
EJBCA
8.2#1 in certificate management softwareFrom £62,065 a yearFree planWebAPILinuxmacOS
Visit
| Fact | EJBCA | XiPKI |
|---|---|---|
| Purpose | EJBCA is open-source PKI and Certificate Authority software for certificate management, registration, enrollment, and validation. | XiPKI is an open-source public key infrastructure system covering certification authority, registration authority, and OCSP responder functions, intended for critical infrastructure. |
| Security and compliance | The comparison lists Common Criteria certification and audit logging to file, database, or syslog; several advanced security and compliance capabilities are Enterprise features. | The project says Bouncy Castle can be switched between LTS and FIPS variants to meet different compliance requirements, and lists eIDAS standards EN 319 411 and EN 319 412 support. |
EJBCA suits teams managing PKI for internal systems, DevOps, industrial environments, IoT devices, or national eIDs. Community is for learning, testing, and prototyping; production users should consider its stated limitations and Enterprise support offering.
XiPKI is aimed at organizations that need CA, RA, or OCSP responder capabilities, including critical infrastructure. It may suit teams able to operate supported Linux or macOS environments and meet its Java and Tomcat requirements.