X

XiPKI

Free#5 of 26 in Public Key Infrastructure Software

XiPKI: A technically broad, on-premises PKI platform for teams managing their own certificate infrastructure. Ranked #5 of 26 in Public Key Infrastructure Software by our editors (8.9/10); pricing: Open source; best for open-source on-premises PKI teams.

8.9/10★★★★☆Editor score

Visit XiPKI

At a glance

• Editor score
  8.9 / 10
• Pricing
  Open source
• Best for
  Open-source on-premises PKI teams
• Paid from
  Free
• Deployment model
  On_premises
• Facts checked
  21 Sep 2026

• Where it wins

  • Supports ACME, EST, SCEP, CMP, and REST enrollment
  • Integrates with multiple HSM products through PKCS#11
  • Combines CA, RA, OCSP, profiles, clustering, and post-quantum support

• Where it doesn't

  • Requires on-premises deployment and infrastructure management
  • Runs on Linux or macOS with Java 11 or later
  • Its breadth may exceed the needs of teams seeking a hosted PKI service

Our verdict on XiPKI

XiPKI is open-source public key infrastructure software for teams operating certificate infrastructure on premises. It provides certification authority and registration authority services, an OCSP responder, management components, and client components. Certificate enrollment is available through ACME, EST, SCEP, CMP, and REST APIs. Linux and macOS are supported with Java 11 or later, and the software is distributed as installable binaries or source code. It fits organizations that need control over deployment, certificate workflows, and cryptographic infrastructure rather than a hosted PKI service.

Its strongest area is technical breadth. XiPKI supports certificate and CRL issuance, revocation, and downloading, while customizable certificate profiles include JSON-based profiles. Teams can manage multiple CAs in one software instance, use database clustering and multiple active software instances, and connect hardware security modules through PKCS#11. Listed HSM integrations include AWS CloudHSM, Nitrokey HSM, nCipher, Sansec HSM, SoftHSM, TASS HSM, Thales Luna, Thales ProtectServer, and Utimaco HSM. Post-quantum support includes ML-DSA and ML-KEM, adding a forward-looking option for teams planning their cryptographic architecture.

XiPKI is best suited to PKI teams with the skills and infrastructure to operate an on-premises, open-source system. Its protocol coverage and deployment capabilities make it a strong fit for environments serving varied enrollment clients or coordinating multiple CAs. The trade-off is operational responsibility: teams must manage the software, supporting database deployment, Java runtime, and HSM connections themselves. Organizations wanting a hosted service, a simpler certificate workflow, or a narrower operational footprint should consider an alternative designed around managed delivery.

Your product? Our editors can test XiPKI in depth and publish a review, labelled as paid · from $149/mo →

XiPKI pricing

XiPKI fact sheet

XiPKI integrations

XiPKI lists 9 integrations on its own site.

• AWS CloudHSM
• Nitrokey HSM
• nCipher
• Sansec HSM
• SoftHSM
• TASS HSM
• Thales Luna
• Thales ProtectServer
• Utimaco HSM

Alternatives to XiPKI

• EJBCAA broad, self-hosted PKI platform with deep certificate and deployment support.9.4
• DigiCert Private CAA flexible private CA for enterprises managing certificates across hybrid and air-gapped environments.9.2
• SSL.com Private Enterprise PKIManaged private PKI with broad enrollment protocols, lifecycle controls, and published plan pricing.9.1

See all XiPKI alternatives →

XiPKI vs the competition

• XXiPKI vs EJBCA
• XXiPKI vs DigiCert Private CA
• XXiPKI vs SSL.com Private Enterprise PKI
• XXiPKI vs AppViewX PKIaaS
• XOXiPKI vs OpenXPKI
• XXiPKI vs AWS Private Certificate Authority

Compare XiPKI with any tool side by side →

Used XiPKI? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used XiPKI for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Website

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

5 stars★4 stars★3 stars★2 stars★1 star★

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?Prefer not to sayLess than a month1–6 months6–12 months1–2 years2+ years

I've used XiPKI myself and this is my honest opinion — nobody paid or asked me to write it.

Send my reviewPosted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update