Sold by
EJBCA Enterprise Cloud - Standard Support
EJBCA PKI for Enterprises - A powerful and flexible certificate issuance and management system to issue and enable full life-cycle control of digital certificate and Certificate (CA), Registration (RA) and Validation Authorities (VA); enabling multiple use cases and standards compliance.
Reviews (40)
Budi Muhamad
Digital signatures have strengthened compliance and user access control but still need performance tuning
Reviewed on Oct 23, 2026
Review provided by PeerSpot
What is our primary use case?
My main use case for EJBCA Enterprise is for certificate issuance for users and in the digital signature company.
A specific example of how I use EJBCA Enterprise for certificate issuance and digital signatures in my company is that digital signatures are used in my regions for signing PDF documents in business-to-customer business models, and our regulatory compliance is aligned with the Ministry of Information and Digital as a root CA in Indonesian regions.
EJBCA Enterprise is only used for digital signatures in my company and for generating TLS or SSL certificates for internal users.
How has it helped my organization?
EJBCA Enterprise has positively impacted our organization. However, we still struggle with regulatory compliance. EJBCA Enterprise is not used or approved for public use at this time, as we currently only use it internally until we receive permission to make the product public, allowing customers to use our applications with EJBCA Enterprise as the certificate tool for issuance.
Internally, EJBCA Enterprise helps my team with multi-factor authentication for accessing EJBCA Enterprise as our core system. We can install certificates for super administrators, so not all internal staff can use EJBCA Enterprise—only designated personnel.
What is most valuable?
The best features EJBCA Enterprise offers are that it is very easy to install, especially with the appliance or OVA version we are using. It integrates easily with HSM, it is easy to monitor because it has a good GUI and website interface, and it is more secure than other competitors.
The features that help my team day-to-day, such as easy integration with HSM and having a good GUI, allow us to simply deploy EJBCA Enterprise into virtual machines. The appliance website provides options to integrate with HSM by simply inputting the IP and port to test the connections, ensuring all integrations are successfully connected.
The new version of EJBCA Enterprise allows us to back up the system and logs more easily, providing a restore menu in the appliance web interface.
What needs improvement?
EJBCA Enterprise can be improved once we start the digital signature business and after our business makes a decision to use EJBCA Enterprise at scale.
I chose a rating of seven based on my seven years of experience. I assigned a three rating because EJBCA Enterprise is a high-resource system, and there are instances where the CPU peaks for no apparent reason, making it difficult to investigate.
For how long have I used the solution?
I have been using EJBCA Enterprise for almost seven years.
What do I think about the scalability of the solution?
We have encountered sudden issues within our company related to our core systems regarding EJBCA Enterprise's scalability.
How are customer service and support?
EJBCA Enterprise provides access to their support, which is very helpful.
EJBCA Enterprise's customer support always responds to our issues when we submit tickets from the Keyfactor principal portals.
I rate the customer support a six.
Which solution did I use previously and why did I switch?
From the beginning, we made a decision to start using EJBCA Enterprise in our company.
What was our ROI?
EJBCA Enterprise is our core system. The employees needed are not for using EJBCA Enterprise but for serving our public users.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing shows that it is very high and expensive. The setup cost is manageable, but licensing is expensive each year.
What other advice do I have?
On a scale of one to ten, I rate EJBCA Enterprise a seven.
Regarding EJBCA Enterprise's AI capabilities, I recommend its governance and security features, as they provide very high security through multi-factor authentication, login via certificates, and options for access control for those who can use EJBCA Enterprise.
My advice to others considering EJBCA Enterprise is that I recommend using the new version with the OVA version, especially the appliance for on-premises deployment, as it is very easy to install, integrate, and work with APIs, along with other components such as EJBCA Enterprise as a certificate authority or EJBCA Enterprise as a validation authority, including other products from Keyfactor such as SignServer and HSM.
alaa eddine b.
Easy CI/CD Setup and Responsive Support
Reviewed on Oct 01, 2026
Review provided by G2
What do you like best about the product?
CICD version and facility to install. reactivity of the support
What do you dislike about the product?
log stack trace not very verbose and clear
What problems is the product solving and how is that benefiting you?
ACME, MSAE to automate our lifecycle certificate
Information Technology and Services
Flexible, Scalable, Standards-Based PKI Platform
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
flexibility and scalability. It provides a robust, standards-based PKI platform that can support a wide range of use cases
What do you dislike about the product?
the initial configuration and administration can be challenging for organizations with limited PKI experience.
What problems is the product solving and how is that benefiting you?
automate and scale certificate and PKI management
Josibeth C.
Simplicity and Efficiency in Certificate Management
Reviewed on Dec 11, 2025
Review provided by G2
What do you like best about the product?
I really like the simplicity of Keyfactor EJBCA®. It is very easy to understand, manage, and configure. There is a large amount of manuals available to set up the service, whether with a container or directly from the source code, and it was quite easy for us to modify the code without any problem.
What do you dislike about the product?
