# Keyfactor EJBCA® Reviews
**Vendor:** Keyfactor  
**Category:** [Certificate Lifecycle Management (CLM) Software](https://www.g2.com/categories/certificate-lifecycle-management-clm)  
**Average Rating:** 4.5/5.0  
**Total Reviews:** 36
## About Keyfactor EJBCA®
Keyfactor is the industry leader in IoT and machine identity management. We enable companies of all sizes to seamlessly orchestrate every key and certificate, anywhere. From the creators of EJBCA Community, the world’s most widely used open-source CA software, Keyfactor EJBCA® Enterprise is a powerful PKI engine built for a wide array of use cases, including: - Enterprise IT to enable device and user authentication across your IT, DevOps, and cloud infrastructure. - Product Security to secure connected products and IoT devices by design with unique certificate-based identities. - Manufacturing to ensure trust in the manufacturing supply chain and industrial IoT (IIoT) environments.




## Keyfactor EJBCA® Reviews
  ### 1. Efficient Certificate Management with Keyfactor EJBCA SaaS: Balancing Ease and Robust Features

**Rating:** 4.5/5.0 stars

**Reviewed by:** Pranjul . | Technical Analyst, Enterprise (> 1000 emp.)

**Reviewed Date:** July 29, 2025

**What do you like best about Keyfactor EJBCA®?**

Keyfactor EJBCA SaaS excels in ease of use and implementation, making the process of certificate signing straightforward and efficient within our organisation. The platform offers a robust set of features that cater to various certificate management needs, and its integration capabilities are seamless, which is particularly beneficial for maintaining smooth operations across different systems. Additionally, the customer support has been responsive and helpful, ensuring that any issues are promptly addressed.

**What do you dislike about Keyfactor EJBCA®?**

Despite its strengths, there are a few areas where Keyfactor EJBCA could improve. Occasionally, the number of features can be overwhelming, especially for users who are new to the platform, potentially impacting ease of use. While customer support is generally good, there are times when more specialised assistance might be needed for complex issues. These aspects could benefit from refinement to enhance the overall user experience.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Keyfactor EJBCA® is solving several key problems related to certificate management and security within our organisation. Primarily, it addresses the need for efficient and secure Public Key Infrastructure (PKI) management. By automating and streamlining the process of certificate issuance, renewal, and revocation, it significantly reduces the risk of expired certificates and enhances overall security posture.

The benefits of using Keyfactor EJBCA® include:

1. Improved Security: It ensures that digital certificates are managed securely, reducing vulnerabilities associated with outdated or improperly managed certificates.

2. Operational Efficiency: Automating certificate processes using REST APIs saves time and resources, allowing IT teams to focus on other critical tasks.

3. Compliance: It helps maintain compliance with industry standards and regulations by providing reliable certificate management and audit capabilities.

4. Scalability: The platform can easily accommodate growing certificate needs as the organisation expands, without compromising performance or security.

Overall, Keyfactor EJBCA is enhancing our ability to manage certificates effectively, which in turn supports our security and operational goals.

  ### 2. Simplicity and Efficiency in Certificate Management

**Rating:** 5.0/5.0 stars

**Reviewed by:** Josibeth C.

**Reviewed Date:** December 11, 2025

**What do you like best about Keyfactor EJBCA®?**

I really like the simplicity of Keyfactor EJBCA®. It is very easy to understand, manage, and configure. There is a large amount of manuals available to set up the service, whether with a container or directly from the source code, and it was quite easy for us to modify the code without any problem.

**What do you dislike about Keyfactor EJBCA®?**

The most complicated issue that is causing us some friction now would be the disconnection with the HSM services. I understand it's due to the type of library, the PKCS11, used for this type of connection, but it's what could cause us some trouble at the moment. We need to be vigilant; if the connection drops, reestablish it and restart WildFly if we have a token disconnection.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Keyfactor EJBCA® has simplified setting up a PKI quickly and easily, meeting the required standards in Chile. The documentation is clear, facilitating the administration, configuration, and modification of the software according to our needs.

