Get hands-on experience with PKI and certificates with EJBCA Community. If you need more advanced PKI features and more deployment options then EJBCA Enterprise is for you.
EJBCA is an open-source PKI software with Community and Enterprise editions. The Community edition offers basic PKI and certificate management for testing and evaluation purposes. With the Enterprise edition, you'll get advanced PKI and security features, SLAs, extended deployment options, and certifications to meet the more complex needs of larger businesses and government agencies.
The table below summarizes the overall differences between the EJBCA Community and Enterprise editions.
Contact Keyfactor if you are interested in EJBCA Enterprise:
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
Core PKI functionality
Advanced PKI functionality – more details below
Compliance to certifications and regulations
* Not guaranteed
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
Product documentation
Access to GitHub Discussions (Best Effort Support)
Access to professional support with SLA
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
Basic online training and tutorials
Comprehensive product training; lectures and hands-on exercises (Keyfactor University)
Access to Keyfactor's professional services
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
Scheduled releases
Maintenance and security releases
*Not guaranteed
Security notifications
*Not guaranteed
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
X.509 certificate issuance and management, Certificate Authority (CA)
Registration Authority (RA) module
Validation Authority (VA) module, OCSP and CRL
Separation of CA/RA/VA on separate instances
PKI configuration export/import; EJBCA ConfigDump
Open-source Ansible playbooks for installation and configuration (configuration requires ConfigDump import)
Common Criteria certification
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
Basic HSM support using Java PKCS#11
Advanced HSM support (e.g. EdDSA, AWS CloudHSM, AWS KMS)
Secure real-time connection between CA/RA/VA on separate instances
Audit logging to file or database or syslog
OAuth authentication
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
TLS certificates, client, and server for PRIVATE trust
TLS certificates, client, and server for PUBLIC trust
ePassport (EAC) certificate issuance and management
Microsoft auto-enrollment support for managing Microsoft servers and devices
LTE/4G mobile network security using CMP 3GPP
IoT device security using EST protocol
IEEE 802.1AR: Secure Device Identities
Matter Home Automation PKI support for Manufacturer/OEM/Vendor
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
CMP
CMP 3GPP Vendor Mode
SCEP Client mode
SCEP RA Mode
EST
ACME
SOAP API
Enrollment REST API
Management REST API
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
Container Docker Hub or AWS
Container deployment with Helm
Build from source
Software appliance
Hardware appliance
EJBCA Cloud AWS
30 days free trial
EJBCA Cloud Azure
30 days free trial
EJBCA SaaS
FEATURES
EJBCA COMMUNITY
EJBCA ENTERPRISE & EJBCA CLOUD
Quantum-safe cryptography support
HSM Support for Quantum-safe cryptography
Are you looking for more security features, SLA, or deploying EJBCA as SaaS/Cloud/Appliance? EJBCA Enterprise is for you.
