EJBCA
8.2#1 in certificate management softwareFrom £62,065 a yearFree planWebAPILinuxmacOS
VisitEJBCA vs KeyTalk CKMS
KeyTalk CKMS
7.7#2 in public key infrastructure softwareFrom €5 a monthAndroidiOSWebAPI
VisitWhat both publish
| Fact | EJBCA | KeyTalk CKMS |
|---|---|---|
| Deployment | Community Edition can be deployed with Helm, as a container, or from source; the download page links Docker Hub, Artifact Hub, and GitHub. | CKMS is delivered as a virtual machine for customer infrastructure, private cloud environments including AWS, Azure, and Google Cloud, or KeyTalk-managed PKI as a service. |
| Integrations | The comparison lists HSM and crypto-token support, including PKCS#11-based and REST API-based key vault integration, AWS CloudHSM, and AWS KMS. | Documented integrations include Microsoft Intune, MobileIron, VMware Workspace ONE, JAMF, RADIUS, LDAP, MySQL and HSMs. |
| Licence | EJBCA Community is open source under LGPL version 2.1 or later; dependencies use licenses including Apache 2.0, BSD, MIT and EPL. | KeyTalk is a commercial licensed product; CKMS, agents and S/MIME issuance require licensing through KeyTalk or partners. |
| Rating on Gartner Peer Insights | 4.5 out of 5 from 15 reviews | 4.0 out of 5 from 1 review |
EJBCA plans
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
KeyTalk CKMS plans
- S/MIME on-premise€5 a month
- S/MIME hosted SaaS€6.50 a month
- CKMS 10,000–24,999 seats—
- CKMS 1,000–2,499 seats—
- CKMS 25,000–49,999 seats—
- CKMS 2,500–9,999 seats—
Pick EJBCA if…
EJBCA suits teams managing PKI for internal systems, DevOps, industrial environments, IoT devices, or national eIDs. Community is for learning, testing, and prototyping; production users should consider its stated limitations and Enterprise support offering.
Pick KeyTalk CKMS if…
It suits businesses and managed service providers that need to manage certificates across their own infrastructure or customer environments. The S/MIME options may suit organizations seeking either on-premise or hosted service.