  ### 3. User Experience and Onboarding

**Rating:** 3.5/5.0 stars

**Reviewed by:** Alston Bejo P. | Senior Consultant -SME, Enterprise (> 1000 emp.)

**Reviewed Date:** September 21, 2025

**What do you like best about Keyfactor EJBCA®?**

Keyfactor EJBCA is built with a comprehensive REST API. This is crucial for a PKI management tool like Keyfactor Command, as it allows for programmatic and automated lifecycle management of certificates. Instead of manual certificate requests, the API enables Keyfactor Command to enroll, renew, and revoke certificates on a massive scale, which is the entire purpose of a streamlined PKI management system.

**What do you dislike about Keyfactor EJBCA®?**

The platform is incredibly powerful, but the sheer number of features and the complex UI make it feel like a tool for PKI experts, not for general IT administrators. A smoother onboarding process or more intuitive UI similar to keyfactor command for handling  common tasks would be a massive improvement

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

while the POC may have hit a snag, the underlying architecture of Keyfactor EJBCA is what makes it a premier choice for integration with a PKI management tool.

  ### 4. Quality environement production improvement

**Rating:** 4.5/5.0 stars

**Reviewed by:** Magatte M. | CTO PKI unit, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 18, 2025

**What do you like best about Keyfactor EJBCA®?**

Facility to set a cluster, event for remote location. it's a game changing for setting a DR site.
The constant improvement in feature like integrating PQC algorithm
There is an great effort to make EJBCA easy to implement and easy to use. Easy to integrate with a bunch of API technologies

**What do you dislike about Keyfactor EJBCA®?**

The log visualisation is too poor, you need to have an additionnal tool for that.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Operate a certificate Authority complying with ETSI 319 411 and our local regulation and law

  ### 5. Easy to deploy, supports multiple protocols and integrations

**Rating:** 4.5/5.0 stars

**Reviewed by:** Daniela P. | IT Expert, Enterprise (> 1000 emp.)

**Reviewed Date:** August 12, 2025

**What do you like best about Keyfactor EJBCA®?**

Deployment of the hardware and software appliances process is straight forward, same with the regular update process.
Deployment of trust chain process is easy enough.
REST APIs are available, integration with Microsoft world is possible.
It seems ACME, EST, CMP protocols are available as well, however we have not tested them yet.

**What do you dislike about Keyfactor EJBCA®?**

Replacement of hardware seems to happen more often than desired, i would expect to keep a hardware until its end of life however we are forced now after less than 2 years after purchasing the appliances, to migrate to different hardware.
It was a bit difficult to comprehend the concepts of Certificate and End Entity profiles and why they are split into two separate configuration.
OCSP configuration is cumbersome, OCSP signer certificates are not being renewed automatically.
Trainings and troubleshooting information is not much available.
Reporting could be improved, it only allows 500 certificates to be listed.
Does not allow permissions to be configured on profiles.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

We need a PKI that is supported and that can be integrated with our existing infrastructure to enable certificate deployment

  ### 6. Consistently Reliable and Flexible PKI Platform

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Telecommunications | Enterprise (> 1000 emp.)

**Reviewed Date:** September 12, 2025

**What do you like best about Keyfactor EJBCA®?**

"What I like best about Keyfactor EJBCA is its reliability and flexibility. It fully meets our security and compliance requirements, and over the years it has consistently proven to be a stable and dependable solution. In addition, the support team has always provided prompt and precise feedback whenever needed."

**What do you dislike about Keyfactor EJBCA®?**

"Overall, there is not much to dislike about Keyfactor EJBCA. The documentation could be even more comprehensive in some advanced areas, but the support team has always been very responsive and helpful in clarifying any doubts."

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Keyfactor EJBCA is helping us manage our public key infrastructure reliably and securely. It ensures compliance with our security requirements, simplifies certificate management, and gives us the confidence that our systems are protected.

  ### 7. Unparalleled comprehensive PKI solution with complicated UI

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

**Reviewed Date:** August 05, 2025

**What do you like best about Keyfactor EJBCA®?**

The rich set of features which can handle many use cases. 
Support of many standard PKI protocols like CMP, EST, SCEP, OCSP, ACME, etc. which allow integration with other solutions.
Customer support is working well and most of tickets were solved with satisfaction.
SaaS solution works without major outages for more than a year.

