EJBCA Cloud 4.3.6 Release Notes

NOVEMBER 2025

We are pleased to announce the release of EJBCA Cloud 4.3.6.

For available deployment options and associated versions, refer to Supported Versions.

Highlights

EJBCA Enterprise Upgrade

EC-312 - EJBCA Cloud 4.3.6 includes EJBCA Enterprise version 9.3.4, see the EJBCA 9.3.4 Release Notes.

EC-313 - Wizard cluster join feature now checks for user to have the GRANT permission so it can grant itself access to the database during install

EC-314 - Elytron keystores added to WildFly to store the database username and password more securely.

EC-315 - New password rotation script added to support directory so the password for the “ejbcadbuser” can be rotated automatically on local and remote database hosts.

EC-316 - System_backup and system_restore scripts updated to support older openssl encryption methods. “age” is now used for backup encryption for better stability long term.

EC-317 - Azure Key Vault integration fixes for wizard UI.

EC-318 - Postgres Database integration fixes including PGSQL cli version upgrade

EC-319 - Fixed an issue in AWS where the system would not come up with the proper hostname.

EC-320 - Improved user detection in Azure to get log files and uploads directory in users home directory for better troubleshooting and placement of wizard.json file.

EC-321 - JSON handling improvements so wizard.json file parsing adheres better to the JSON RFC regarding spaces and colons.

EC-322 - Reworked standalone.conf so the memory calculations are more in line with java10+ and how it can calculate RAM on its own.

EC-323 - Make it so that the support package scripts redact passwords from the install.log file before adding to the backup file

Upgrade Information

For information on how to upgrade an EJBCA Cloud hourly instance node from one version of EJBCA to another, see the AWS Restore and Upgrade Guide and Azure Restore and Upgrade Guide, respectively.