PrimeKey Open Training

PrimeKey Open Training is a chance for you to brush up on your PKI skills. The training covers EJBCA Enterprise, SignServer Enterprise and PKI Appliance.

There are four open trainings planned for 2019: April 9-11, June 4-6, October 8-10 and October 22-24. The trainings are open for partners and Enterprise Customers* of PrimeKey. Please note that there are a limited number of seats available at each training.

The training on June 4-6 was in Chicago at, the October 22-24 training is at the PrimeKey US office in San Mateo, CA, and the other trainings are held at our head office in Stockholm, Sweden.

Open training venue details:

Date: October 8-10
Venue: PrimeKey Head Office
Address: Solna Access, Plan A8, Sundbybergsvägen 1, SE-171 73 Solna, Sweden

Date: October 22-24
Venue: PrimeKey US Office
Address: 951 Mariners Island Blvd., Suite 300, San Mateo, California, 94404

In order to best benefit from the training, please ensure attendees are knowledgeable in PKI or at least know the basics regarding keys, certificates and PKI infrastructure. Training is conducted in a classroom setting and based on a combination of theory and hands on exercises.

The fee to participate in PrimeKey Open Training is €2000 (Sweden) and $2000 (US) per attendee.

We hope to see you there!

*Enterprise customers are customers who make use of the Enterprise editions of PrimeKey products, i.e. not applicable to community versions of EJBCA and SignServer.

Open training agenda

The training is conducted over three working days and focuses on the installation and administration of EJBCA Enterprise, SignServer Enterprise and PKI Appliance.

Day 1, EJBCA Enterprise Administration

  • Introduction to PrimeKey and PKI
  • Installation, HSM integration and hardening (OS and Application)
  • The Appliance and the SEE
  • Clustering and high availability
  • Introduction to EJBCA and overview
  • Audit log protection
  • Creating and configuring CA’s
  • Creating and managing certificate profiles
  • Managing certificate life cycle (revocation, resistance etc.)
  • Creating and managing roles


Day 2, Advanced EJBCA Enterprise Administration

  • Configuring approvals (4 eyes principle)
  • Using key recovery
  • How to integrate with EJBCA – SOAP, REST, EST, SCEP, CMP, ACME
  • CAA and key validation
  • Setup of TLS communication from CA to VA or RA
  • Configuring a VA and external RA
  • Overview of publishers, group publishers and services in EJBCA
  • EJBCA command line interface
  • Long term maintenance including backup and restore


Day 3, SignServer Enterprise

  • Introduction to SignServer
  • Installation and HSM integration
  • Signing overview – Code Signing, Time stamp, , XML, PDF signing etc.
  • SignServer overview
  • Managing administrators in SignServer
  • Creating, managing and storing keys
  • Creating different types of Signers – including Java, MS Authenticode
  • Signing server side and signing client side with larger files
  • Creating workers
  • Viewing the audit log and archive
  • Signature validation
  • EPass port – concepts and how to use SignServer with EJBCA for ePassports and eID’s
  • Automatic key and certificates renewal
  • How to integrate with SignServer
  • Long term maintenance including backup and restore

Sign up your interest to participate in PrimeKey Open Training

There are a limited number of seats for each training.

  • Choose the date of the training you are interested in.
    I accept that PrimeKey stores my information, and I accept cookies for analysis and business identification. Read more about cookies and privacy policy here.