**What do you dislike about Keyfactor EJBCA®?**

It has very complex UI with user-unfriendly and inconsistent components. Software lacks good UX assessment. On the other side it provides many useful configuration options which increases a complexity as a side effect.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

It provides set of features which can cover automated certificate distribution to IoT (embedded) devices in large scale. Especially useful for that case are standard enrollment protocols and support of vendor certificates.

  ### 8. Powerful PKI toolset, with a steep step-up to get value

**Rating:** 4.0/5.0 stars

**Reviewed by:** David T. K. | Chief Architect and General Manager, Enterprise (> 1000 emp.)

**Reviewed Date:** October 07, 2025

**What do you like best about Keyfactor EJBCA®?**

EJBCA offers a wealth of capabilities, enabling virtually all workflows for enrolling, managing, and distributing certificates. EJBCA often implements leading-edge features ahead of other PKI toolkits, enabling early access to capabilities.

**What do you dislike about Keyfactor EJBCA®?**

Implementing EJBCA is challenging, when using the straightforward software distribution methods. I know this can be remedied when using virtual appliances on either a virtualization platform or containers platform.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

We anticipate EJBCA solving hands-off certificate enrollment/renewal, as well as enabling us to offer quantum-safe certificates to early adopters.

  ### 9. Suits for eID and trust service providers perfectly

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 30, 2025

**What do you like best about Keyfactor EJBCA®?**

We like the eIDAS and ETSI standards compatibility support.
It is mature open source stack -  well established CA engine with strong community and commercial backing (through Keyfactor).
Multi-tenant and role-ased access, API coverage (REST)

**What do you dislike about Keyfactor EJBCA®?**

Some doumentation gaps for edge/custom scenarious can be noticed. Limited built-in monitoring: out-of-the-box monitoring for ETSI-aligned audit events, certificate statistics, and compliance reporting is limited.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Fundamental backbone of Trust Service provider, for offering Timestamping service (SignServer) and  issuing qualified certificates (EJBCA) for critical infrastructure, what must meet highest eIDAS standards in Europe.

  ### 10. Need help with your messy certificate environment? Just replace it with keyfactor

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Government Administration | Enterprise (> 1000 emp.)

**Reviewed Date:** August 06, 2025

**What do you like best about Keyfactor EJBCA®?**

Being able to kill off our onprem CAs and use your hosted solution takes a huge load off of our team. As a member of the security team I love that it's one less thing we have to worry about. Also, the ease of deploying and replacing certificates ensures we're never in a spot where a cert is going to expire and nobody knows where to go or what to do. A true lifesaver.

**What do you dislike about Keyfactor EJBCA®?**

Honestly nothing, it truly hits all of the marks. Maybe have better docs? They are already pretty good though 😂

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Replacement of our onprem CA, and automating the replacement of certificates. Huge time savings, security improvements, and less accidental downtime caused by cert issues.

  ### 11. Keyfactor

**Rating:** 5.0/5.0 stars

**Reviewed by:** David H. | Principal Engineer, Enterprise (> 1000 emp.)

**Reviewed Date:** July 02, 2025

**What do you like best about Keyfactor EJBCA®?**

EJBCA has been our PKI solution for over 10 years. As it was with Primekey the response and support is excellent. UI is better over the years. Integration with HSM.

**What do you dislike about Keyfactor EJBCA®?**

My only complaint would be lack of source build. Though containerization does provide many advantages.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Providing a highly available PKI solution allowing us to support our customers

  ### 12. Awesome product

**Rating:** 4.5/5.0 stars

**Reviewed by:** Johnny R. | Information Security Manager, Enterprise (> 1000 emp.)

**Reviewed Date:** August 04, 2025

**What do you like best about Keyfactor EJBCA®?**

Easy to use, deploy, and administer, with tons of features.

