EJBCA® Cloud

With PrimeKey EJBCA Cloud, you get the world's most used PKI directly from your top cloud providers, AWS and Azure. Get started in just a few clicks with your fully customized instance, tailored to your environment.

Try it out on AWS Try it out on Azure

The world’s most used PKI

Feature-complete PKI

Supports all your PKI use cases and scales up and down based on your needs.  

Turn-key solution

Easier and faster deployment and maintenance with a complete and stable software technology stack that includes everything, not only the PKI software.

Security by design

Integrates with cloud-based hardware security module (HSM) options from AWS, Azure or others as well as your on-premises HSM. 


Alex Gregory
- Senior Director Cloud and SaaS Products

Features of EJBCA Cloud

PrimeKey's PKI in the cloud includes EJBCA Enterprise and offers a flexible and easy way to deploy and maintain a cloud-based enterprise PKI system. Get started in just a few clicks with your fully customized instance, tailored to your environment. Choose from several instance sizes, in many available regions so you get the perfect PKI solution for your organization. 


Easy to scale up or down

Whether you need to scale up your solution indefinitely, or grow your business a bit at a time, EJBCA Cloud lets you do that. It is easy to get started and you only pay for what you use. No long-term contracts or up-front commitments and you can leverage standard high availability configuration and clustering capabilities.


Available on AWS or Azure marketplace 

EJBCA Cloud is available on marketplaces such as Amazon Web Services (AWS) and Azure and is a part of PrimeKey's Infrastructure as a Service (IaaS) offering. EJBCA Cloud integrates with FIPS 140-2 Level 3 certified HSMs via AWS or Azure cloud services. Or if you prefer, you can also combine EJBCA Cloud with a standard on-premises HSM via, for example, AWS Direct Connect or Azure Express Route. 

EJBCA Enterprise is Common Criteria certified, as well as FIPS 201-2. Internal PrimeKey processes are ISO 27001, ISO 9001 and ISO 14001 certified. Thus enabling a turnkey PKI system for government agencies looking for cloud solutions on AWS GovCloud and Azure Government. 


Easy configuration and integration

A configuration wizard makes installation simple while allowing for integrations into services like cloud-hosted databases, HSM integrations and CA configuration in both AWS and Azure.


We are here - solid PKI, digital signature and cryptography expertise

Take advantage of best practices, how-to-guides, support, training, implementation help and professional services from PrimeKey as a long-term and well-renowned PKI, signing and cryptography vendor. 

Related resources

tomas gustavsson
Blog post
Connected vehicles
EJBCA Enterprise

Securing the Identities of Connected Cars

Securing the identities of connected cars A Hybrid Approach to PKI Deployment for Modern Manufacturers Manufacturing is one of the most attacked industries, facing a range of cybersecurity challenges. The proliferation of DevOps and distributed IoT de...
Android signing schemes, compliance and crypto agility
EJBCA Enterprise
SignServer Cloud
SignServer Enterprise

Thales Data Protection on Demand with PrimeKey’s Flexible Deployment Options

Thales Data Protection on Demand (DPoD) is a cloud-based HSM (Hardware Security Module) platform that provides on-demand encryption and key management services through an online marketplace. This means that there is no HSM hardware to buy, deploy and ma...
enabling security through PKI
On-demand webinar
Corporate PKI
EJBCA Enterprise
EJBCA Hardware Appliance
EJBCA Software Appliance
PKI migration

Webinar: Own your own risks – Modern manufacturers on-prem security journey to the Cloud

Let us demonstrate together with Thales how manufacturing organizations can benefit from robust and securely built PKI implementations. Date: 12 May Time: 11 AM CET Duration: 1 hour Presented by: Paul Hampton, Cyber Security Specialist, Thales Tom...

Try it out for free

Get started today with your 30 days free trial on AWS or Azure. 

EJBCA Cloud on AWS

Simply sign up and start trying EJBCA Cloud for free on AWS. 

EJBCA Cloud on Azure

Simply sign up and start trying EJBCA Cloud for free on Azure

How-to guides and tutorials

If you need help to get started, check out the following links: 

Stand-alone models

The Validation Authority is also available as a stand-alone model. 

EJBCA Validation Authority

EJBCA Validation Authority (VA) enables on-line verification of authentication and digitally signed transactions, by the use of OCSP or CRLs.

Read more

Customer stories from PKI implementations around the globe

communication tower. cell, radio and television antennas on top

EJBCA Enterprise, Telecom

Powering 5G innovation through security, open standards and flexible integration

Attorneys talking

EJBCA Enterprise, Enterprise, Trust Service Provider

Bundesnotarkammer – Innovation and security in German notaries

DGN Customer Story, PrimeKey

EJBCA Enterprise, Enterprise, Trust Service Provider

Securing and enabling German healthcare


Document signing, EJBCA Enterprise, SignServer Enterprise, Timestamping, Trust Service Provider

The Faroe Islands – Creating a Future-Proof National e-ID

vault and businessman

Bank & Finance, EJBCA Enterprise, Trust Service Provider

Bank-Verlag – Launching an eIDAS-compliant trust center for the German banking industry

EJBCA Telecom

EJBCA Enterprise, PKI migration, Trust Service Provider

Swisscom – Becoming eIDAS compliant and migrating from RSA to EJBCA Enterprise

Contact us

Fill in your contact information below and we will get in touch with you.