Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 4 Oct 2026

XiPKI

Ch 067.1of 25 Public Key Infrastructure Software
  1. 1Runs onAPI, Linux, Mac, self-hosted
  2. 2CostsFree plan
  3. 3Deployment modelon premises
  4. 4ACME supportYes
  5. 5SCEP supportYes
  6. 6EST supportYes
  7. 7HSM integrationYes
  8. 8Certificate profilesYes
8 lines stated Written from the maker's own pages: github.com
Visit site Alternatives
The XiPKI homepage

Overview

XiPKI is ranked #6 of 25 in public key infrastructure software on Specifiction. It runs on API, Linux, macOS, Self-hosted. There is a free plan.

XiPKI plans and pricing

All plans
Apache License 2.0 Free Open-source software under Apache Software License, Version 2.0 github.com · 4 Oct 2026

Compared on public key infrastructure software

Deployment model
on_premisesgithub.com
ACME support
Yesgithub.com
SCEP support
Yesgithub.com
EST support
Yesgithub.com
HSM integration
Yesgithub.com
Certificate profiles
Yesgithub.com

Facts

Purpose
XiPKI is an open-source public key infrastructure system covering certification authority, registration authority, and OCSP responder functions, intended for critical infrastructure.github.com · 4 Oct 2026
Post-quantum cryptography
The project describes native support for ML-DSA, ML-KEM, and composite post-quantum algorithms.github.com · 4 Oct 2026
Certificate protocols
Its CA protocol gateway supports EST, SCEP, CMP, ACME, and XiPKI's own RESTful API.github.com · 4 Oct 2026
HSM integrations
It supports HSM integration through PKCS#11 and lists AWS CloudHSM, Nitrokey, nCipher, Sansec, SoftHSM, TASS, Thales, and Utimaco devices.github.com · 4 Oct 2026
Operating requirements
The project lists Linux and macOS, Java 11 or later, and Tomcat 10 or 11 as supported platform requirements.github.com · 4 Oct 2026
Database support
Supported databases listed are DB2, MariaDB, MySQL, Oracle, PostgreSQL, H2, and HSQLDB.github.com · 4 Oct 2026
CA management
XiPKI supports multiple CAs in one software instance, database clusters, active instances for the same CA, and CA management through embedded OSGi commands and an API.github.com · 4 Oct 2026
OCSP
The OCSP responder supports RFC 2560 and RFC 6960, the lightweight high-volume profile in RFC 5019, signed and unsigned requests, health checks, and several certificate status sources including EJBCA databases.github.com · 4 Oct 2026
Security and compliance
The project says Bouncy Castle can be switched between LTS and FIPS variants to meet different compliance requirements, and lists eIDAS standards EN 319 411 and EN 319 412 support.github.com · 4 Oct 2026
Downloads
The setup archive can be downloaded from GitHub Releases or Maven Central, or built from source.github.com · 4 Oct 2026
Support
The project directs users to open a GitHub issue and asks bug reports to include test data, logs, version, OS, JRE or JDK, and reproduction steps.github.com · 4 Oct 2026
Latest release
The releases page lists v6.7.1 as the latest release, dated 2026/09/07.github.com · 4 Oct 2026
Maker
The GitHub account identifies the project author as Lijun Liao, PhD, and lists Germany as the location.github.com · 4 Oct 2026

Best XiPKI alternatives

See all 12
All accessCh 01 EZCA Free trialAndroidAPI from $200/mo7.7 All accessCh 02 KeyTalk CKMS Free trialAndroidiOS from €5/mo7.4 All accessCh 03 SecureW2 Cloud NAC AndroidAPI 7.4 All accessCh 04 step-ca Free planAPILinux Free to start7.3 All accessCh 05 OpenCA PKI Free planLinuxMac Free to start7.2 All accessCh 07 Entrust Certificate Manager AndroidAPI 7.0

Where it ranks on Specifiction

Is XiPKI yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote XiPKI

Sources