A powerful and flexible certificate issuance and management system to issue and enable full life-cycle control of digital certificates.

The EJBCA Cloud AWS Validation Authority (VA) instance is an EJBCA VA instance with OCSP and CRL functionality. The instance is designed to be peered with another EJBCA Enterprise CA instance for a fully separated certificate authority hierarchy. It can be paired with any EJBCA Enterprise Instance of equal version whether it be a PKI Appliance or on-prem software installation.

Note that the EJBCA Cloud Validation Authority (VA) instance is not a Certificate Authority (CA) and that it requires an EJBCA Certificate Authority (CA) Instance to fully function. Please choose one of the full instances if you need a Certificate Authority, see EJBCA Cloud AWS.


The following provide relevant information to get your Validation Authority (VA) instance of EJBCA Cloud on AWS running and to get you started with the EJBCA software.

Note that the product documentation applies for the latest EJBCA Cloud AWS version. For documentation for previous versions, refer to the PrimeKey EJBCA Cloud download area.

Launch Guide

For information on how to deploy the EJBCA Cloud Validation Authority (VA) instance from Amazon Web Services (AWS) Marketplace and log in to the EJBCA Administration Web for the first time, see the EJBCA Cloud AWS VA Launch Guide.