EJBCA Community - Open-source PKI software

One of the world's most popular PKIs, EJBCA gives you time-proven flexibility and robustness. Unlike other open-source certificate authority and PKI solutions, EJBCA is platform-independent and can be scaled up and down to match your needs.

About EJBCA

Download EJBCA

Install EJBCA Community from preferred source: Docker Hub, GitHub, or SourceForge.

Download EJBCA

Join the Discussion

Browse existing discussions, ask your questions, and learn from the user community.

Go to GitHub Discussions

Try EJBCA Enterprise

Get a free 30-day trial of EJBCA Enterprise from your favorite cloud provider.

Try Enterprise

You can get started in just a few minutes

You can find all EJBCA documentation online, including how-to guides and tutorial videos.

23

Years of history

127

Contributors

3000

Downloads per month

Documentation

Docker Hub

GitHub

EJBCA in Action

With EJBCA Community you'll get the feel for a platform that can grow with your use cases and business needs. You can use EJBCA to secure industrial environments, IoT devices, national eIDs, DevOps workflows, internal PKIs, and more.

Get started with EJBCA PKI

Start using EJBCA PKI now to quickly issue certificates for your apps and devices.

Learn more

Automation and EJBCA Deployment

Automate EJBCA deployments with Helm Charts and Ansible playbooks.

Learn more

Issue certificates for Container environments

Certificates for your containerized apps with EJBCA PKI, leveraging CertManager, Istio, and CSR API as vital security tools.

Learn more

Try Quantum-safe Cryptography PKI

Embrace Quantum-safe cryptography today for future readiness.

Learn more

Digital Identities for IoT products

For IoT products and solutions, choose EJBCA PKI over self-signed certificates and OpenSSL.

Learn more

Issue TLS and mTLS certificates

PKI solution for fast and secure TLS certificate issuance during product prototyping and testing.

Learn more

Industrial Cybersecurity and Birth Identities

Try EJBCA for testing and prototyping IEEE 802.1 AR birth identities, and building a secure supply chain infrastructure.

Learn more

Need SLAs, additional security features, or to deploy EJBCA as SaaS/Cloud/Appliance? EJBCA Enterprise is for you.

Try EJBCA Enterprise

Get inspired

Find your inspiration in our tech updates, tutorials, and events.

Implementing Cryptography

Post-Quantum Cryptography

Release

23 September, 2025

Bouncy Castle Releases Java 1.82 and Java LTS 2.73.9

Bouncy Castle Java 1.82 and Bouncy Castle Java LTS 2.73.9 have been released,...

Post-Quantum Cryptography

Tech Update

Ejbca

Signserver

10 September, 2025

OpenSSF Podcast – Racing Against Quantum: The Urgent Migration to Post-Quantum Cryptography

Tomas Gustavsson and David Hook from Keyfactor join the “What’s in the SOSS”...

Implementing Cryptography

Signing

Tech Update

Ejbca

Signserver

26 August, 2025

#KEYMASTER: Stateless PQC Digital Signatures: Insights into ML-DSA & SLH-DSA

In this #KEYMASTER episode, David Hook, VP of Software Engineering for Bouncy...

Implementing Cryptography

Tech Update

Ejbca

Signserver

19 August, 2025

#KEYMASTER: The Evolution of Timestamping: From Classical to Post-Quantum Security

In this #KEYMASTER episode, David Hook, VP of Software Engineering for Bouncy...

Learn how other successful companies are using EJBCA Enterprise edition in their applications & products.

All case studies

More inspiration

Related open-source projects

Open-source signing software

Try SignServer for digital signing for code, documents, timestamps, and more. SignServer is a digital signing engine, making it easy for teams to automate signing workflows and support all of their signing formats and use cases.

Open-source cryptographic APIs

Bouncy Castle is one of the most widely used FIPS-certified open-source cryptographic APIs for Java and C#, allowing developers to integrate PKI security into their applications easily.

Sign up

Join this year's Tech Meetup in Stockholm to get hands-on with PQC and containerized PKI.