Prerequisites

Before you begin deploying EJBCA and SignServer to cloud environments, make sure you have the following systems and tools in place:

• Kubernetes v1.19+

  • kubectl

• Helm v3+

• Ingress NGINX : v1.9.X Ingress Installation Guide

  • Alternatively only for EJBCA installations a Network LoadBalancer e.g. MetalLB may be used

• A supported database (for non-ephemeral instances):

  • MariaDB

  • MySQL

  • PostgreSQL

  • Oracle Database

  • Microsoft SQL Server

• HSM. The following HSMs are supported:

  • SoftHSM2 (not for production use)

  • Thales Luna

  • Utimaco CryptoServer

  • Microsoft Azure Key Vault and Managed HSM

  • Fortanix Data Security Manager

• EJBCA or another Certificate Authority for infrastructure and signer certificates. ​​