PKI deployment options

Software Appliance – Deploy your PKI and Signing solution in your own data centers

The PrimeKey Software Appliance is installed on-premises and operated from your on-premises servers and computing infrastructure. It utilizes your native virtualization resources and you can choose the Hardware Security Model (HSM) of your choice. In addition, the Software Appliance comes in different models for you to be able to choose the most cost-efficient deployment solution for your needs.

With our software appliances for PrimeKey EJBCA Enterprise and SignServer Enterprise you get:

• A turn-key solution including all required software.
• Single vendor supported and tested application stack.
• Quick and easy set-up, back/up restore and upgrades.
• All installation, configuration and maintenance tasks are performed from a user-friendly GUI. There is no need to spend time with adapting configuration files, etc., “under the hood” of the system.
• Support for several virtualization platforms.
• Support for the HSM of your choice.
• Integrated software support services from PrimeKey.
• The possibility to choose from different models and thus get the most cost-efficient and optimized deployment for your PKI use case and needs for capacity and performance.

EJBCA Enterprise

SignServer Enterprise

Hardware Appliance – PKI and Signing in a hardware Box

With an on-premises hardware appliance installation from PrimeKey you can take advantage of hardened, high-performance servers built for organizations that do not want to spend time supporting the application and hardware stack and just want to deploy an on-premises secure PKI and signing solution. In addition, it comes in different models for you to be able to choose the most cost-efficient deployment for your needs.

Our hardware appliance PKI and signature deployment models are packaged under the PrimeKey EJBCA Appliance and SignServer Appliance products and they offer:

• A turn-key solution including all required software and hardware.
• A built-in FIPS 140-2, Level 3, Certified Hardware Security Module (HSM) that simplifies HSM integration and usage.
• Single vendor supported and tested application stack.
• Quick and easy set-up, installation including HSM and, back/up restore and upgrades.
• Integrated hardware and software support services from PrimeKey.
• Built-in clustering and it is easy to scale the solution by just adding additional nodes behind a load balancer.
• The possibility to choose from different models and thus get the most cost-efficient and optimized deployment for your PKI or signing use case and needs for capacity and performance.
• A dedicated EJBCA Appliance eIDAS edition with a built-in Common Criteria certified HSM.

EJBCA Appliance

SignServer Appliance

Cloud SaaS – EJBCA SaaS on public cloud

Enjoy rapid deployment, with no hardware to purchase, fully hosted and managed technology stack. Deploy your PKI solution in our Cloud SaaS to limit risks and increase speed to market.

PrimeKey EJBCA SaaS offer:

• A turn-key service, including full access to all EJBCA’s PKI capabilities but no responsibility to maintain a SLA.
• The service includes availability services as well as full management and maintenance of the PKI technology stack.
• Choose between AWS KMS or AWS Cloud HSM.
• Subscription based pricing, no upfront investment for hardware or PrimeKey’s software, you only pay for what you use.
• Available in different sizes and geographies to fit your needs today and tomorrow.
• Quick and easy deployment, you are up and running in minutes.
• Great possibilities to start small and grow with your use cases or need for certificate capacity.
• Increased speed to operation/market.

EJBCA SaaS

AWS and Azure Cloud – PKI and Signing on public cloud

Enjoy rapid deployment, with no hardware to purchase and maintain or any upfront software license costs. Deploy our cloud based PKI and signature solutions in your AWS or Azure cloud environment.

PrimeKey EJBCA Cloud and PrimeKey SignServer Cloud offer:

• A turn-key solution including all required software on public Cloud: AWS and Azure.
• Single vendor supported and tested application stack.
• Out of the box support for cloud HSMs, AWS CloudHSM and Azure KeyVault.
• No upfront investment for hardware or PrimeKey’s software, you only pay for what you use.
• Quick and easy deployment, you are up and running in minutes.
• 30-days free trial*.
• Great possibilities for organizations that do not have on-premises IT infrastructure.
• Increased speed to operation/market.
• PrimeKey’s standard or premium support is included.

EJBCA Enterprise Cloud

SignServer Enterprise Cloud

Hybrid deployment – Combine and mix different options as it fits your needs over time

Enjoy the greatest flexibility by enabling cloud och cloud SaaS functions as appropriate while benefiting from being in control of selected PKI and signing functions with on-premises software or hardware or appliance deployments.

With a hybrid PKI and signing deployment solution from PrimeKey you can:

• Benefit from all the advantages of PrimeKey PKI and signing deployment options at the same time.
  • For example, deploy Validation Authority (VA) and Registration Authority (RA) systems on the Cloud for ease of scale.
  • Or deploy Certificate Authority (CA) systems on-premises (software or hardware appliance) for compliance and control, combine this with VAs and or RAs on the cloud.
• Get great flexibility for future use cases and other expansions.

Solution platform – Deploy your PKI and Signing solution with full flexibility 

Deploy your PKI and signing solution with full flexibility and access to source code with the Solution Platform deployment option. The on-premise solution platform is installed and operated from your on-prem servers and computing infrastructure. It utilizes your native computing resources and requires only a licensed copy of the solution platform software.

With our solution platform deployment option for PrimeKey EJBCA Enterprise and SignServer Enterprise, you can:

• Pick your own software and hardware stack.
• Leverage your investments in Hardware Security Modules (HSM).
• Have complete freedom with configuration, deployment and customization of your PKI and signing solution.
• Utilize any use case and be in complete control over performance and capacity of your PKI and signing solution.
• Make it easier for support teams with separate responsibilities for application, server, hardware, database, network, and HSM.
• Have full code control, including access to source code, with the possibility to add your own plugins and code extensions.