EJBCA Overview

Introduction

EJBCA (Enterprise Java Beans Certificate Authority) is an open-source, enterprise-grade PKI solution developed by Keyfactor. It provides a comprehensive CA solution for issuing, managing, and revoking X.509 certificates across large-scale environments.

Note

For the current release, EJBCA is not used for managing platform certificates. EJBCA is an optional system application that provides a PKI solution for managing certificates in non-platform trust chains, such as the certificate trust chains for hosted applications running on the platform.

EJBCA supports multiple interfaces for certificate enrollment and management:

  • CMP (CMP) — Automates certificate enrollment, renewal, and revocation.

  • REST API — Enables programmatic certificate lifecycle management over HTTP.

  • Admin GUI — Provides a browser-based interface for interactive CA administration.

  • CLI — Supports command-line administration and operational tasks within the EJBCA container.

Note

For the latest development of EJBCA Community Edition (CE), see: https://github.com/Keyfactor/ejbca-ce.