Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | AWS Private CA by AWS View product | Keyfactor EJBCA by Keyfactor View product |
|---|---|---|
| Overview | ||
| What it is | AWS Private CA delivers SCEP connector for MDM for internal TLS encryption. Explore its Identity Security capabilities, deployment choices and top competitors. | Keyfactor EJBCA: High-performance Certificate Authority and multi-protocol support. Built for enterprise PKI deployment. Compare Identity Security alternatives. |
| Product type | Managed Private Certificate Authority Service | Enterprise Open-Source Public Key Infrastructure (PKI) & CA Software |
| Best for | Cross-industry, Financial Services, Healthcare, Government, Manufacturing, Technology | Financial Services, Government, Defense, Telecommunications, Automotive, IoT, IoT Manufacturing |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | CloudOn-Premise |
| Deployment details | Cloud; AWS Cloud-native managed PKI service | Cloud; On-premises; Virtual Appliance; Container; Hardware Appliance; Virtual Appliance; Docker/Kubernetes container; AWS/Azure cloud |
| Data residency | Private CA keys generated and stored in customer-selected AWS Region HSM | Customer-controlled local infrastructure; Cloud private enclaves |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | AWS Certificate ManagerAmazon EKSAWS IoT Coreenterprise mobile and server clients | Bare metalLinuxVMware ESXiKubernetesAWSAzure |
| Compliance | FIPS 140-2 Level 3, SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High | Common Criteria EAL4+FIPS 140-2 Level 3 HSM supporteIDASWebTrustISO 27001 |
| Integrations & coverage | ||
| Integrations | AWS Certificate Manager (ACM)AWS KMSAWS CloudTrailMicrosoft IntuneJamfKubernetes cert-managerAWS IoT Core | Thales Luna HSMUtimaco HSMYubiHSMAWS CloudHSMAzure Key VaultKubernetes |
| Industries | Cross-industryFinancial ServicesHealthcareGovernmentManufacturingTechnology | Financial ServicesGovernmentDefenseTelecommunicationsAutomotiveIoT+1 more |
| Regions | Global (supported AWS Regions) | Global |
| Vendor | ||
| Company | AWS | Keyfactor |
| Headquarters | Seattle, Washington, USA | Cleveland, Ohio, USA |
| Company size | 100,000+ | 1,000+ |
| Founded | 2006 | 2001 |
Overview
What it is
AWS Private CA
AWS Private CA delivers SCEP connector for MDM for internal TLS encryption. Explore its Identity Security capabilities, deployment choices and top competitors.Keyfactor EJBCA
Keyfactor EJBCA: High-performance Certificate Authority and multi-protocol support. Built for enterprise PKI deployment. Compare Identity Security alternatives.Product type
AWS Private CA
Managed Private Certificate Authority ServiceKeyfactor EJBCA
Enterprise Open-Source Public Key Infrastructure (PKI) & CA SoftwareBest for
AWS Private CA
Cross-industry, Financial Services, Healthcare, Government, Manufacturing, TechnologyKeyfactor EJBCA
Financial Services, Government, Defense, Telecommunications, Automotive, IoT, IoT ManufacturingPricing
Pricing model
AWS Private CA
Contact VendorKeyfactor EJBCA
Contact VendorFree trial
AWS Private CA
Free trial: yesKeyfactor EJBCA
Free trial: yesDeployment
Deployment options
AWS Private CA
Keyfactor EJBCA
Deployment details
AWS Private CA
Cloud; AWS Cloud-native managed PKI serviceKeyfactor EJBCA
Cloud; On-premises; Virtual Appliance; Container; Hardware Appliance; Virtual Appliance; Docker/Kubernetes container; AWS/Azure cloudData residency
AWS Private CA
Private CA keys generated and stored in customer-selected AWS Region HSMKeyfactor EJBCA
Customer-controlled local infrastructure; Cloud private enclavesKey features
What it offers
AWS Private CA
- Private X.509 certificate issuance
- FIPS 140-2 Level 3 HSM key protection
- Custom certificate extensions and templates
- Automated renewal with AWS Certificate Manager
- CRL and OCSP revocation endpoints
- SCEP connector for MDM
- Internal TLS encryption
- Mutual TLS (mTLS) service-to-service auth
Keyfactor EJBCA
- High-performance Certificate Authority
- Multi-protocol support (ACME, SCEP, EST, CMP)
- HSM hardware integration
- Post-quantum cryptography ready
- Multi-tier PKI hierarchy
- Enterprise PKI deployment
- IoT device identity issuance
- Mobile device certificate enrollment
Platform & access
API access
AWS Private CA
API access: yesKeyfactor EJBCA
API access: yesSingle sign-on (SSO)
AWS Private CA
SSO: yesKeyfactor EJBCA
SSO: yesRole-based access (RBAC)
AWS Private CA
RBAC: yesKeyfactor EJBCA
RBAC: yesMulti-tenant
AWS Private CA
Multi-tenant: yesKeyfactor EJBCA
Multi-tenant: yesMobile app
AWS Private CA
Mobile app: yesKeyfactor EJBCA
Mobile app: noSupported platforms
AWS Private CA
Keyfactor EJBCA
Compliance
AWS Private CA
Keyfactor EJBCA
Integrations & coverage
Integrations
AWS Private CA
Keyfactor EJBCA
Industries
AWS Private CA
Keyfactor EJBCA
Regions
AWS Private CA
Keyfactor EJBCA
Vendor
Company
AWS Private CA
AWSKeyfactor EJBCA
KeyfactorHeadquarters
AWS Private CA
Seattle, Washington, USAKeyfactor EJBCA
Cleveland, Ohio, USACompany size
AWS Private CA
100,000+Keyfactor EJBCA
1,000+Founded
AWS Private CA
2006Keyfactor EJBCA
2001