.png){kind=logo}
EJBCA Community 9.1 Release Notes
COMMUNITY EDITION MARCH 2025
The EJBCA team is excited to announce the newest release of our open-source PKI software EJBCA Community Edition with version 9.1.
These release notes cover new EJBCA Community features and improvements implemented between EJBCA Community 9.0 and EJBCA Community 9.1.
This latest community release includes support for NIST-approved quantum-safe algorithms ML-DSA and ML-KEM, the first completed standards from NIST’s post-quantum cryptography (PQC) standardization project. The release also brings enhancements to the REST API and an updated version of Bouncy Castle.
Highlights
NIST Approved Quantum-Safe Algorithms ML-DSA and ML-KEM
EJBCA 9.1 adds support for issuing certificates with NIST-approved quantum-safe algorithms ML-DSA and ML-KEM. These standardized PQC algorithms replace the candidate algorithms Dilithium and Kyber that were supported in previous EJBCA versions before the NIST-approved algorithms were released.
For more information, see Post-Quantum Cryptography Keys and Signatures and to try it out, see our guide on how to issue a PQC Hybrid End Entity Certificate with ML-KEM.
REST API Extensions
For deployments set up to use hybrid certificates, an extension to the REST API in EJBCA 9.1 enables REST API clients to retrieve information about available alternative key algorithms when fetching information about certificate profiles through the /v2/certificate/profile/ endpoint.
Bouncy Castle Upgrade
Bouncy Castle has been upgraded to version 1.79. For information about the latest Bouncy Castle releases, refer to the Bouncy Castle Release Notes.
Announcements
Removal of GOST and DSTU Algorithm Support
Support for the GOST and DSTU algorithms has been removed. These algorithms were deprecated in EJBCA 8.3 and are no longer available in this release.
Downloads and Resources
There are several options available for downloading the latest EJBCA Community:
EJBCA Community is available for download from GitHub.
EJBCA Community container is available for download from Docker Hub.
EJBCA Community container is available for download from the AWS marketplace.
EJBCA Community is available for download from SourceForge.
Get the latest news about EJBCA Community initiatives and open-source products - sign up for our community newsletter.
Find links to downloads, how-to guides, video tutorials, and documentation at ejbca.org.
Want to learn more about our open-source software? Get in touch over at EJBCA Discussions on GitHub, a collective space where you can share feedback and contribute ideas to future releases. Thank you for your continued support and contributions to the EJBCA community.