Skip to content
SPECIFICTION
Get listed

OpenXPKI

openxpki.org

Free plan WebLinuxAPISelf-hosted
Visit openxpki.org
Spec score 7.6 #14 of 26 in Public Key Infrastructure Software

What it is

OpenXPKI is PKI and Trustcenter software for managing X.509v3 certificates in professional environments. Its customizable workflows cover requests, renewals, and revocations, with enrollment through SCEP, EST, SimpleCMC, ACME, and a REST-like API with OpenAPI support. One instance can host multiple PKI Realms, each with separate namespaces, profiles, workflows, and policies. The Ember.js web interface serves users, operators, and administrators in major browsers. Connectors reach flat files, LDAP, SQL databases, and web services; Enterprise Edition adds extensions for DigiCert, Sectigo, and SwissSign. Hardware Security Modules are supported through PKCS#11. YAML configuration can be tracked with revision control, and custom reporting workflows can produce downloadable CSVs. Community Edition is free and fully functional, with Debian 12 packages and mailing-list support. Enterprise Edition has packages for RHEL, SLES, and Ubuntu Server LTS; service and commercial support options are also listed, with SLAs available. The software was founded in 2009.

Spec sheet

Purpose
OpenXPKI is enterprise-grade PKI and Trustcenter software for customizable management of X.509v3 certificates.Read 7 Oct 2026 · openxpki.org
Intended users
The product is aimed at professional PKI environments, and its training lists system administrators, IT operations staff, PKI operators, developers, and integration engineers as audiences.Read 7 Oct 2026 · openxpki.org
Deployment
Community Edition Debian packages are available for Debian 12, while Enterprise Edition is packaged for RHEL, SLES, and Ubuntu Server LTS.Read 7 Oct 2026 · openxpki.org
Integrations
Connectors can access flat files, LDAP directories, SQL databases, and web services; Enterprise Edition offers DigiCert, Sectigo, and SwissSign extensions.Read 7 Oct 2026 · openxpki.org
Support
Community Edition support is available through a mailing list; commercial support options with SLAs are offered by White Rabbit Security GmbH.Read 7 Oct 2026 · openxpki.org
Founded
2009Read 28 Sep 2026 · openxpki.org
Configuration
System configuration uses YAML files and can be managed with revision control for an auditable representation of system state.Read 7 Oct 2026 · openxpki.org
Enrollment
The software supports SCEP, EST, SimpleCMC, and ACME enrollment interfaces, plus a REST-like API with OpenAPI support.Read 7 Oct 2026 · openxpki.org
Enterprise additions
Enterprise Edition lists multi-tenancy, external or public CA adapters, full ITSM integration, and GDPR-compliant data retention among its extension modules.Read 7 Oct 2026 · openxpki.org
Key security
OpenXPKI supports Hardware Security Modules through the PKCS#11 interface.Read 7 Oct 2026 · openxpki.org
Lifecycle
Customizable workflows support certificate requests, renewals, and revocations.Read 7 Oct 2026 · openxpki.org
Multiple CAs
A single instance can host multiple PKI Realms with distinct certificate namespaces, profiles, workflows, and policies.Read 7 Oct 2026 · openxpki.org
Reporting
Custom reporting workflows collect statistics and KPIs for PKI Realms and can generate downloadable CSV files.Read 7 Oct 2026 · openxpki.org
Web interface
Its Ember.js web frontend runs in major browsers and serves users, operators, and administrators.Read 7 Oct 2026 · openxpki.org

Plans and prices

Community Edition Free 100% free · fully functional code base · Debian packages · example configuration · online documentation · mailing-list support Read 7 Oct 2026 · openxpki.org
Enterprise Edition Priced on request RHEL / SLES / Ubuntu packages · custom-built configuration · extension modules · individual support with SLAs Read 7 Oct 2026 · openxpki.org
OpenXPKI as a Service Priced on request Health monitoring · logging and reporting · level-2 helpdesk · cloud or on-premise · flexible licensing · SLAs available Read 7 Oct 2026 · openxpki.org

Every OpenXPKI plan and price →

Strong points and limits

Strong points

  • Free, fully functional Community Edition.
  • Customizable request, renewal, and revocation workflows.
  • Supports SCEP, EST, SimpleCMC, ACME, and OpenAPI.
  • Multiple PKI Realms can run in one instance.
  • Configuration can be tracked with revision control.

Limits

  • Community Edition packages are listed for Debian 12.
  • Enterprise Edition is required for named CA extensions.
  • Commercial support options have unlisted prices.

Who it suits

It suits system administrators, IT operations staff, PKI operators, developers, and integration engineers managing professional PKI environments. Teams needing multiple certificate realms, enrollment interfaces, or audited configuration may find its listed capabilities relevant.

Verdict

OpenXPKI specifies a broad certificate-management lifecycle, enrollment options, integrations, and deployment distinctions between editions. The free Community Edition has a stated package target and mailing-list support, while Enterprise and service options do not list prices.

Where Specifiction places it

Alternatives to OpenXPKIAll alternatives →