Install and configure EJBCA

Gerard Kok



762 latest version

5.0 quality score

Version information

  • 0.1.2 (latest)
  • 0.1.1
  • 0.1.0
released Apr 5th 2020
This version is compatible with:
  • Puppet Enterprise 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x, 2019.1.x, 2019.0.x, 2018.1.x, 2017.3.x, 2017.2.x, 2017.1.x, 2016.5.x, 2016.4.x
  • Puppet >= 4.7.0 < 7.0.0
  • Ubuntu

Start using this module


gerardkok/ejbca — version 0.1.2 Apr 5th 2020


Table of Contents

  1. Description
  2. Setup - The basics of getting started with ejbca
  3. Usage - Configuration options and additional functionality
  4. Reference - An under-the-hood peek at what the module is doing and how
  5. Limitations - OS compatibility, etc.


This module installs. configures, and (partly) manages an EJBCA installation. EJBCA is an open-source Certificate Authority.

The module manages both the installation and configuration EJBCA, and provides a custom type that allows for managing end entities, using the SOAP API.


What ejbca affects

EJBCA runs on a JEE5 compliant Java application server (see https://www.ejbca.org/docs/Application_Servers.html). This module uses the biemond/wildfly module, which limits the choice to JBoss or Wildfly.

EJBCA stores its data in a database (see the file conf/database.properties.sample from the distribution for a list). This module can handle installation of the database driver, but does not manage the database.

Setup Requirements

Previous versions of EJBCA required an instance with 2 CPUs. I can't find that requirement anymore, so I'm not sure it still holds. However, if you're having trouble installing EJBCA using this module, consider trying installing it on a bigger instances, with (at least) 2 CPUs.

A Java version that's compatible with EJBCA's version has to be installed before EJBCA can be installed.

Beginning with ejbca

Minimal usage:

include ejbca

This installs the current open-source version of EJBCA with the default configuration:

  • database: H2
  • organization: 'EJBCA Sample'
  • country: 'SE'


This module does not manage the database.




In general, if you want to change a setting, it's best to start over entirely. Also, this module does not support automatic upgrading from one database to another, or from one application server to another, or to a newer version of EJBCA.

This module had only been tested on Ubuntu 16.04 and 18.04.