Dogtag Certificate System
5.9#13 in public key infrastructure softwareFree planFree planAPILinuxSelf-hosted
VisitDogtag Certificate System vs EJBCA
What both publish
| Fact | Dogtag Certificate System | EJBCA |
|---|---|---|
| Deployment | The project README gives Fedora installation commands and points to deployment instructions for subsystems, clones, and HSMs. | Community Edition can be deployed with Helm, as a container, or from source; the download page links Docker Hub, Artifact Hub, and GitHub. |
| Enrollment protocols | The project lists ACME, CMC, EST, and SCEP responders among its features. | Documented enrollment protocols include ACME, EST, Microsoft auto-enrollment and SCEP. |
| Intended users | The site describes Dogtag as a collection of technologies for enterprises deploying PKI on a large scale. | EJBCA is presented for securing industrial environments, IoT devices, national eIDs, DevOps workflows, and internal PKIs. |
| License | The project README identifies the software license as GPL-2.0. | EJBCA Community is released under LGPL version 2.1 or later. |
| Purpose | Dogtag is an enterprise-class open source certificate authority for deploying PKI at scale. | EJBCA is open-source PKI and Certificate Authority software for certificate management, registration, enrollment, and validation. |
| REST API | The site links a programming guide for developers writing clients against Dogtag's REST interface. | The REST interface covers CA, crypto-token, certificate-management and configuration-dump operations and is documented with an OpenAPI specification. |
Dogtag Certificate System plans
- Dogtag Certificate SystemFree
EJBCA plans
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
Pick Dogtag Certificate System if…
Dogtag suits enterprises that need to deploy PKI at large scale and can provide access to a 389 Directory Server. It is intended for Linux and self-hosted use.
Pick EJBCA if…
EJBCA suits teams managing PKI for internal systems, DevOps, industrial environments, IoT devices, or national eIDs. Community is for learning, testing, and prototyping; production users should consider its stated limitations and Enterprise support offering.