EJBCA - The J2EE Certificate Authority
Search ejbca.org for:

Home

EJBCA Promotion: SafeSign IC & CrypToken bundle

Note
SafeSign IC provides strong authentication and smart card logon on Windows, Linux and MAC. Combined with the CCID compatible steel Marx CrypToken USB token it is a perfect solution to use with an EJBCA PKI infrastructure.
For more information or an evaluation kit visit www.aeteurope.com.

This evaluation kit has been tested with EJBCA on both GNU/Linux, Mac OS X and Windows, and it works good!
Note that is an AET offer, EJBCA does not get paid for this announcement.

Latest News

Note
EJBCA 3.6.1 is now available for download.
SHA1 checksum: ac2def7c4072f357eccae9ab5c953b39c87585b7

External RA API 3.6.0 is now available for download.
SHA1 checksum: ed4ca78dcabc7136fff43f3c3265f542463a9044
Note
Presentations from the first EJBCA conference in Paris, 31st of January 2007, are available here.

New Windows Smart card logon guide available.

EJBCA

EJBCA is a fully functional Certificate Authority. Based on J2EE technology it constitutes a robust, high performance and component based CA. Both flexible and platform independent, EJBCA can be used standalone or integrated in any J2EE application.

EJBCA is an enterprise class PKI, meaning that you can use EJBCA to build a complete PKI infrastructure for your organisation. If you only want to issue a few single certificates for testing, there are probably options that will get you started quicker, but if you want a serious PKI we recommend EJBCA.

EJBCA has everything for your trustcenter. Contact us for more info.

You can use EJBCA to issue certificates for different purposes such as:

  • Strong authentication for users accessing your intranet/extranet/internet resources.
  • Secure communication with SSL servers and SSL clients.
  • Smart card logon to Windows and/or Linux.
  • Signing and enrypting email.
  • VPN connections by issuing certificates to your VPN routers such as OpenVPN, Cisco, Juniper etc.
  • Client VPN access with certificates in users VPN clients.
  • Single sign-on by using a single certificate to secure logon to web applications.
  • Creating signed documents.
  • Issue citizen certificates for access to government resourses, used in passports etc.
  • ... and many many more ...

Together with sister projects (see Complimentary software) of EJBCA you can also:

  • Get central trusted Time Stamps for you electronically signed documents.
  • Perform central signing of document.
  • Sign electronic passport data (MRTD).
  • Issue hard tokens (smart cards) and manage the complete lifecycle of cards and certificates.
  • ... and many many more ...

Open Source

This software is OSI Certified Open Source Software. OSI Certified is a certification mark of the Open Source Initiative.

The source code of EJBCA is hosted on Sourceforge.net and all downloads include the complete source code can be downloaded from there.
If you want to contribute to EJBCA, please see Contribute to EJBCA

Support and development

Commercial support, development and integration for EJBCA is available through PrimeKey Solutions.

Sponsors

Here is a list of some of the good organizations that have sponsored development of certain features in EJBCA.

EJBCA 3.1 and later contains support for nCipher HSM. The development of this functionality was sponsored by Linagora, www.linagora.com.

New features in EJBCA 3.2 such as QC statement and external OCSP responders was sponsored by CTec Security Solutions, http://www.commguard.com/.

EJBCA 3.3 and later contains support for LunaHSM (SafeNet). The development of this functionality was sponsored by Atos Worldline http://www.atosworldline.com/index_FR.htm and done with the support of Linagora http://www.linagora.com.

New features in EJBCA 3.3 such as Internal RA Approval and Subject Directory Attributes was sponsored by Simetri Yazilim A.S., http://www.simetri.com/.

New features in EJBCA 3.4 such as CMP, XKMS, services framework and much more was sponsored by GIE Cartes Bancaires and Linagora.

The Marlin Trust Management Organization (MTMO) will be using EJBCA to provide key management services for the commercial adoption of Marlin DRM. EJBCA 3.4.0 supports RSA and ECC implementations of the Marlin PKI infrastructure.
ECC implementation and other improvements were implemented with the support of the MTMO.

EJBCA 3.5 contains generic PKCS#11 interface to HSMs, supporting among others the Utimaco CryptoServer. This development was sponsored by Utimaco.

EJBCA 3.7 contains support for CVC CAs used for EU EAC ePassports. This development was sponsored and contributed by the National Swedish Police Board.