EJBCA is an open source PKI (public key infrastructure) solution. Its enterprise version is developed and supported by PrimeKey, one of our partners. We can help you to deploy both the enterprise version (EJBCA EE) and the community version (EJBCA CE).
EJBCA: benefits of the enterprise version
The EJBCA enterprise includes features and services which are not available in the community version, such as:
Compliance with certifications and regulations: EAL4+ certified and eIDAS-compliant, qualified PSD2 certificates included
- Rapid security updates
- Level-3 support
Advanced features (non-exhaustive list):
- Integrity protection for the whole database and logs
- Automatic synchronization of the OCSP responder with the PKI
- CMP protocol support
- Microsoft’s native auto-enrollment protocol support
- ACME protocol support
- Management REST API
- SCEP protocol support, RA and certificate renewal mode
As a PKI expert, reseller and integrator of the PrimeKey EJBCA EE solution, we implement it and provide level-1 and -2 support. We also coordinate level-3 support, provided by PrimeKey.
Our support
Digitalberry can help you at each stage of implementing the EJBCA PKI solution:
- Organization of workshops: business scenarios, certification hierarchy, certification templates, secret holders and profiles, functional and technical architecture, use case in your business applications
- Preliminary studies: functional specifications, technical architecture
- PKI deployment in the different environments (acceptance, qualification, pre-production, production)
- Migration of an old PKI to EJBCA EE or EJBCA CE
- Integration with your information system: dockerizing, implementation of an active and a passive branch, configuration of network equipment, integration with an HSM, integration with Active Directory, etc.
- Functional and technical acceptance
- Key ceremony
- Project owner support: installation and configuration documents, acceptance test file, runbook, script development for automating operating tasks, guide for operators, administrators and users
- Training and training support: cryptography, certificates and PKI
