Sold by: Keyfactor, Inc.
Deployed on AWS
Free Trial
SignServer Enterprise is a server-side digital signature software used to sign any digital document, and more. SignServer offers high performance and high availability and is designed to perform automated signatures (and other cryptographic operations on digital documents).
5
Overview
SignServer Enterprise is a server-side digital signature software used to sign any digital document, and more. SignServer offers high performance and high availability and is designed to perform automated signatures (and other cryptographic operations on digital documents). It is easy to adapt to customer specific needs by using plug-ins. SignServer Enterprise Cloud Edition now includes support for AWS CloudHSM. Please consult the EJBCA Enterprise Cloud Edition documentation for an integration guide.
Please contact us for discounts on annual and multi-node enterprise pricing at sales@keyfactor.com !
Highlights
- Sign code: MS Authenticode, Java including Android APK and Generic
- Sign documents: PDF, XML, XAdES (BES and T)
- Time Stamping: RFC 3161 and MS authenticode time stamps, ETSI compliant
Details
Sold by
Categories
Delivery method
Supported services
Delivery option
Latest version
Operating system
AmazonLinux 2023
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.large Recommended | $3.26 |
m3.large | $3.26 |
t2.2xlarge | $6.53 |
t2.medium | $2.67 |
t2.xlarge | $4.82 |
t3.medium | $2.67 |
t3.xlarge | $4.82 |
t3.2xlarge | $6.53 |
m5a.2xlarge | $6.53 |
m5a.large | $3.26 |
Dimensions summary
You pay by the hour for the EC2 instance size you run SignServer Enterprise Cloud Edition on, with Standard Support included. Pricing is usage-based, so costs track the hours each instance runs. The dimensions are not feature tiers; they are different compute sizes. Options span general-purpose families in several generations, including burstable and fixed-performance types, across small, large, extra-large, and double-extra-large sizes. You choose an instance that matches your signing workload and performance needs. Larger instances carry higher hourly rates. Running more or bigger instances raises your total cost.
Top-of-mind questions for buyers
Each dimension is a specific EC2 instance size, such as t3.large or m7a.2xlarge. You pay the hourly rate for whichever instance you run. The rate reflects the compute, memory, and vCPU capacity of that instance type. Larger instances cost more per hour.
Software charges meter running time only. A fully stopped instance does not accrue hourly software fees. Stopped instances may still incur underlying AWS storage charges for attached volumes, but those are separate from the SignServer software rate.
Yes. You choose the instance that matches your signing workload. If demand grows, you can run a larger instance or run more instances. SignServer supports clustering instances with failover and load balancing to scale signature request capacity.
www.keyfactor.com
Helpful?
Vendor refund policy
Please contact support@primekey.com for any refunds.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
https://docs.keyfactor.com/signserver-cloud/latest/signserver-cloud-aws-launch-guide
-
Launch instance, using Firefox point your web browser to instance IP.
-
Complete the wizard selecting the required options for deployment. For information on the wizard and its options, please visit the following link: https://docs.keyfactor.com/signserver-cloud/latest/configure-via-signserver-cloud-configuration-wizard
-
Retrieve Superadmin certificate via keystore URL at http://<ec2-instance-ip>/keystore. You will also be provided with a link to this from the base public IP address webpage. The username will be superadmin and the password will be the password you provided in the wizard in the previous step.
-
Download superadmin.p12 and import into FireFox under FireFox > Preferences > Privacy and Security > Certificates > View Certificates > Your Certificates > Import. The password to the p12 certificate file will be the Instance-ID. Click administration web link (or navigate to http://<ec2-instance-ip>/signserver/adminweb/) to start using SignServer.
Resources
Support
Vendor support
Product Support: To register with Keyfactor Support, please send an email to marketplace-support@keyfactor.com and note that you are an AWS customer. Please note that Keyfactor Support has no other way to identify you as a Keyfactor customer unless you first contact us at marketplace-support@keyfactor.com . You will then be asked to fill out a questionnaire so that we can identify you in our system. Please do not expect a response from support without completing this process first.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Keyfactor, Inc.
