Introduction

The EJBCA Container Set allows customers to deploy PKI based on EJBCA containers in Kubernetes cluster environments. A typical setup includes separation of Certificate Authority, Registration Authority and Validation Authority containers to enable highly secure deployment of the Certificate Authority.

A container-based EJBCA deployment may also be scaled up with additional container instances in order to increase performance and availability.

In addition to a Kubernetes cluster, customer pre-requisites include an external database service as well as a Hardware Security Module (HSM).

A container-based EJBCA deployment may also be integrated with EJBCA instances using other deployment types such as EJBCA Hardware Appliance and EJBCA SaaS in so-called Hybrid EJBCA deployments.

Users of the EJBCA Community container are provided a smooth migration to EJBCA Enterprise through the EJBCA Container Set.