An enterprise-grade open-source PKI/trustcenter software stack based on Perl and OpenSSL.
OpenXPKI is an open-source software stack for deploying and managing a Public Key Infrastructure (PKI) or trust center. It provides enterprise-grade features for certificate issuance, lifecycle management, and integration with hardware security modules, solving the need for a secure, scalable, and flexible PKI solution.
System administrators, security engineers, and organizations needing to operate internal or public certificate authorities with enterprise reliability and compliance requirements.
Developers choose OpenXPKI for its robust feature set, open-source flexibility, and ability to replace commercial PKI solutions while supporting industry standards like SCEP, EST, and HSM integration.
OpenXPKI Code
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports SCEP and EST for certificate enrollment, ensuring compatibility with standard devices and systems, as highlighted in the README.
File-based configuration allows version control and staged deployments, ideal for enterprise change management, per the README's emphasis on ease of adjustment.
Integrates with HSMs like Thales for secure crypto operations, providing enterprise-grade key management, a core feature mentioned.
Run multiple separate CAs from a single installation, simplifying infrastructure for diverse PKI needs, as stated in the key features.
Built on Perl, which may be less familiar to modern DevOps teams and could hinder integration with contemporary, container-native toolchains.
Despite quickstart guides, the enterprise focus means configuration is intricate, requiring deep PKI and Unix expertise, as hinted by the need for sample configs and setup scripts.
While open-source, packages for SLES and RHEL require paid subscriptions, and the ad-hoc release schedule might delay critical updates for free users.