The most complicated issue that is causing us some friction now would be the disconnection with the HSM services. I understand it's due to the type of library, the PKCS11, used for this type of connection, but it's what could cause us some trouble at the moment. We need to be vigilant; if the connection drops, reestablish it and restart WildFly if we have a token disconnection.
What problems is the product solving and how is that benefiting you?
Keyfactor EJBCA® has simplified setting up a PKI quickly and easily, meeting the required standards in Chile. The documentation is clear, facilitating the administration, configuration, and modification of the software according to our needs.
David T. K.
Powerful PKI toolset, with a steep step-up to get value
Reviewed on Oct 07, 2025
Review provided by G2
What do you like best about the product?
EJBCA offers a wealth of capabilities, enabling virtually all workflows for enrolling, managing, and distributing certificates. EJBCA often implements leading-edge features ahead of other PKI toolkits, enabling early access to capabilities.
What do you dislike about the product?
Implementing EJBCA is challenging, when using the straightforward software distribution methods. I know this can be remedied when using virtual appliances on either a virtualization platform or containers platform.
What problems is the product solving and how is that benefiting you?
We anticipate EJBCA solving hands-off certificate enrollment/renewal, as well as enabling us to offer quantum-safe certificates to early adopters.
Computer & Network Security
Good overall product
Reviewed on Oct 07, 2025
Review provided by G2
What do you like best about the product?
you can create multiple CAs in one machine.
What do you dislike about the product?
RA web UX/UI needs to be improved as it is hard sometimes to know exactly what to do
What problems is the product solving and how is that benefiting you?
security and ease of use
Alston Bejo P.
User Experience and Onboarding
Reviewed on Sep 21, 2025
Review provided by G2
What do you like best about the product?
Keyfactor EJBCA is built with a comprehensive REST API. This is crucial for a PKI management tool like Keyfactor Command, as it allows for programmatic and automated lifecycle management of certificates. Instead of manual certificate requests, the API enables Keyfactor Command to enroll, renew, and revoke certificates on a massive scale, which is the entire purpose of a streamlined PKI management system.
What do you dislike about the product?
The platform is incredibly powerful, but the sheer number of features and the complex UI make it feel like a tool for PKI experts, not for general IT administrators. A smoother onboarding process or more intuitive UI similar to keyfactor command for handling common tasks would be a massive improvement
What problems is the product solving and how is that benefiting you?
while the POC may have hit a snag, the underlying architecture of Keyfactor EJBCA is what makes it a premier choice for integration with a PKI management tool.
Telecommunications
Consistently Reliable and Flexible PKI Platform
Reviewed on Sep 12, 2025
Review provided by G2
What do you like best about the product?
What I like best about Keyfactor EJBCA is its reliability and flexibility. It fully meets our security and compliance requirements, and over the years it has consistently proven to be a stable and dependable solution. In addition, the support team has always provided prompt and precise feedback whenever needed.
What do you dislike about the product?
Overall, there is not much to dislike about Keyfactor EJBCA. The documentation could be even more comprehensive in some advanced areas, but the support team has always been very responsive and helpful in clarifying any doubts.
What problems is the product solving and how is that benefiting you?
Keyfactor EJBCA is helping us manage our public key infrastructure reliably and securely. It ensures compliance with our security requirements, simplifies certificate management, and gives us the confidence that our systems are protected.
Daniela P.
Easy to deploy, supports multiple protocols and integrations
Reviewed on Aug 12, 2025
Review provided by G2
What do you like best about the product?
Deployment of the hardware and software appliances process is straightforward, same with the regular update process. Deployment of trust chain process is easy enough. REST APIs are available, integration with Microsoft world is possible. It seems ACME, EST, CMP protocols are available as well, however we have not tested them yet.
What do you dislike about the product?
Replacement of hardware seems to happen more often than desired, I would expect to keep hardware until its end of life; however, we are forced now, after less than 2 years after purchasing the appliances, to migrate to different hardware. It was a bit difficult to comprehend the concepts of Certificate and End Entity profiles and why they are split into two separate configurations. OCSP configuration is cumbersome, OCSP signer certificates are not being renewed automatically. Trainings and troubleshooting information is not much available. Reporting could be improved, it only allows 500 certificates to be listed. Does not allow permissions to be configured on profiles.
What problems is the product solving and how is that benefiting you?
We need a PKI that is supported and that can be integrated with our existing infrastructure to enable certificate deployment
Government Administration
Need help with your messy certificate environment? Just replace it with keyfactor
Reviewed on Aug 06, 2025
Review provided by G2
What do you like best about the product?
Being able to kill off our onprem CAs and use your hosted solution takes a huge load off of our team. As a member of the security team I love that it's one less thing we have to worry about. Also, the ease of deploying and replacing certificates ensures we're never in a spot where a cert is going to expire and nobody knows where to go or what to do. A true lifesaver.
What do you dislike about the product?
Honestly nothing, it truly hits all of the marks. Maybe have better docs? They are already pretty good though 😂
What problems is the product solving and how is that benefiting you?
Replacement of our onprem CA, and automating the replacement of certificates. Huge time savings, security improvements, and less accidental downtime caused by cert issues.