**What do you dislike about Keyfactor EJBCA®?**

I think it would really be great if the current training could be extended to a more practical one

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

PKI infrastructure deployment

  ### 13. 6 years EJBCA

**Rating:** 4.5/5.0 stars

**Reviewed by:** Christian H. | Security Officer, Enterprise (> 1000 emp.)

**Reviewed Date:** August 05, 2025

**What do you like best about Keyfactor EJBCA®?**

EJBCA is a robust and secure Public Key Infrastructure (PKI) solution, especially when deployed as Keyfactor hardware appliance. EJBCA supports  a wide range of protocols and is compliant to common standards.

**What do you dislike about Keyfactor EJBCA®?**

The documentation lacks sometimes clarity and. depth

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

EJBCA ensures the security of communication and transactions.

  ### 14. EJBCA is great software and it does what it is suppose to do very well

**Rating:** 4.5/5.0 stars

**Reviewed by:** Md Sakib Nizam K. | DevOps Engineer - PKI &amp; Data Signing, Enterprise (> 1000 emp.)

**Reviewed Date:** August 05, 2025

**What do you like best about Keyfactor EJBCA®?**

It is a comprehensive and easy-to-use tool that has all the necessary features for managing a PKI hierarchy.

**What do you dislike about Keyfactor EJBCA®?**

The new EJBCA UI could have been better. I miss the old left panel quite a lot.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

It is maninly helps you to create and manage PKI hierarchy.

  ### 15. Wonderful product to go with for IOT related use cases

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Electrical/Electronic Manufacturing | Enterprise (> 1000 emp.)

**Reviewed Date:** July 28, 2025

**What do you like best about Keyfactor EJBCA®?**

Perfect for multi-tenant related use cases. Easy to use and scale when it comes to IOT identities.

**What do you dislike about Keyfactor EJBCA®?**

None from technology side. Once setup, it keeps on working for years.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Currently keyfactor is injecting millions of birth certificates in our IOT end points every month. Plus, we are using this to host our SAAS environment for multiple customers. Keyfactor provides us an isolation to host multiple SUB-CA's for various customers on a same instance which is really marvelous when it comes to a multi tenancy.

  ### 16. Ease of platform use and excellent customer service

**Rating:** 4.5/5.0 stars

**Reviewed by:** Vilfrena Jennifer H. | Security Engineer, Enterprise (> 1000 emp.)

**Reviewed Date:** January 10, 2025

**What do you like best about Keyfactor EJBCA®?**

1. Customer Support has been my favorite part of using EJBCA. PKI implementation and maintenance is a daunting task in itself but Support is always there every step of the way when needed and all are knowledgable and experts.

2. Error messages are usually self-explanatory and easy to troubleshoot.

**What do you dislike about Keyfactor EJBCA®?**

There needs to be notification from EJBCA when there's high database usage/exceeded limit. For example, few endpoints had over 10k active certs at a point and this was not flagged by EJBCA.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

We used RADIUS prior to implementing EJBCA which is an outdated protocol.

  ### 17. Good overall product

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.)

**Reviewed Date:** October 07, 2025

**What do you like best about Keyfactor EJBCA®?**

you can create multiple CAs in one machine.

**What do you dislike about Keyfactor EJBCA®?**

RA web UX/UI needs to be improved as it is hard sometimes to know exactly what to do

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

security and ease of use

  ### 18. High-performance corporate solution in the PKI environment

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Telecommunications | Enterprise (> 1000 emp.)

**Reviewed Date:** July 28, 2025

**What do you like best about Keyfactor EJBCA®?**

The overall system (PKI Appliance and with EJBCA) is an easy-to-administer, highly flexible solution.

**What do you dislike about Keyfactor EJBCA®?**

Table outputs are predefined. There are no customization options.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

I don't understand the question.

  ### 19. CLM needs

**Rating:** 4.0/5.0 stars

**Reviewed by:** Shikik J. | Principal Member Of Technical Staff, Enterprise (> 1000 emp.)

**Reviewed Date:** August 04, 2025

**What do you like best about Keyfactor EJBCA®?**

The functionality and potential to guard against cyber threats.

