PKI deployment options

Your PKI and digital signature solution deployed according to your needs

PKI and signature solution deployment options – Software Appliance, Hardware Appliance, Cloud or Hybrid

PrimeKey understands that organizations have unique business challenges, including security requirements, budgets and the availability of internal resources. We give you the choice to combine Software Appliance, Hardware Appliance and public Cloud deployments for your PKI and Signing solution. This means the infrastructure can be deployed in the manner best suited to your business needs and can grow flexibly and expand over time. We are happy to support you in making the best decision for your particular set of needs and circumstances. Read more about our deployment options below and find the best PKI and signing solution for you.

Software Appliance – Deploy your PKI and Signing solution in your own data centers

The PrimeKey software appliance is installed on-premises and operated from your on-prem servers and computing infrastructure. It utilizes your native virtualization resources and you can choose the HSM of your choice. In addition, the software appliance comes in different models for you to be able to choose the most cost-efficient deployment solution for your needs.

With our software appliances for PrimeKey EJBCA Enterprise and SignServer Enterprise you get:

  • A turn-key solution including all required software.
  • Single vendor supported and tested application stack.
  • Quick and easy set-up, back/up restore and upgrades.
  • Support for several virtualization platforms
  • Support for the Hardware Security Module (HSM) of your choice
  • Integrated software support services from PrimeKey.
  • Built-in clustering and it is easy to scale the solution by just adding additional nodes behind a load balancer.
  • The possibility to choose from different models and thus get the most cost-efficient and optimized deployment for your PKI use case and needs for capacity and performance.

EJBCA Enterprise

SignServer Enterprise

PKI deployment & Developing PKI - people working
PKI Appliance and PKI hardware

Hardware Appliance – PKI and Signing in a hardware Box

With an on-premises hardware appliance installation from PrimeKey you can take advantage of hardened, high-performance servers built for organizations that do not want to spend time supporting the application and hardware stack and just want to deploy an on-premises secure PKI and signing solution. In addition, it comes in different models for you to be able to choose the most cost-efficient deployment for your needs.
Our hardware appliance PKI and signature deployment models are packaged under the PrimeKey EJBCA Appliance and SignServer Appliance products and they offer:

  • A turn-key solution including all required software and hardware
  • A built-in FIPS 140-2, Level 3, Certified Hardware Security Module (HSM) that simplifies HSM integration and usage
  • Single vendor supported and tested application stack
  • Quick and easy set-up, installation including HSM and, back/up restore and upgrades.
  • Integrated hardware and software support services from PrimeKey
  • Built-in clustering and it is easy to scale the solution by just adding additional nodes behind a load balancer.
  • The possibility to choose from different models and thus get the most cost-efficient and optimized deployment for your PKI or signing use case and needs for capacity and performance.
  • A dedicated EJBCA Appliance eIDAS edition with a built-in Common Criteria certified HSM

EJBCA Appliance

SignServer Appliance

AWS and Azure Cloud – PKI and Signing on public cloud

Enjoy rapid deployment, with no hardware to purchase and maintain or any upfront software license costs. Deploy our cloud based PKI and signature solutions in your AWS or Azure cloud environment.

PrimeKey EJBCA Cloud and PrimeKey SignServer Cloud offer:

  • A turn-key solution including all required software on public Cloud: AWS and Azure
  • Single vendor supported and tested application stack
  • Out of the box support for cloud HSMs, AWS CloudHSM and Azure KeyVault
  • No upfront investment for hardware or PrimeKey’s software, you only pay for what you use
  • Quick and easy deployment, you are up and running in minutes
  • 30-days free trial*
  • Great possibilities for organizations that do not have on-premises IT infrastructure
  • Increased speed to operation/market
  • PrimeKey’s standard or premium support is included

EJBCA Enterprise Cloud

SignServer Enterprise Cloud

Cloud - cloud PKI deployment
PKI deployment - people having a meeting

Hybrid deployment – Combine and mix different options as it fits your needs over time

Enjoy the greatest flexibility by enabling cloud functions as appropriate while benefiting from being in control of selected PKI and signing functions with on-premises software or hardware or appliance deployments.

With a hybrid PKI and signing deployment solution from PrimeKey you can:

  • Benefit from all the advantages of PrimeKey PKI and signing deployment options at the same time.
    • For example, deploy Validation Authority (VA) and Registration Authority (RA) systems on the Cloud for ease of scale
    • Or deploy Certificate Authority (CA) systems on-premises (software or hardware appliance) for compliance and control, combine this with VAs and or RAs on the cloud.
  • Get great flexibility for future use cases and other expansions

Solution platform – Deploy your PKI and Signing solution with full flexibility 

Deploy your PKI and signing solution with full flexibility and access to source code with the Solution Platform deployment option. The on-premise solution platform is installed and operated from your on-prem servers and computing infrastructure. It utilizes your native computing resources and requires only a licensed copy of the solution platform software.

With our solution platform deployment option for PrimeKey EJBCA Enterprise and SignServer Enterprise, you can:

  • Pick your own software and hardware stack.
  • Leverage your investments in Hardware Security Modules (HSM).
  • Have complete freedom with configuration, deployment and customization of your PKI and signing solution.
  • Utilize any use case and be in complete control over performance and capacity of your PKI and signing solution.
  • Make it easier for support teams with separate responsibilities for application, server, hardware, database, network, and HSM.
  • Have full code control, including access to source code, with the possibility to add your own plugins and code extensions.
Deployment options

Get in touch!

Fill in your contact information below and we will get in touch with you.

    I accept that PrimeKey stores my information, and I accept cookies for analysis and business identification. Read more about cookies and privacy policy here.

How can we help?

    I accept that PrimeKey stores my information, and I accept cookies for analysis and business identification. Read more about cookies and privacy policy here.
Contact us