Differences between Community and Enterprise software

The table below describes the overall differences between the PrimeKey Community and Enterprise software.

Contact us

Community

Enterprise

Core PKI functionality

Yes

Yes

Advanced PKI functionality – see Technical Specification below

No

Yes

Compliance to certifications and regulations

Not guaranteed

Yes

Community edition support (best effort)

Yes

No

Professional support with SLA

No

Yes

Access to Keyfactor's professional services

No

Yes

Basic online training and tutorials

Yes

Yes

Comprehensive product training; lectures and hands-on exercises

No

Yes

Scheduled releases

Yes

Yes

Maintenance and security releases

Not guaranteed

Yes

Advance notices and hotfixes

No

Yes

EJBCA Community

EJBCA Community is a free edition of PrimeKey’s PKI Software. It is an outstanding tool for those who want to test and learn the core functionalities of PKI. If you have a need for PKI and don’t require any advanced features or guaranteed certifications or support for specific regulations, this is for you. You can find more about EJBCA Community on ejbca.org.

EJBCA Enterprise

PKI in DevOps

EJBCA Community vs. Enterprise

General features

EJBCA Community

EJBCA Enterprise

X.509 certificate issuance and management

Yes

Yes

Basic HSM support using Java PKCS#11

Yes

Yes

Advanced HSM support (e.g. EdDSA, AWS CloudHSM, AWS KMS)

No

Yes

Certificate transparency

No

Yes

PKI configuration import/export functions ConfigDump and StateDump

No

Yes

Cert Safe Publishing to HTTPS server

Yes

Yes

Security features

EJBCA Community

EJBCA Enterprise

Secure component separation with peer connectors, for example to have RA or VA on a separate instance

No

Yes

Database integrity protection - wards against database tampering via signing database tables by row

No

Yes

Pre-issuance key validation - allows the CA to refuse to sign known weak keys or detect policy violations before issuance

No

Yes

Audit logging to file or database

Yes

Yes

Integrity-protected audit log in database

No

Yes

OAuth authentication

No

Yes

Use cases

EJBCA Community

EJBCA Enterprise

ePassport (EAC) certificate issuance and management

No

Yes

Microsoft Auto-enrollment support for managing Microsoft servers and devices

No

Yes

LTE/4G mobile network security using CMP 3GPP

No

Yes

IoT device security using EST protocol

No

Yes

Enrollment protocols and APIs

EJBCA Community

EJBCA Enterprise

CMP

Yes

Yes

CMP 3GPP Vendor Mode

No

Yes

SCEP Client mode

Yes

Yes

SCEP RA Mode

No

Yes

EST

No

Yes

ACME

No

Yes

SOAP API

Yes

Yes

Enrollment REST API

Yes

Yes

Management REST API

No

Yes

For more details, see our documentation: 

EJBCA interoperability and certifications  

SignServer Community

SignServer Community is our Signing Software for free. Here you will find the basic signing functionalities for time stamping and document signing.  You can find more about SignServer Community on signserver.org.

SignServer Enterprise

SignServer-Markus-Marcus

SignServer Community vs. Enterprise

SignServer Community

SignServer Enterprise

Code signing: CMS, OpenPGP, Java

Yes

Yes

Code signing: Microsoft, Debian, Android

No

Yes

Document signing: PDF, XML, CMS/PKCS#7

Yes

Yes

Advanced document signing with eIDAS advanced signatures (PAdES/XAdES) and timestamping

No

Yes

ePassport (MRTD) signing

Yes

Yes

ICAO CSCA master list signing

No

Yes

Basic timestamping

Yes

Yes

Professional timestamping, including time synchronization monitoring and eIDAS Qualified Electronic Timestamps

No

Yes

Large file support

No

Yes

Web-based administration interface

Yes

Yes

Automatic renewal service

No

Yes

Audit logging to file or database

Yes

Yes

Integrity-protected audit log in database

No

Yes

For more details, see our documentation: 

SignServer interoperability

Open Source page

Find out more about PrimeKey's open source philosophy. 

Contact us

Fill in your contact information below and we will get in touch with you.