**What do you dislike about Keyfactor EJBCA®?**

Changed to the hardware rendering current versions unsupported iafter12/26

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Certificate PKI root of trust

  ### 20. Quality software and very flexible too

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jaime H. | PKI engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** March 04, 2025

**What do you like best about Keyfactor EJBCA®?**

I like the fact it has an open source basis. I can verify things are working as expected and I can fix things by myself if required.

**What do you dislike about Keyfactor EJBCA®?**

So the CE aspect of EJBCA in my opinion is not receiving too much attention: Jira is not available, some parts of EJBCA CE went to closed source JARS, Dovker image build is not open source.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

We are issuing publicly trusted TLS certificates.

  ### 21. Robust, Scalable and Automated!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Luciano P. | Cybersecurity Analyst, Small-Business (50 or fewer emp.)

**Reviewed Date:** January 14, 2025

**What do you like best about Keyfactor EJBCA®?**

It can handle many many certifications across diverse environments and it is ideal for my enterprise and I dont worry cause it cannot outgrow my system its made for both small and large companies

**What do you dislike about Keyfactor EJBCA®?**

It is too complex for small teams and also the cost of it as well.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Centralized Certification Management, Scalability of IoT Systems, IT compliance, Flexibility, Automatization. It is helping me with lifecycle management, reducing risks, seamless integration, making tailored security solutions, protecting against MITM attacks.

  ### 22. Good experience with EJBCA and Keyfactor

**Rating:** 4.5/5.0 stars

**Reviewed by:** Davi T. | Information Security Specialist, Enterprise (> 1000 emp.)

**Reviewed Date:** March 04, 2025

**What do you like best about Keyfactor EJBCA®?**

Keyfactor proved to be a great vendor providing support when needed and the appliances works perfectly.

**What do you dislike about Keyfactor EJBCA®?**

Nothing at the moment, but would be good to have more help during the implementation.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Setting up PKI

  ### 23. EJBCA

**Rating:** 4.5/5.0 stars

**Reviewed by:** Venkat S. | Senior DevOps Engineer, Enterprise (> 1000 emp.)

**Reviewed Date:** December 03, 2024

**What do you like best about Keyfactor EJBCA®?**

Well ,maintained document and best customer support as and when needed

**What do you dislike about Keyfactor EJBCA®?**

Document can still be improveed so that users can use a source

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

For in house PKI/CA/VA solution to sign the documents and code

  ### 24. Easy to use

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.)

**Reviewed Date:** March 04, 2025

**What do you like best about Keyfactor EJBCA®?**

It is easy to use, really gives 'turnkey' a good meaning

**What do you dislike about Keyfactor EJBCA®?**

automation capabilities are not complete

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Serving certificates for internal services

  ### 25. Innovative PKI appliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Altan A. | Senior Consultant, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 18, 2024

**What do you like best about Keyfactor EJBCA®?**

- Include a lot of RA protocols to auto enroll certificates (ACME, Microsoft Autoenrollment, EST , SCEP , REST-API, CMP)
- good manufacturer documentation
- good support
- PKI hardware appliance with an integrated HSM is easy to implement and integrate in the infrastructure 
- short update intervall that includes new features
- certificate and end entity search through the RA Web interface (very fast and easy to use)

**What do you dislike about Keyfactor EJBCA®?**

- missing responsiv GUI (Dynamic adaptation to screen sizes and resolutions)

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

The requirement to automate as much as possible when issuing certificates can be solved excellently with the interface protocols.

  ### 26. Amazing but there's room for improvement

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 15, 2025

**What do you like best about Keyfactor EJBCA®?**

It was simple  to integrate and has a lot of functionalities

**What do you dislike about Keyfactor EJBCA®?**

We had a problem with severel mis-issuances and that seems to be a result of your company not following the evolution of CAB Forum Baseline Requirements very strictly.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

User authentication across the laptop and mobile devices in the company.

  ### 27. Pros and cons of EJBCA

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kumar S. | Software Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 14, 2024

**What do you like best about Keyfactor EJBCA®?**

It's easy to create certificates that can be used for any server.

It allows users to develop additional functions or fix behavior quickly.

It's built on a Common Criteria-certified and NSA CSfC-approved PKI solution.

Implementation is easy and custome support is also good.