By AppViewX
By COSMIAN
Top
10
In Device Security
AI generated from product descriptions
Document Signing Formats
Supports signing of PDF, XML, and XAdES (BES and T) document formats
Code Signing Capabilities
Enables signing of MS Authenticode, Java including Android APK, and Generic code formats
Time Stamping Protocol Support
Implements RFC 3161 and MS Authenticode time stamps with ETSI compliance
Hardware Security Module Integration
Supports integration with AWS CloudHSM for cryptographic operations
Extensibility Through Plugins
Provides plug-in architecture for customization to specific customer requirements
Hardware Security Module Integration
FIPS 140-2 Level 3 validated Cloud HSMs utilized for securing Certificate Authority keys with high availability
Post-Quantum Cryptography Support
Support for NIST-standardized PQC encryption algorithms including Dilithium, SPHINCS+, and Falcon for quantum-resistant certificate issuance
Certificate Authority Provisioning
Enterprise-grade Certificate Authority provisioned in minutes with virtual key ceremonies and no complex hardware or software infrastructure required
Certificate Lifecycle Management Automation
Integrated end-to-end certificate lifecycle management automation for provisioning certificates to all endpoints across private and public certificates from centralized console
Access Control and Security Policies
Strict access and security policies enforced for Certificate Authority management including M of N control for all CA-related operations
Key Lifecycle Management
Supports comprehensive key and certificate lifecycle management including key storage, generation, rotation, distribution, and usage policies.
Cryptographic Algorithm Support
Implements FIPS 140-3 validated encryption libraries, Covercrypt for post-quantum resistance with access policy capabilities, and Findex for search encryption functionality.
Public Key Infrastructure Integration
Provides seamless integration with external Public Key Infrastructure systems for managing keys and certificates beyond organizational boundaries.
Multi-Tenant Key Management
Delivers on-the-fly encryption and decryption key solutions with support for managing sensitive data across multiple domains including workspace, research and development, human resources, and electronic communications.
Standard contract
No
No
Customer reviews
Tarandeep Kaur
Automated signing has transformed our releases and has maintained continuous compliant delivery
Reviewed on Oct 31, 2026
Review from a verified AWS customer
What is our primary use case?
SignServer by Keyfactor is our main solution to secure our entire software release lifecycle at Flash. It helps us run automated server-side code signing, container image signing, and hardware backend time stamping across our AI model deployment artifacts and firmware builds. We rely on this to maintain strict zero-time availability for our build, and it assists us with AWS CloudHSM integration, which helps us ensure continuous compliance with modern code signing security standards.
Using SignServer by Keyfactor for code signing and container image signing has changed our release process significantly and improved our workflow. Due to the signing process, we have seen guaranteed rapid intervention of the signing pipeline halts, which would otherwise block all production releases. This has mitigated upcoming risk and provided us dedicated support to maintain zero downtime availability for our build systems. Since server-side code signing is automated, we ensure that the overall code is always potentially ready to ship and be tested in all kinds of environments.
How has it helped my organization?
SignServer by Keyfactor has positively impacted our organization by realizing the full ROI recovered within six months of deployment. This has happened by eliminating build pipeline blockages and avoiding costly PKI deployment misconfigurations. It has helped us streamline processes and cut down on unnecessary costs that were previously spent on mitigation and configurations. We have seen an 80% decrease in release blockers related to code signing failures, which dropped from four hours to just 15 minutes to resolve due to immediate 24/7 PKI specialist support. We have saved at least a billion dollars in developer productivity by offloading PKI management, HSM key rotation, and SignServer by Keyfactor upgrades to the support team. Our internal DevOps engineer has saved at least 25 hours per week, freeing up 2.5 full-time engineers to focus strictly on our AI deployment pipelines. Additionally, we have seen zero security compliance findings, as the architecture provided by SignServer by Keyfactor support ensures we completely follow 100% compliant and strict supply chain security guidelines, preventing any potential audit penalties or delays in client contracts.
