Installation Prerequisites

Before installing EJBCA, review this list of required software to be installed. 

Java
OpenJDK 8Recommended.

Oracle JDK 8

Note that if using Oracle Java, you must enable the unlimited policy files, see Unlimited Policy Files.


(warning) Note that EJBCA currently does not support Java 11. If running on a platform that comes with Java 11 by default, such as Ubuntu 18.04, switch to using Java 8 by running the following:

$ sudo update-java-alternatives --set java-1.8.0-openjdk-amd64
Application Server
JBoss EAP 7.0-7.2JBoss EAP 7 is currently recommended. See Application Servers.
WildFly 10, 12, 14WildFly 10 is currently recommended. See Application Servers.
Databases
MariaDB, MySQL et alEJBCA supports multiple databases such as MariaDB, MySQL, Oracle Database, PostgreSQL and others. MariaDB and MySQL are recommended. For more information, see Creating the Database.
Build Tool
Apache Ant 1.8 or later

JavaScript support may be needed in Ant for some components.

Unlimited Policy Files

If using Oracle Java, you must enable the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files for JDK to allow EJBCA to use strong crypto and keystore passwords longer than 7 characters. As of Java 8 Update 151, the unlimited jurisdiction policy files are included but not used by default.

To enable the unlimited policy files, do the following:

  1. Open the JRE_HOME/lib/security/java.security file for editing.

  2. Uncomment the following line:

    crypto.policy=unlimited

Oracle Java prior to Java 8 Update 151 does not include the policy files and requires you to download and install Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction policy files. For more information, refer to Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files for JDK. Note that if you fail to install the package, the following message is shown on the first page of the EJBCA Admin GUI: Using exportable cryptography.

Next Step

Next, configure properties prior to the installation according to information in Managing EJBCA Configurations.