I have used frequently at that time this product.

Integration with other product is too easy.

**What do you dislike about Keyfactor EJBCA®?**

the main downside to Keyfactor EJBCA is that its admin GUI is confusing and unattractive, especially for those who are used to ADCS. Another user on AWS Marketplace says that the release notes are not clear.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Keyfactor EJBCA® solves digital identity, certificate, and key management issues for enterprises, resulting in enhanced security, simplified operations, and compliance adherence.

  ### 28. Comprehensive and Flexible PKI Solution Tailored for Modern Needs

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.)

**Reviewed Date:** March 01, 2024

**What do you like best about Keyfactor EJBCA®?**

Versatility, modular architecture, advanced multitenancy capabilities and comprehensive audit

**What do you dislike about Keyfactor EJBCA®?**

Complexity for new users. Users with very specific use cases will need more personalized support to optimize their PKI infrastructure

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

By offering real-time OCSP for checking the revocation status of certificates, EJBCA enhances the security posture of an organization. This immediate access to certificate status helps mitigate potential security breaches by ensuring timely revocation of compromised certificates.

**Official Response from Warsan  Ahmed:**

> Thank you for sharing your feedback. We're pleased to hear that EJBCA is enhancing the security posture of your organization by mitigating potential security breaches.

  ### 29. Very good but needs more transparency on bug fixes and more attention to evolving CABF regulations

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** March 19, 2024

**What do you like best about Keyfactor EJBCA®?**

Easy to integrate, rich of functionalities.

**What do you dislike about Keyfactor EJBCA®?**

Release notes do not clarify what bug fixes are really about. since access to JIRA tickets had been blocked a good time ago and never restored since.
Also, KeyFactor seems not to follow very closely the evolution of CAB Forum Baseline Requirements, and this has led more than once to mis-issuances that could have been avoided if KeyFactor was more attentive and pro-active.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

EJBCA was selected several years ago as our primary certificate server.

  ### 30. I setup and have been managing EJBCA servers.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Roy L. | Small-Business (50 or fewer emp.)

**Reviewed Date:** March 18, 2024

**What do you like best about Keyfactor EJBCA®?**

Fast response, technicology mature, and document is good.

**What do you dislike about Keyfactor EJBCA®?**

installation automation can be more friendly.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

We setup our own PKI system to issue certificate for device enrollment.

  ### 31. A versatile Certificate Authority

**Rating:** 4.5/5.0 stars

**Reviewed by:** Ivo R. | Software Architect, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 07, 2022

**What do you like best about Keyfactor EJBCA®?**

A versatile certificate authority fit for different use cases. It has a UI for manual management and many integrations for automated certificate issuance and management.

**What do you dislike about Keyfactor EJBCA®?**

The web UI looks a bit old fashion and could be better structured. There is no progress indicator for lengthy operations.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

EJBCA provides Public Key Infrastructure according to the security and industry best practices. We use a dedicated offline root CA, certificate chain hierarchy, integration with the HSM, separate operator duties and separate RA and CA functions.

  ### 32. EJBCA

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Consulting | Enterprise (> 1000 emp.)

**Reviewed Date:** February 29, 2024

**What do you like best about Keyfactor EJBCA®?**

Is the most complete solution of PKI I have ever seen.

**What do you dislike about Keyfactor EJBCA®?**

I have also check the HwApp solution and it has many limitations with respect to the software solution due to the architecture of the solution. Although very comfortable to avoid a very tedious deployment.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Many regulatory functionalities quickly implemented and available

**Official Response from Warsan  Ahmed:**

> We appreciate your feedback and are committed to continuously improving our solutions. Thank you for choosing Keyfactor EJBCA for your PKI needs.

  ### 33. Keyfactor EJBCA

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

**Reviewed Date:** December 28, 2023

**What do you like best about Keyfactor EJBCA®?**

Its ine of the most versatile software I've used lately for certificate management. Its ability to ability to work with multiple CAs and supports multitenancy, which is a plus when you have multiple clients using varied certificates.

