Differences between Community and Enterprise software
The table below describes the overall differences between the PrimeKey Community and Enterprise software.
Community
Enterprise
Core PKI functionality
Yes
Yes
Advanced PKI functionality – see Technical Specification below
No
Yes
Compliance to certifications and regulations
Not guaranteed
Yes
Community edition support (best effort)
Yes
No
Professional support with SLA
No
Yes
Access to Keyfactor's professional services
No
Yes
Basic online training and tutorials
Yes
Yes
Comprehensive product training; lectures and hands-on exercises
No
Yes
Scheduled releases
Yes
Yes
Maintenance and security releases
Not guaranteed
Yes
Advance notices and hotfixes
No
Yes
EJBCA Community
EJBCA Community is a free edition of PrimeKey’s PKI Software. It is an outstanding tool for those who want to test and learn the core functionalities of PKI. If you have a need for PKI and don’t require any advanced features or guaranteed certifications or support for specific regulations, this is for you. You can find more about EJBCA Community on ejbca.org.
EJBCA Community vs. Enterprise
General features
EJBCA Community
EJBCA Enterprise
X.509 certificate issuance and management
Yes
Yes
Basic HSM support using Java PKCS#11
Yes
Yes
Advanced HSM support (e.g. EdDSA, AWS CloudHSM, AWS KMS)
No
Yes
Certificate transparency
No
Yes
PKI configuration import/export functions ConfigDump and StateDump
No
Yes
Cert Safe Publishing to HTTPS server
Yes
Yes
Security features
EJBCA Community
EJBCA Enterprise
Secure component separation with peer connectors, for example to have RA or VA on a separate instance
No
Yes
Database integrity protection - wards against database tampering via signing database tables by row
No
Yes
Pre-issuance key validation - allows the CA to refuse to sign known weak keys or detect policy violations before issuance
No
Yes
Audit logging to file or database
Yes
Yes
Integrity-protected audit log in database
No
Yes
OAuth authentication
No
Yes
Use cases
EJBCA Community
EJBCA Enterprise
ePassport (EAC) certificate issuance and management
No
Yes
Microsoft Auto-enrollment support for managing Microsoft servers and devices
No
Yes
LTE/4G mobile network security using CMP 3GPP
No
Yes
IoT device security using EST protocol
No
Yes
Enrollment protocols and APIs
EJBCA Community
EJBCA Enterprise
CMP
Yes
Yes
CMP 3GPP Vendor Mode
No
Yes
SCEP Client mode
Yes
Yes
SCEP RA Mode
No
Yes
EST
No
Yes
ACME
No
Yes
SOAP API
Yes
Yes
Enrollment REST API
Yes
Yes
Management REST API
No
Yes
For more details, see our documentation:
SignServer Community
SignServer Community is our Signing Software for free. Here you will find the basic signing functionalities for time stamping and document signing. You can find more about SignServer Community on signserver.org.
SignServer Community vs. Enterprise
SignServer Community
SignServer Enterprise
Code signing: CMS, OpenPGP, Debian, Java
Yes
Yes
Code signing: Microsoft, Android
No
Yes
Document signing: PDF, XML, CMS/PKCS#7
Yes
Yes
Advanced document signing with eIDAS advanced signatures (PAdES/XAdES) and timestamping
No
Yes
ePassport (MRTD) signing
Yes
Yes
ICAO CSCA master list signing
No
Yes
Basic timestamping
Yes
Yes
Professional timestamping, including time synchronization monitoring and eIDAS Qualified Electronic Timestamps
No
Yes
Large file support
No
Yes
Web-based administration interface
Yes
Yes
Automatic renewal service
No
Yes
Audit logging to file or database
Yes
Yes
Integrity-protected audit log in database
No
Yes
For more details, see our documentation:
Contact us
Fill in your contact information below and we will get in touch with you.