EJBCA vs Entrust Certificate Manager
EJBCA
ejbca.orgEntrust Certificate Manager
entrust.comSide by side
| Figure | EJBCA | Entrust Certificate Manager |
|---|---|---|
| Price from | £5,172.08/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 1 |
| Spec score · Public Key Infrastructure Software | 9.2 (#1) | 7.7 (#13) |
| Spec score · Certificate Management Software | 9.2 (#2) | 7.7 (#18) |
| Deployment | Community Edition can be deployed with Helm, as a container, or from source; the download page links Docker Hub, Artifact Hub, and GitHub. | Entrust says it can be deployed across on-premises, private cloud, and public cloud environments. |
| Founded | 2001 | 1969 |
| Purpose | EJBCA is open-source PKI and Certificate Authority software for certificate management, registration, enrollment, and validation. | Certificate Manager centralizes visibility, control, and automated lifecycle management, covering discovery, audit, issuance, renewal, and revocation. |
| Support | Enterprise includes professional support with an SLA, while Community users can access GitHub Discussions on a best-effort basis. | Entrust lists customer service centers for immediate assistance in the Americas, EMEA, and Asia Pacific regions. |
Plans
EJBCA
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
Entrust Certificate Manager
- Entrust Certificate ManagerPriced on request
In their own words
EJBCA
EJBCA is open-source PKI and Certificate Authority software for managing certificates, registration, enrollment, and validation. A single installation can host multiple independent PKIs separated through CA, RA, and VA modules. Certificate validation uses OCSP and CRL, and enrollment options listed for Community and Enterprise include CMP, SCEP, EST, ACME, SOAP API, and REST APIs. Community Edition can be deployed with Helm, as a container, or from source, with Helm and Ansible playbooks available for automating setup and configuration. Its stated use cases include internal PKIs, DevOps workflows, industrial environments, IoT devices, and national eIDs. Community is free under LGPL version 2.1 or later for learning, testing, and prototyping, but is not intended for production because it lacks production audit, compliance, SLA, high-availability, and security capabilities. Enterprise adds advanced PKI functionality and professional support with an SLA; a 30-day trial is available through AWS or Azure marketplaces.
Entrust Certificate Manager
Entrust Certificate Manager centralizes discovery and lifecycle management for digital certificates, from audit and issuance through renewal and revocation. It can find certificates across networks, cloud environments, and CA repositories, then provide continuous monitoring, reports, and alerts. Policy-driven workflows automate lifecycle steps, and certificates from Entrust and third-party CAs can be managed through one control point. Entrust describes deployment across on-premises, private cloud, and public cloud environments. Integration choices include cloud, automation, CA gateway, enrollment protocol, secrets management, and custom REST APIs. The API can query certificates by metadata, import certificates, and update custom-field metadata, subject to token permissions. Compatibility information lists PostgreSQL 15 or higher, OpenID Connect 1.0, LDAP v3, and other specified components. Entrust says the product supports crypto-agility and post-quantum readiness. Pricing is on request, and there is no free plan. Entrust was founded in 1969 and is headquartered in Minneapolis, Minnesota.