OpenXPKI
By White Rabbit Security GmbH
OpenXPKI is an open-source Public Key Infrastructure (PKI) software solution designed for the customizable and scalable management of X.509v3 certificates. Established in 2009, the project has evolved into an enterprise-grade PKI and Trustcenter software, focusing on Registration Authority (RA) functionality and supporting continuous PKI operations across various scales and complexities
The OpenXPKI project commenced around 2006, with the first production-level release in 2009. Over the years, it has grown and improved, with installations serving several hundreds of thousands of certificates under dozens of issuing Certificate Authorities (CAs) within a single installation.
OpenXPKI Offerings
Certificate Lifecycle Management: Customizable workflows guide users through certificate request, renewal, and revocation processes.
Automation: Supports full automation of certificate distribution with industry-standard interfaces and a flexible custom API.
Reporting: Provides a comprehensive reporting and alerting framework to monitor certificate statuses.
Modern WebUI: The Ember.js-based web frontend is compatible with all major browsers, facilitating user, operator, and administrator interactions.
Recent enhancements include:
Flexible Crypto Layer: Utilizes the OpenSSL toolkit and supports integration with compatible Hardware Security Modules (HSMs).
Multiple Backends: Allows operation of CA signing keys on remote systems or delegation of certificate issuance to external CAs like Digicert, Sectigo, or SwissSign.
OpenXPKI emphasizes open-source principles, flexibility, and configurability. The project is maintained by a seasoned team of PKI experts, committed to empowering continuous PKI operation and adhering to open standards for seamless integration with other infrastructure components.
OpenXPKI boasts an active open-source community, offering friendly support via mailing lists. The software's flexibility and scalability have led to its adoption in various professional PKI environments, ranging from small-scale installations to large enterprises managing hundreds of thousands of certificates.
