Overview
EJBCA PKI for Enterprises - A powerful and flexible certificate issuance and management system to issue and enable full life-cycle control of digital certificate and Certificate (CA), Registration (RA) and Validation Authorities (VA); enabling multiple use cases and standards compliance. EJBCA now includes support for CloudHSM and AWS KMS, has introduced support for the ACME protocol and has a REST API. Please visit the EJBCA Enterprise Cloud documentation for CloudHSM and AWS KMS integration guides. This instance includes 8x5 Standard Support but is functionally identical to the Premium listing.
Version 2.0 and above now feature a web based configuration wizard so options to install directly into an RDS database or even have the ManagementCA keys be generated directly into CloudHSM can be chosen.
Please contact us for multi-node enterprise pricing at sales@keyfactor.com !
Highlights
- Multiple CAs and levels of CAs, build a complete infrastructure (or several) within one instance of EJBCA.
- Unlimited number of Root CAs and SubCAs. Request cross certificates and bridge certificates from other CAs and Bridge CAs. Issue cross certificates to other CAs.
- Support all common PKI Architectures, as well as many uncommon. Store keys in CloudHSM, AWS KMS, in a PKCS11 connected HSM, or in the database (for demo).
Details
Typical total price
$2.753/hour
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
|---|---|---|---|
t2.medium | $2.08 | $0.046 | $2.126 |
t2.xlarge | $3.86 | $0.186 | $4.046 |
t2.2xlarge | $5.19 | $0.371 | $5.561 |
t3.medium | $2.08 | $0.042 | $2.122 |
t3.large Recommended | $2.67 | $0.083 | $2.753 |
t3.xlarge | $3.86 | $0.166 | $4.026 |
t3.2xlarge | $5.19 | $0.333 | $5.523 |
t3a.medium | $2.08 | $0.038 | $2.118 |
t3a.large | $2.67 | $0.075 | $2.745 |
t3a.xlarge | $3.86 | $0.15 | $4.01 |
Additional AWS infrastructure costs
Type | Cost |
|---|---|
EBS General Purpose SSD (gp2) volumes | $0.10/per GB/month of provisioned storage |
Vendor refund policy
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
Using Firefox, point your web browser to the instance's IP. Accept the certificate warning. Retrieve the Superadmin certificate via the EJBCA PublicWeb portal by selecting the "Create Keystore" link. The username will be "superadmin" and the password will be the superadmin password chosen during wizard configuration. Download the superadmin.p12 and import it into FireFox via the menu under FireFox > Preferences > Privacy and Security > Certificates > View Certificates > Your Certificates > Import. The password to the p12 certificate file will be the same password used to retrieve it. Click administration in the Public Web Portal to start configuring EJBCA.
Support
Vendor support
Product Support: To register with PrimeKey, a Keyfactor Company Support, please send an email to support@primekey.com and note that you are an AWS customer. Please note that PrimeKey, a Keyfactor Company Support has no other way to identify you as a PrimeKey, a Keyfactor Company customer unless you contact us at support@primekey.com and state that you are a PrimeKey, a Keyfactor Company customer on AWS.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Customer reviews
Very straightforward to deploy and test
I'm just amazed with the ease to deploy a fully working EJBCA by using this marketplace AMI. At least in Windows, the following provides a seamless experience:
superadmin.p12 is downloaded (through HTTP) and while installing it, Windows asks to install ManagementCA as a trusted root and if you accept it and given that Admin GUI SSL certificate is issued to the right DNS names (i.e. the ones assigned by AWS to the EC2), the first visit through HTTPS to the Admin GUI doesn't display any browser alert which provides for an excelent user experience.
Just great.