Keyfactor PQC Lab Test Drive

Explore PQC use cases, such as issuing quantum-safe certificates, signing, and timestamping, in the ready-to-use PQC Lab Test Drive on Azure.

The ready-to-use PQC Lab Test Drive is a free, SaaS-based playground that is set up exclusively for you, where you can issue quantum-safe certificates with EJBCA and perform PQC signing and timestamping with SignServer.

Preconfigured with NIST-approved algorithms, enrollment protocols, and signing formats (CMP, ACME, EST, REST, plain signer, CMS, JAR, etc.), it lets you experience post-quantum PKI and signing in action without complex setup.

The PQC Lab Test Drive is a demonstration environment only and not intended for production use.

Setting up the Test Drive typically takes 20-30 minutes.

Get started with the PQC Lab Test Drive

To get started and learn more, see the documentation:

Sign Up for Keyfactor Test Drives — Follow these instructions to sign up for and manage Keyfactor Test Drives.

Initial Setup of PQC Lab Test Drive — This instruction guides you through the initial setup of the PQC Lab Test Drive: configuring your browser to trust the Test Drive certificates, downloading the client CLI and signing certificates, and setting up access to the EJBCA CA.

PKI Use Case: Issue Certificates using PQC-ready Protocols — This use case describes how to issue PQC certificates in the PQC Lab Test Drive.

Signing Use Case: Perform PQC Signing and Validation — This use case describes how to sign files, hashes, and software artifacts using PQC algorithms in the PQC Lab Test Drive.

Overview of the PQC Lab Test Drive

The PQC Lab Test Drive provisions a fully functional environment that includes:

EJBCA Enterprise PKI – Preconfigured with PQC certificate authorities (CAs), certificate profiles, and enabled enrollment protocols (CMP, ACME, EST, and REST), allowing you to issue and manage quantum-safe certificates out of the box.
SignServer Enterprise – Configured for PQC signing and timestamping (e.g., plain signer, CMS, MSI, JAR, timestamping using SignServer signclient or REST), and using EJBCA on the backend for certificate issuance.
Supporting applications - Read more about the Test Drive platform and architecture in About Keyfactor Test Drives.

About the 30-Day Trial

Each Test Drive instance is automatically terminated after 30 days. Do not store any data you wish to retain.
You can export your configurations through the EJBCA user interface before the trial period ends.

Prerequisites

Java 17 or later is required to use the EJBCA and SignServer Client CLIs.
Mozilla Firefox is recommended for the best experience. The screenshots in this guide were taken in Firefox. Most major browsers are supported, except for Safari, which is not compatible.