registration Authority (RA) module, Validation Authority (VA) module, OCSP and CRL, HSM / Crypto Token support, Certificate issuance for containers with CertManager, Istio, and CSR APIVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending

Security · Privacy · Compliance

Security certifications(SOC 2 Type II;ISO 27001): Common CriteriaVerified

Support · Docs · Services

Support channels(email;ticket;chat;phone;community): GitHub Discussions, professional support with SLA, product documentationVerified

Audience · Use · Case

Best for(Neutral editorial summary): Teams issuing TLS/mTLS, IoT, and industrial device certificates that want open-source PKI with optional enterprise supportVerification pending
Company-size fit(individual;SMB;mid-market;enterprise): individual, SMB, mid-market, enterpriseVerification pending
Primary use cases(build;monitor;automate): Issue TLS and mTLS certificates, Digital identities for IoT products, Secure device identity in industrial cybersecurity, Quantum-safe cryptography PKI, Certificate issuance for DevOps workflowsVerification pending
Skill level(beginner;intermediate;advanced;specialist): specialistVerification pending

Lifecycle · Versioning

Current version(1.12.3): 9.6Verified
Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerification pending

Vendor · Maintainer

Founded year(2012): 2001Verified
Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.