EJBCA
8.2#1 in certificate management softwareFrom £62,065 a yearFree planWebAPILinuxmacOS
VisitEJBCA vs OpenCA PKI
OpenCA PKI
7.4#4 in public key infrastructure softwareFree planFree planWebLinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | EJBCA | OpenCA PKI |
|---|---|---|
| Founded | 2001 | 1998 |
| Integrations | The comparison lists HSM and crypto-token support, including PKCS#11-based and REST API-based key vault integration, AWS CloudHSM, and AWS KMS. | Official dependencies and integrations include OpenLDAP, OpenSSL, Apache HTTP Server and Apache mod_ssl. |
| License | EJBCA Community is released under LGPL version 2.1 or later. | The OpenCA source license is an Apache-style permissive license with attribution and trademark conditions. |
| Purpose | EJBCA is open-source PKI and Certificate Authority software for certificate management, registration, enrollment, and validation. | OpenCA PKI is an open source, out-of-the-box Certification Authority for setting up and managing a PKI. |
EJBCA plans
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
OpenCA PKI plans
- OpenCA PKIFree
Pick EJBCA if…
EJBCA suits teams managing PKI for internal systems, DevOps, industrial environments, IoT devices, or national eIDs. Community is for learning, testing, and prototyping; production users should consider its stated limitations and Enterprise support offering.
Pick OpenCA PKI if…
It suits organizations that need to run their own certificate authority and PKI on Linux, macOS, or a self-hosted web setup. Teams should be prepared to install its named prerequisites and work with limited, partly outdated documentation.