About OpenXPKI

The OpenXPKI Project aims at creating an enterprise-grade PKI/Trustcenter software supporting well established infrastructure components like RDBMS and Hardware Security Modules. Flexibility and modularity are the project's key design objectives.

Unlike many other OpenSource PKI projects OpenXPKI offers powerful features necessary for professional environments that are usually only found in commercial grade PKI products. (If you have ever wondered what could be done to provide continuous operation of a PKI without having to struggle with the system every time your CA certificate expires, OpenXPKI is probably the right thing for you.)

However, we also target small scale installations by providing quick-start configuration examples that allow to get a usable PKI running quickly.

OpenXPKI runs on most Unix-like operating system (verified on FreeBSD, Linux, Solaris/OpenSolaris and Mac OS X).
Database backends exist for MySQL, PostgreSQL, Oracle and DB2.
OpenXPKI also integrates with the RT Request Tracker and supports nCipher's nShield Hardware Security Modules.

Architecture White Paper available
The OpenXPKI Team has compiled a White Paper on the architecture and key features of the OpenXPKI software. The paper is available as a PDF Document here and outlines the architecture of the system. Development follows the concepts described there closely.


Currently there is no stable release of OpenXPKI yet, but as of November 2008 the code is basically feature-complete. We are currently preparing the 1.0 release which is mostly a documentation issue.

There are, however, already existing production deployments for OpenXPKI, the oldest one known to us has been in production since February 2007 without any major problems.

Check out our News Section where you can find a chronological list of announcements and events.

Project resources

The development infrastructure is hosted at SourceForge.net http://sf.net/projects/openxpki/ - you will find mailing lists, repository, bug tracker, etc. there. Refer to the Resources Section for more information.


OpenXPKI originally started as a fork of OpenCA in October 2005 driven by the former OpenCA developers, but quickly turned out to be a complete redesign and rewite.