Nitrokey HSM with Key Authentication and EJBCA / XCA support

Nitrokeys
1

If I want to enforce public key authentication of the CA, it is easy to setup this via OpenSCDP.
But: if I want to use EJBCA as PKI software solution, how this becomes possible?

new crypto token with EJBCA
new crypto token with EJBCA1920Ă—861 208 KB

With the default configuration and default PKCS11 driver there is no interface to select the public key authentication. Is there a way to make possible to use the public key authenticated HSM?

Same thing should be valid for XCA tool.

2

Does even ejbca support such a thing?

3

EJBCA has an official support for Nitrokey HSMs

4

Yes, but this does not mean “we support all the features”, like biometric authentication for example, and others.

5

There is a custom integration for EJBCA available, unfortunately not as open source in the community edition.

1 Like