EJBCA PKI for Enterprises - A powerful and flexible certificate issuance and management system to issue and enable full life-cycle control of digital certificate and Certificate (CA), Registration (RA) and Validation Authorities (VA); enabling multiple use cases and standards compliance.
This RA instance requires an EJBCA Certificate Authority Instance to fully function.
EJBCA PKI for Enterprises - A powerful and flexible certificate issuance and management system to issue and enable full life-cycle control of digital certificates. This instance is an RA server that can be the client enrollment entry point for multiple CAs and levels of CAs. This node can be peer connected back to an EJBCA CA node an act as a reverse proxy for all enrollment protocols, APIs and web interfaces. This instance is not a Certificate Authority. Please choose one of the full instances if you need a Certificate Authority. This instance is designed to be peered with another EJBCA Enterprise CA instance for a fully separated certificate authority hierarchy. It can be paired with any EJBCA Enterprise Instance of equal version whether it be a cloud, PKI Appliance or on-prem software installation.
You must have an existing keypair to be able to access the admin UI of this instance once configured. You will be asked for the username of that keypair and the public certificate of the CA that issued it during the installation of this node.
EJBCA includes support for CloudHSM and AWS KMS, and has introduced support for the ACME protocol as well as a REST API. Please visit the EJBCA Enterprise Cloud documentation for a CloudHSM integration guide. This instance includes Standard Support but is functionally identical to the Premium Support listing.
Please contact us for discounts on annual and multi-node enterprise pricing at sales@keyfactor.com!
Highlights
An RA server that can be the client enrollment entry point for multiple CAs and levels of CAs. This node can be peer connected back to an EJBCA node an act as a reverse proxy for all enrollment protocols, APIs and web interfaces.
Supports peer connecting to an EJBCA node/cluster for enrollment leveraging REST or SOAP API's, EST, CMP, ACME, and SCEP protocols.
Support all common PKI Architectures, as well as many uncommon. Store keys in CloudHSM, AWS KMS, in a PKCS11 connected HSM, or in the database (for demo).
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
EJBCA Enterprise Cloud Registration Authority (RA) - Standard Support
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You pay by the hour for the EC2 instance size you run the Registration Authority on. The 17 options are instance types, not feature tiers, so each gives you the same software with different compute and memory. Pricing scales with the size you pick. The t2, t3, and t3a families are general-purpose instances across medium, large, xlarge, and 2xlarge sizes. The c5 family targets compute-heavy use in xlarge and 2xlarge. The m5a family offers large, xlarge, and 2xlarge options. There is no long-term commitment; billing runs usage-based for the hours you use.
Top-of-mind questions for buyers
What does each hourly instance type give me for running the Registration Authority?
Each option maps to one running EC2 instance of that size. The instance provides the compute and memory for the Registration Authority software. The t2, t3, t3a, and m5a families are general-purpose; the c5 family targets compute-heavy use. The software stays the same across every size.
Am I charged when the instance is stopped or powered off?
Hourly software charges apply only while the instance runs. A fully stopped instance does not accrue software charges. Note that underlying AWS storage and other infrastructure fees may still apply to stopped instances, separate from this software metering.
If I need more capacity later, do I have to commit upfront to a size?
No. Billing runs usage-based with no long-term commitment. You pay for the hours you run. If you need more capacity, you can move to a different instance size, and charges shift to that size's hourly rate.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.