cert-manager
5.9#12 in public key infrastructure softwareFree planFree planAPILinuxSelf-hosted
Visitcert-manager vs EJBCA
What both publish
| Fact | cert-manager | EJBCA |
|---|---|---|
| Integrations | Satellite projects include istio-csr, approver-policy, Kubernetes CSI drivers, csi-driver-spiffe, and trust-manager. | The comparison lists HSM and crypto-token support, including PKCS#11-based and REST API-based key vault integration, AWS CloudHSM, and AWS KMS. |
| Purpose | cert-manager obtains X.509 certificates from public and private issuers, keeps them valid and up to date, and attempts renewal before expiry. | EJBCA is open-source PKI and Certificate Authority software for certificate management, registration, enrollment, and validation. |
cert-manager plans
- Open source cert-managerFree
EJBCA plans
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
Pick cert-manager if…
cert-manager suits teams running Kubernetes or OpenShift workloads that need certificates for public-facing or internal services. It is relevant to operators seeking automated issuance and renewal, including for Ingress TLS or pod-to-pod mTLS.
Pick EJBCA if…
EJBCA suits teams managing PKI for internal systems, DevOps, industrial environments, IoT devices, or national eIDs. Community is for learning, testing, and prototyping; production users should consider its stated limitations and Enterprise support offering.