In most secure installations, administrator login keys are stored on an external token, such as YubiKey, rather than in soft key stores on the local machine.
EJBCA requires certificate-based authentication for administrators. YubiKey provides an additional physical layer of security. Since the keys are generated and stored on the device, they are less vulnerable to software-based attacks such as malware or keyloggers that can compromise keys stored on the local machine.
These are the steps to install and get going with Yubico's YubiKey and EJBCA. For more detailed information, follow the tutorial video or our documentation.
To get going, you need to have the following installed on your workstation:
The tutorial has been developed using Firefox and YubiKey Manager on macOS.
Check out the supplementary documentation that goes hand-in-hand with our tutorial video.
Get your hands on the EJBCA Docker container by downloading it now from Docker Hub.
Take a peek at our tutorial video on YouTube, and browse through some of our other videos as well.
You can ask your questions and learn from PKI specialists in the EJBCA forum on GitHub Discussions.
