EJBCA
EJBCA: A broad open-source PKI foundation for teams building and operating certificate infrastructure. Ranked #10 of 31 in Certificate Management Software by our editors (8.3/10); pricing: Free plan · 30-day trial; best for teams building a full open-source PKI.
At a glance
- Editor score8.3 / 10
- PricingFree plan · 30-day trial
- Best forTeams building a full open-source PKI
- Free planYes
- Paid fromFree
- Founded2001
- Facts checked20 Sep 2026
Where it wins
- Covers CA, RA, and VA functions in one PKI platform
- Supports ACME, CMP, EST, SCEP, REST, and SOAP interfaces
- Offers HSM integrations and flexible deployment options
Where it doesn't
- Community Edition is positioned for learning, testing, and prototyping
- Production-oriented capabilities are in Enterprise and Cloud editions
- Its broad PKI scope may exceed the needs of narrow certificate workflows
Our verdict on EJBCA
EJBCA is open-source PKI and certificate authority software for issuing, managing, validating, and revoking digital certificates. It is designed for organizations building certificate infrastructures across DevOps, IoT, industrial systems, telecom, private-trust TLS, public-trust TLS, and service meshes. The platform is available through web, API, and self-hosted deployments, with Community Edition available for free download. Teams seeking a full PKI foundation will find coverage for X.509 certificates, certificate authorities, registration authorities, validation authorities, revocation, OCSP, and CRL handling.
Its strongest fit is breadth across enrollment and operational workflows. EJBCA supports ACME, CMP, EST, SCEP, Microsoft Auto-enrollment, SOAP, and REST interfaces, while REST-based administration covers certificate enrollment, renewal, and revocation. Automatic CA renewal and certificate-expiration checking services address ongoing certificate operations. Integrations with cert-manager, Istio, Microsoft Intune, AWS CloudHSM, AWS KMS, and HSMs also help it fit environments spanning service meshes, device management, and protected key storage. The combination of TLS and mTLS certificate support makes it relevant to both infrastructure and service identity use cases.
Deployment flexibility is another defining consideration: options include containers, Helm, source, cloud, software appliances, and hardware appliances. HSM and cryptographic-token integrations support organizations with stronger key-protection requirements. However, the product's full CA, RA, and VA scope is likely unnecessary for teams that only need a narrow certificate issuance workflow. The vendor positions Community Edition for learning, testing, and prototyping, while Enterprise and Cloud editions add production-oriented capabilities, deployment options, support, and service-level agreements. Choose EJBCA when building a substantial, open-source PKI is the priority; choose an alternative when simplicity or a focused certificate-management experience matters more.
Your product? Our editors can test EJBCA in depth and publish a review, labelled as paid · from $149/mo →
EJBCA pricing
EJBCA fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Certificate discovery | Not verified |
| Automatic renewal | Yes |
| Deployment automation | Yes |
| Revocation workflows | Yes |
| Certificate types | Not verified |
| CA integrations | Yes |
| Free trial | 30 days |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 7 integrations: cert-manager, Istio, Microsoft Intune, Microsoft Auto-enrollment, AWS CloudHSM, AWS KMS … See all → |
| Pricing | Free plan · 30-day trial |
| Website | ejbca.org |
| Facts checked | 20 Sep 2026 |
EJBCA integrations
EJBCA lists 7 integrations on its own site.
- cert-manager
- Istio
- Microsoft Intune
- Microsoft Auto-enrollment
- AWS CloudHSM
- AWS KMS
- HSMs
Alternatives to EJBCA
- DigiCert Trust Lifecycle ManagerA broad certificate governance platform for hybrid infrastructure and enterprise PKI.9.4
- DigiCert ONEFull certificate lifecycle control for large organizations managing diverse trust environments.9.3
- Keyfactor PlatformA broad certificate lifecycle platform for hybrid enterprise environments.9.1
Also Ranked In
EJBCA is ranked in 2 of our directories.
Used EJBCA? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used EJBCA for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
EJBCA is listed in our Certificate Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/ejbca/"><img src="https://www.itechguides.com/best/badge/ejbca.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update