Migrating to PrimeKey EJBCA from RSA Digital Certificate Solution

CA Migration and Consolidation Best Practices by PrimeKey

Migrating from RSA PKI

For organizations currently utilizing RSA Digital Certificate Solutions it is urgent to find a new PKI solution, as January 31st, 2018 marks the end of the extended support for the product. PrimeKey has helped many organizations to smoothly migrate their PKI solution from RSA to EJBCA Enterprise and we know how to make the process both efficient and secure.

A Step-by-Step Guide

To minimize complexity when migrating from RSA Digital Certificate solutions, Primekey have developed a migration tool readily available to organizations moving to PrimeKey EJBCA. The following step-by-step approach make the transition project scope predictable and secure:

  1. Map the existing RSA certificate jurisdictions and extension profiles to EJBCA certificate and end-entity profiles
  2. Set up EJBCA Enterprise to access the HSM used for CA keys
  3. Configure EJBCA Enterprise with existing CA certificates to support defined certificate and revocation services.
  4. Import existing certificates and CRL information using the PrimeKey migration tool.
  5. Set up integration points for certificate management
  6. Test complete set of end to end use cases and services.

With the above steps completed, all that remains is the decommission of the old CA:s. PrimeKeys professional services and support staff have successfully conducted a vast number of migrations, and will be there to help you all the way.

Benefits of migrating to PrimeKey EJBCA

When migrating to EJBCA, it is common to see a number of benefits beyond the core PKI capabilities:

  • An optimized offering of certificate services as old services are discontinued and new services are set up based on more modern standards.
  • Elimination of proprietary and outdated interfaces.
  • A more homogeneous environment that is easier and more cost effective to maintain.

With PrimeKey EJBCA you can rest assured that your organization has a solution that will accommodate current and future PKI needs. The benefits of PrimeKeys PKI solutions include:

  • Proven. As one of the world’s leading companies for PKI solutions, PrimeKey has developed successful technologies such as EJBCA Enterprise, SignServer Enterprise and the PrimeKey PKI Appliance. These products have been proven in a range of circumstances, from critical telecom and power infrastructure to smart products from several of the world’s most recognized brands and national e-IDs.
  • Scalable. Using either PrimeKey EJBCA Enterprise Software or the PrimeKey PKI Appliance you can rest assured that whether you are looking to issue and validate 10 or 10 billion certificates, the solution scales with your business. In addition, a PrimeKey PKI solution can scale across different use cases – from enterprise PKI to large-scale IoT and beyond.
  • Unconstrained. PrimeKey gives you the choice of – and the choice to combine – on premise, cloud, as a hardware appliance or software-only PKI solutions. This means the infrastructure is deployed in manner best suited for your business needs and can flexibly grow and expand over time.

PrimeKey PKI

EJBCA Enterprise

EJBCA Enterprise is a powerful and flexible Certificate Authority and a complete PKI (Public Key Infrastructure) Management System.

EJBCA Validation Authority

EJBCA Validation Authority (VA) enables on-line verification of authentication and digitally signed transactions.

Deployment options – Software, Appliance, Cloud or Hybrid

PrimeKey understands that organizations have unique business challenges, including security requirements, budgets and the availability of internal resources. We give you the choice of and the choice to combine – Software, hardware Appliance and Cloud deployments for your PKI solution. This means the infrastructure can be deployed in the manner best suited to your business needs and can grow flexibly and expand over time.

Your deployment options

Get in touch with us

Fill in your contact information below and we will get in touch with you.

    I accept that PrimeKey stores my information, and I accept cookies for analysis and business identification. Read more about cookies and privacy policy here.