PrimeKey Open Training

Attend our 3-day training course that covers EJBCA Enterprise, SignServer Enterprise and the EJBCA Appliance. The training is open to partners and customers who use Enterprise editions of EJBCA and SignServer. 

Register now

PrimeKey Open Training on PrimeKey products

Upcoming trainings

The 3-day PrimeKey Open Trainings are offered on the following dates in 2022:


  • April 12-14, 2022
  • October 4-6, 2022


  • February 15-17, 2022
  • June 7-9, 2022
  • October 4-6, 2022

Customer feedback

It was outlined very well,  I loved how it was timed down to the minute.. Everyone was very knowledgable.

– Anonymous

Overall a very good training for EJBCA and very well organized and executed.


The trainers were excellent in working with me since a lot of the course was steered more to operations. It was all good information.

– Anonymous

About PrimeKey Open Training 

The training is conducted over three working days and focuses on the installation and administration of EJBCA Enterprise, SignServer Enterprise and EJBCA Appliance.

The fee to participate in PrimeKey Open Training is €2000 in Europe and $2000 in the US per attendee.

We currently offer both on-site and online Open Trainings. If you are interested in attending on-site, please read our policy here: Covid-19 and PrimeKey Open Training

Day 1, EJBCA Enterprise Administration

  • Introduction to PrimeKey and PKI
  • Installation, HSM integration and hardening (OS and Application)
  • The Appliance and the SEE
  • Clustering and high availabilityIntroduction to EJBCA and overview
  • Audit log protection
  • Creating and configuring CA’s
  • Creating and managing certificate profiles
  • Managing certificate life cycle (revocation, resistance etc.)
  • Creating and managing roles

Day 2, Advanced EJBCA Enterprise Administration

  • Configuring approvals (four eyes principle)
  • Using key recovery
  • How to integrate with EJBCA – SOAP, REST, EST, SCEP, CMP, ACME
  • CAA and key validation
  • Setup of TLS communication from CA to VA or RA
  • Configuring a VA and external RA
  • Overview of publishers, group publishers and services in EJBCA
  • EJBCA command line interface
  • Long term maintenance including backup and restore

Day 3, SignServer Enterprise

  • Introduction to SignServer
  • Installation and HSM integration
  • Signing overview – Code Signing, Time stamp, XML, PDF signing etc.
  • SignServer overview
  • Managing administrators in SignServer
  • Creating, managing and storing keys
  • Creating different types of Signers – including Java, MS Authenticode
  • Signing server side and signing client side with larger files
  • Creating workers
  • Viewing the audit log and archive
  • Signature validation
  • EPass port – concepts and how to use SignServer with EJBCA for ePassports and eID’s
  • Automatic key and certificates renewal
  • How to integrate with SignServer
  • Long term maintenance including backup and restore

Register now

Fill in your contact information below to register for PrimeKey Open Training. Please note that seats are limited at each training. Sign up soon to reserve your spot!