EJBCA vs ManageEngine Key Manager Plus
EJBCA
ejbca.org
ManageEngine Key Manager Plus
manageengine.comSide by side
| Figure | EJBCA | ManageEngine Key Manager Plus |
|---|---|---|
| Price from | £5,172.08/mo | $39.58/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 8 |
| Spec score · Certificate Management Software | 9.2 (#2) | 8.9 (#4) |
| Deployment | Community Edition can be deployed with Helm, as a container, or from source; the download page links Docker Hub, Artifact Hub, and GitHub. | The product is offered as both a SaaS solution and an on-premises deployment. |
| Documentation | The official documentation includes concepts, installation, operations, integration guides, tutorials, troubleshooting, release notes and supported-version information. | The vendor documentation hub provides online help, quickstart material, FAQs, system requirements, security specifications, case studies, tutorials and release notes. |
| Founded | 2001 | 1996 |
| Intended users | EJBCA is presented for securing industrial environments, IoT devices, national eIDs, DevOps workflows, and internal PKIs. | The product is positioned for enterprises seeking centralized management of certificates and machine identities across their IT infrastructure. |
| Licence | EJBCA Community is open source under LGPL version 2.1 or later; dependencies use licenses including Apache 2.0, BSD, MIT and EPL. | The licence agreement grants a proprietary, non-exclusive, non-transferable ZOHO licence; it is not an open-source licence. |
| Purpose | EJBCA is open-source PKI and Certificate Authority software for certificate management, registration, enrollment, and validation. | Key Manager Plus manages SSL/TLS certificate lifecycles across enterprise networks, from discovery and acquisition through deployment, renewal, and expiry tracking. |
| Rating on G2 | 4.5 out of 5 from 38 reviews | 4.5 out of 5 from 3 reviews |
| Rating on Gartner Peer Insights | 4.5 out of 5 from 15 reviews | 4.9 out of 5 from 12 ratings |
| REST API | The REST interface covers CA, crypto-token, certificate-management and configuration-dump operations and is documented with an OpenAPI specification. | A REST API lets applications create, fetch, associate and delete keys or certificates and manage users using GET, POST, PUT and DELETE requests. |
| Support | Enterprise includes professional support with an SLA, while Community users can access GitHub Discussions on a best-effort basis. | Support is offered through on-premises and cloud email addresses, telephone callback options, forums and FAQs. |
| What it does | EJBCA is a platform-independent public-key-infrastructure certificate authority supporting certificate management, registration, enrollment and validation. | Key Manager Plus is a web-based system for discovering, consolidating, creating, deploying, rotating, renewing, monitoring and auditing SSH keys and SSL/TLS certificates. |
Plans
EJBCA
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
ManageEngine Key Manager Plus
- Free EditionFree
- On-premises license (25 managed keys)$59 a month
- Subscription — 25 keys$475 a year
- On-premises license (25 managed keys)$599 a year
- On-premises perpetual license (25 managed keys)$1,188, paid once
- Perpetual — 25 keys$1,188, paid once
- Subscription — 1,000 keys$2,645 a year
- Perpetual — 1,000 keys$6,613, paid once
In their own words
EJBCA
EJBCA is open-source PKI and Certificate Authority software for managing certificates, registration, enrollment, and validation. A single installation can host multiple independent PKIs separated through CA, RA, and VA modules. Certificate validation uses OCSP and CRL, and enrollment options listed for Community and Enterprise include CMP, SCEP, EST, ACME, SOAP API, and REST APIs. Community Edition can be deployed with Helm, as a container, or from source, with Helm and Ansible playbooks available for automating setup and configuration. Its stated use cases include internal PKIs, DevOps workflows, industrial environments, IoT devices, and national eIDs. Community is free under LGPL version 2.1 or later for learning, testing, and prototyping, but is not intended for production because it lacks production audit, compliance, SLA, high-availability, and security capabilities. Enterprise adds advanced PKI functionality and professional support with an SLA; a 30-day trial is available through AWS or Azure marketplaces.
ManageEngine Key Manager Plus
ManageEngine Key Manager Plus centralizes SSL/TLS certificate lifecycle management across enterprise networks, from discovery and acquisition to deployment, renewal, and expiry tracking. It finds certificates across endpoints and stores, including Microsoft CA, self-signed, public CA, mail server, load balancer, and AWS-hosted certificates. Renewal can be automated, with expiry alerts sent by email, SNMP traps, or syslog. Listed public CA integrations include Let's Encrypt, DigiCert, GlobalSign, RapidSSL, GoDaddy, and Thawte. It also manages SSH and PGP keys in a digital-key vault. Audit features cover key and certificate operations, privileged-session video, and activity reports. Controls include role-based access, two-factor authentication, SAML single sign-on, audit logging, and external storage for the master encryption key. The product is offered as SaaS and on premises. A free plan and 30-day trial are listed. The on-premises license for 25 managed keys is $59.00 per month, billed monthly.