Since the team was able to free up at least 25 hours per week, this has helped us pick up on other priority tasks. It has had a positive impact where the DevOps engineers can now focus on other developments rather than configurations and debugging. This time is being used proactively on other features.
What is most valuable?
SignServer by Keyfactor offers multiple valuable functionalities. First, the cryptographic hardware security modules, HSM, are notoriously complex, and the direct engineering help provided to configure SignServer by Keyfactor with AWS CloudHSM for non-exportable private key management is commendable. Second is the 15-minute SLA for severity one outages, which guarantees rapid intervention if the signing pipeline halts, blocking all production releases and sign-offs. Additionally, they provide direct access to support engineers specialized in public key infrastructure and security aspects who understand both the SignServer by Keyfactor backend and AWS infrastructure. Lastly, the streamlined purchasing and renewal process aligned with our AWS Enterprise Discount Program commitments adds significant value.
During our last release, release two, we faced a code issue that almost prevented us from going live. Due to the dedicated support engineer with the SignServer by Keyfactor backend, they provided real-time support and resolved our query within 45 minutes, offering a practical solution to the problem we were facing.
The governance and security of SignServer by Keyfactor are really strong. The data is completely secure and audit-ready, making governance and security a significant strength.
The accuracy and reliability of the AI output provided by SignServer by Keyfactor is great, and I have witnessed 100% accuracy from the AI agents.
Integration with other AWS services is excellent. The connections with Amazon's HSM and AWS HSM have been excellent so far.
What needs improvement?
SignServer by Keyfactor is performing great, and I do not need any improvements at this time. Everything about SignServer by Keyfactor is good.
For how long have I used the solution?
I have been using SignServer by Keyfactor in the organization for the last two years.
What do I think about the stability of the solution?
SignServer by Keyfactor is a very stable solution, and we have not encountered any challenges so far.
What do I think about the scalability of the solution?
SignServer by Keyfactor is definitely a scalable solution; we are handling it for over 1 million users, and the software remains intact without any issues.
How are customer service and support?
The customer support is great; they solved our problem within 45 minutes, so I would give them a 10 out of 10.
Which solution did I use previously and why did I switch?
We did not previously use a different solution; SignServer by Keyfactor was our first choice.
How was the initial setup?
Deployments of SignServer by Keyfactor were not at all challenging, supported by the SignServer by Keyfactor team, with the initial deployment completed within 24 hours of our purchase.
What about the implementation team?
The configuration process was very easy and was done with the help of our internal DevOps team and support SMEs. Configuration was completed within two to three hours, and everything was figured out successfully.
What was our ROI?
I have realized a full ROI recovered within six months of deployment through eliminating build pipeline blockages and avoiding costly PKI deployment misconfigurations. We have seen an 80% decrease in release blockers related to code signing failures, which dropped from four hours to just 15 minutes to resolve. We have saved at least a billion dollars in developer productivity by offloading PKI management, HSM key rotation, and SignServer by Keyfactor upgrades to the support team. Our internal DevOps engineer has saved at least 25 hours per week, freeing up 2.5 full-time engineers to focus strictly on our AI deployment pipelines.
What's my experience with pricing, setup cost, and licensing?
The metering and billing experience is really good, as we are using a pay-as-you-go model. While evaluating other options, we checked the pricing, metering, billing, and licensing, and we found that SignServer by Keyfactor is the best fit for our organization.
What other advice do I have?
I would rate SignServer by Keyfactor a five out of five. I gave it a five because the ROI we have achieved is great, and it was realized within two years, which is impressive. Anyone looking for a great solution should definitely consider SignServer by Keyfactor.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)