Installation Prerequisites

OpenJDK 17

Using Java 17 requires an application server that supports it, such as WildFly 32.

If installing EJBCA Community Edition on Java 17, the PKCS11CryptoToken does not work due to the access-control boundaries defined by the JDK module system. To overcome the issue and avoid getting exceptions while creating the PKCS#11 token in EJBCA, the Java process that runs the application server is passed the JAVA_OPTS parameter "--add-exports=jdk.crypto.cryptoki/sun.security.pkcs11.wrapper=ALL-UNNAMED"

The following shows an example of adding the JAVA_OPTS parameter to a typical WildFly installation:

echo -e "\nJAVA_OPTS=\"\$JAVA_OPTS --add-exports=jdk.crypto.cryptoki/sun.security.pkcs11.wrapper=ALL-UNNAMED\"" >> /opt/wildfly/bin/standalone.conf

WildFly 32

For instructions on how to set up your application server, see Application Servers.

JBoss EAP 8.0

For instructions on how to set up your application server, see Application Servers.

MariaDB, MySQL et al

EJBCA supports multiple relational databases such as MariaDB, MySQL, Oracle Database, PostgreSQL and others. MariaDB and MySQL are recommended. For more information, see Creating the Database.

Apache Ant 1.9.8 or later

JavaScript support may be needed in Ant for some components.