EJBCA® Cloud

With PrimeKey EJBCA Cloud, you get the world's most used PKI directly from your top cloud providers, AWS and Azure. Get started in just a few clicks with your fully customized instance, tailored to your environment.

Try it out on AWS Try it out on Azure

The world’s most used PKI

Feature-complete PKI

Supports all your PKI use cases and scales up and down based on your needs.  

Turn-key solution

Easier and faster deployment and maintenance with a complete and stable software technology stack that includes everything, not only the PKI software.

Security by design

Integrates with cloud-based hardware security module (HSM) options from AWS, Azure or others as well as your on-premises HSM. 


Alex Gregory
- Senior Director Cloud and SaaS Products

Features of EJBCA Cloud

PrimeKey's PKI in the cloud includes EJBCA Enterprise and offers a flexible and easy way to deploy and maintain a cloud-based enterprise PKI system. Get started in just a few clicks with your fully customized instance, tailored to your environment. Choose from several instance sizes, in many available regions so you get the perfect PKI solution for your organization. 


Easy to scale up or down

Whether you need to scale up your solution indefinitely, or grow your business a bit at a time, EJBCA Cloud lets you do that. It is easy to get started and you only pay for what you use. No long-term contracts or up-front commitments and you can leverage standard high availability configuration and clustering capabilities.


Available on AWS or Azure marketplace 

EJBCA Cloud is available on marketplaces such as Amazon Web Services (AWS) and Azure and is a part of PrimeKey's Infrastructure as a Service (IaaS) offering. EJBCA Cloud integrates with FIPS 140-2 Level 3 certified HSMs via AWS or Azure cloud services. Or if you prefer, you can also combine EJBCA Cloud with a standard on-premises HSM via, for example, AWS Direct Connect or Azure Express Route. 

EJBCA Enterprise is Common Criteria certified, as well as FIPS 201-2. Internal PrimeKey processes are ISO 27001, ISO 9001 and ISO 14001 certified. Thus enabling a turnkey PKI system for government agencies looking for cloud solutions on AWS GovCloud and Azure Government. 


Easy configuration and integration

A configuration wizard makes installation simple while allowing for integrations into services like cloud-hosted databases, HSM integrations and CA configuration in both AWS and Azure.


We are here - solid PKI, digital signature and cryptography expertise

Take advantage of best practices, how-to-guides, support, training, implementation help and professional services from PrimeKey as a long-term and well-renowned PKI, signing and cryptography vendor. 

Related resources

EJBCA Enterprise
PKI migration

Migrating to Microsoft Azure with a Modern PKI

Taking the holistic approach on your migration to the cloud Security cannot be an afterthought. The one thing you can be certain of is that the need for certificates will grow as your business is digitalized. A holistic approach on cloud migration, in...
Blog post
EJBCA Enterprise

EJBCA, Microsoft and open source: How Azure brought everything together

It used to be uncommon to mention open source and Microsoft in one sentence. PrimeKey’s open source history is no exception, and used to distance us from Microsoft. Read on to learn about the transformation journey of EJBCA and Microsoft during the past...
On-demand webinar

EJBCA DevSecOps with Ansible – Automating PKI Deployments

EJBCA DevSecOps with Ansible  About how to automate PKI deployments and the rationale behind leveraging automation to set up PKI environments. By leveraging automation to set up PKI environments, the time for deployments can be decreased by impressiv...

Try it out for free

Get started today with your 30 days free trial on AWS or Azure. 

EJBCA Cloud on AWS

Simply sign up and start trying EJBCA Cloud for free on AWS. 

EJBCA Cloud on Azure

Simply sign up and start trying EJBCA Cloud for free on Azure

How-to guides and tutorials

If you need help to get started, check out the following links: 

Stand-alone models

The Validation Authority is also available as a stand-alone model. 

EJBCA Validation Authority

EJBCA Validation Authority (VA) enables on-line verification of authentication and digitally signed transactions, by the use of OCSP or CRLs.

Read more

Customer stories from PKI implementations around the globe

communication tower. cell, radio and television antennas on top

EJBCA Enterprise, Telecom

Powering 5G innovation through security, open standards and flexible integration

Attorneys talking

EJBCA Enterprise, Enterprise, Trust Service Provider

Bundesnotarkammer – Innovation and security in German notaries

DGN Customer Story, PrimeKey

EJBCA Enterprise, Enterprise, Trust Service Provider

Securing and enabling German healthcare


Document signing, EJBCA Enterprise, SignServer Enterprise, Timestamping, Trust Service Provider

The Faroe Islands – Creating a Future-Proof National e-ID

vault and businessman

Bank & Finance, EJBCA Enterprise, Trust Service Provider

Bank-Verlag – Launching an eIDAS-compliant trust center for the German banking industry

EJBCA Telecom

EJBCA Enterprise, PKI migration, Trust Service Provider

Swisscom – Becoming eIDAS compliant and migrating from RSA to EJBCA Enterprise

Contact us

Fill in your contact information below and we will get in touch with you.