**What do you dislike about Keyfactor EJBCA®?**

There's isnt must that I dislike at this point but the UI could be upgraded.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Certificate management for multi tenancy has become easier, especially when you have more than 20 clients.

**Official Response from Warsan  Ahmed:**

> We appreciate your feedback about the UI and will take it into consideration for future improvements. We're glad to hear that you find Keyfactor EJBCA versatile and effective for certificate management. 

  ### 34. PKI software you want if you can afford it

**Rating:** 4.0/5.0 stars

**Reviewed by:** Roman C. | PKI Architect, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 21, 2022

**What do you like best about Keyfactor EJBCA®?**

The EJBCA is strong and flexible PKI software that can handle probably any use case with digital certificates. Because it is open-source, it always provides an option to develop additional functions or quickly fix the behaviour, if needed. EJBCA gives you the possibility to quickly build your certification authority and set up required integration and automation procedures.

**What do you dislike about Keyfactor EJBCA®?**

The community version of the EJBCA does not provide enough flexibility and contribution that is required by most community projects. New and most important features are part of the subscription that you cannot afford when digital certificates are not part of your core business.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

When you are looking for the PKI software that can support you and is robust and reliable, EJBCA is a good choice.
If you would like to issue certificates for web servers, IoT, authorization etc., it will give you the required options to establish the trust internally, and externally with your partners.

  ### 35. recommended to everyone

**Rating:** 5.0/5.0 stars

**Reviewed by:** Atif M. | Consultant, Small-Business (50 or fewer emp.)

**Reviewed Date:** March 09, 2022

**What do you like best about Keyfactor EJBCA®?**

The best thing i like about EJBCA is a free software public key infrastructure certificate authority software package. The world’s most used PKI

**What do you dislike about Keyfactor EJBCA®?**

i dont think if i dislike any thing about EJBCA

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

Certificate Auto-enrollment, Identity Authority Manager

  ### 36. Popular open source CA/RA server

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 29, 2019

**What do you like best about Keyfactor EJBCA®?**

Easy installation and accepted by many customers

**What do you dislike about Keyfactor EJBCA®?**

A wizard to simplify the CA creation will help

**Recommendations to others considering Keyfactor EJBCA®:**

it is open source software with options to subscribe to professional support.
EJBCA is widely accepted by the industry.

**What problems is Keyfactor EJBCA® solving and how is that benefiting you?**

CA and RA (embedded VA) integration with V-Key PKI soft token solution.


## Keyfactor EJBCA® Discussions
  - [What is Keyfactor EJBCA® used for?](https://www.g2.com/discussions/what-is-keyfactor-ejbca-used-for)

- [View Keyfactor EJBCA® pricing details and edition comparison](https://www.g2.com/products/keyfactor-ejbca/reviews?section=pricing&secure%5Bexpires_at%5D=2026-05-23+14%3A11%3A04+-0500&secure%5Bsession_id%5D=00344130-7ed8-4327-9e4b-70d47b36f64f&secure%5Btoken%5D=08a5f76cf793ec76258e2b0cd88ba6f7987dacd0832ac1d60093236925fcb52e&format=llm_user)
## Keyfactor EJBCA® Integrations
  - [Keyfactor Command](https://www.g2.com/products/keyfactor-command/reviews)
  - [OpenSSL](https://www.g2.com/products/openssl/reviews)
  - [Oracle Java Downloads](https://www.g2.com/products/oracle-java-downloads/reviews)

## Keyfactor EJBCA® Features
**Functionality**
- Certificate Discovery
- Expiration Monitoring
- Automated Certificate Operations
- Policy And Role-Based Access Controls
- Workflow
- Protocol Support
- Reporting And Search
- Audit And Enforcement
- Key Storage

## Top Keyfactor EJBCA® Alternatives
  - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) - 4.5/5.0 (578 reviews)
  - [Sectigo Certificate Manager](https://www.g2.com/products/sectigo-certificate-manager/reviews) - 4.5/5.0 (183 reviews)
  - [Microsoft Active Directory Certificate Services (AD CS)](https://www.g2.com/products/microsoft-active-directory-certificate-services-ad-cs/reviews) - 3.4/5.0 (11 reviews)

