Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Keyfactor EJBCA by Keyfactor View product | AWS Private CA by AWS View product |
|---|---|---|
| Overview | ||
| What it is | Keyfactor EJBCA: High-performance Certificate Authority and multi-protocol support. Built for enterprise PKI deployment. Compare Identity Security alternatives. | AWS Private CA delivers SCEP connector for MDM for internal TLS encryption. Explore its Identity Security capabilities, deployment choices and top competitors. |
| Product type | Enterprise Open-Source Public Key Infrastructure (PKI) & CA Software | Managed Private Certificate Authority Service |
| Best for | Financial Services, Government, Defense, Telecommunications, Automotive, IoT, IoT Manufacturing | Cross-industry, Financial Services, Healthcare, Government, Manufacturing, Technology |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudOn-Premise | Cloud |
| Deployment details | Cloud; On-premises; Virtual Appliance; Container; Hardware Appliance; Virtual Appliance; Docker/Kubernetes container; AWS/Azure cloud | Cloud; AWS Cloud-native managed PKI service |
| Data residency | Customer-controlled local infrastructure; Cloud private enclaves | Private CA keys generated and stored in customer-selected AWS Region HSM |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | Bare metalLinuxVMware ESXiKubernetesAWSAzure | AWS Certificate ManagerAmazon EKSAWS IoT Coreenterprise mobile and server clients |
| Compliance | Common Criteria EAL4+FIPS 140-2 Level 3 HSM supporteIDASWebTrustISO 27001 | FIPS 140-2 Level 3, SOC 1/2/3, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HIPAA eligible, FedRAMP High |
| Integrations & coverage | ||
| Integrations | Thales Luna HSMUtimaco HSMYubiHSMAWS CloudHSMAzure Key VaultKubernetes | AWS Certificate Manager (ACM)AWS KMSAWS CloudTrailMicrosoft IntuneJamfKubernetes cert-managerAWS IoT Core |
| Industries | Financial ServicesGovernmentDefenseTelecommunicationsAutomotiveIoT+1 more | Cross-industryFinancial ServicesHealthcareGovernmentManufacturingTechnology |
| Regions | Global | Global (supported AWS Regions) |
| Vendor | ||
| Company | Keyfactor | AWS |
| Headquarters | Cleveland, Ohio, USA | Seattle, Washington, USA |
| Company size | 1,000+ | 100,000+ |
| Founded | 2001 | 2006 |
Overview
What it is
Keyfactor EJBCA
Keyfactor EJBCA: High-performance Certificate Authority and multi-protocol support. Built for enterprise PKI deployment. Compare Identity Security alternatives.AWS Private CA
AWS Private CA delivers SCEP connector for MDM for internal TLS encryption. Explore its Identity Security capabilities, deployment choices and top competitors.Product type
Keyfactor EJBCA
Enterprise Open-Source Public Key Infrastructure (PKI) & CA SoftwareAWS Private CA
Managed Private Certificate Authority ServiceBest for
Keyfactor EJBCA
Financial Services, Government, Defense, Telecommunications, Automotive, IoT, IoT ManufacturingAWS Private CA
Cross-industry, Financial Services, Healthcare, Government, Manufacturing, TechnologyPricing
Pricing model
Keyfactor EJBCA
Contact VendorAWS Private CA
Contact VendorFree trial
Keyfactor EJBCA
Free trial: yesAWS Private CA
Free trial: yesDeployment
Deployment options
Keyfactor EJBCA
AWS Private CA
Deployment details
Keyfactor EJBCA
Cloud; On-premises; Virtual Appliance; Container; Hardware Appliance; Virtual Appliance; Docker/Kubernetes container; AWS/Azure cloudAWS Private CA
Cloud; AWS Cloud-native managed PKI serviceData residency
Keyfactor EJBCA
Customer-controlled local infrastructure; Cloud private enclavesAWS Private CA
Private CA keys generated and stored in customer-selected AWS Region HSMKey features
What it offers
Keyfactor EJBCA
- High-performance Certificate Authority
- Multi-protocol support (ACME, SCEP, EST, CMP)
- HSM hardware integration
- Post-quantum cryptography ready
- Multi-tier PKI hierarchy
- Enterprise PKI deployment
- IoT device identity issuance
- Mobile device certificate enrollment
AWS Private CA
- Private X.509 certificate issuance
- FIPS 140-2 Level 3 HSM key protection
- Custom certificate extensions and templates
- Automated renewal with AWS Certificate Manager
- CRL and OCSP revocation endpoints
- SCEP connector for MDM
- Internal TLS encryption
- Mutual TLS (mTLS) service-to-service auth
Platform & access
API access
Keyfactor EJBCA
API access: yesAWS Private CA
API access: yesSingle sign-on (SSO)
Keyfactor EJBCA
SSO: yesAWS Private CA
SSO: yesRole-based access (RBAC)
Keyfactor EJBCA
RBAC: yesAWS Private CA
RBAC: yesMulti-tenant
Keyfactor EJBCA
Multi-tenant: yesAWS Private CA
Multi-tenant: yesMobile app
Keyfactor EJBCA
Mobile app: noAWS Private CA
Mobile app: yesSupported platforms
Keyfactor EJBCA
AWS Private CA
Compliance
Keyfactor EJBCA
AWS Private CA
Integrations & coverage
Integrations
Keyfactor EJBCA
AWS Private CA
Industries
Keyfactor EJBCA
AWS Private CA
Regions
Keyfactor EJBCA
AWS Private CA
Vendor
Company
Keyfactor EJBCA
KeyfactorAWS Private CA
AWSHeadquarters
Keyfactor EJBCA
Cleveland, Ohio, USAAWS Private CA
Seattle, Washington, USACompany size
Keyfactor EJBCA
1,000+AWS Private CA
100,000+Founded
Keyfactor EJBCA
2001AWS Private CA
2006