EJBCA Wiki

For the impatient

The main installation instructions are available over at http://ejbca.org/. Always go there first.

Packages

Debian stable(etch) and unstable EJBCA 3.5.x Packages:
http://han.pp.se/gl/article.php?story=20080115235612100

The auto-setup script used for debian can be used for other purposes as well, auto-setup.

Quick setup guides

these guides are a bit outdated, for older versions of EJBCA, but they will still provide a lot of good information if combined with the installation instructions above.

Here you can download a quick setup guide (pdf) how to install version 3.1.x of PrimeCA/EJBCA.
Quick Setup Guide, 3.1.x.

Here you can download a quick setup guide (pdf) how to install version 3.0.x of PrimeCA/EJBCA.
Quick Setup Guide, 3.0.x.

Platforms and guides

EJBCA 3.4.1 on Solaris 10 x86:
http://han.pp.se/gl/article.php?story=20070518224609117

EJBCA 3.4.1 on OpenBSD:
http://han.pp.se/gl/article.php?story=20070506221441147

EJBCA is also know to work on these OS:

• Debian Stable and unstable
• Ubuntu 6.06 through 9.04
• Suse 9 and 10
• Oracle Enterprise Linux 4
• RHEL 4 and 5
• Solaris 10
• Windows XP and 2003 Server
• Mac OS X 10.4.11 through Leopard

EJBCA 3.6 works on the following application servers:

• JBoss 4.0.5 and 4.2.x
• Glassfish v1 and v2
• OC4J 10g
• Weblogic 9.x
• Websphere ND 6.1

Later version of EJBCA supports all of the above platforms, except Websphere. Websphere is too pricey (read too much work) to support.

Express download and install script [Alpha]

Mainly for developers and bug-testers. You can find it here.

Log4j configuration in JBoss

• Disable the console appender
• Limit the category org.ejbca to INFO
• Limit the default root appender to ERROR

   <category name="org.ejbca">
      <priority value="INFO"/>
   </category>

   <root>
      <priority value="ERROR"/>
      <appender-ref ref="FILE"/>
   </root>

Another interesting configuration is if you want to separate the EJBCA log into a separate log file, so you have only EJBCA logging in ejbca.log. You can do that by defining a new appender, and assigning a logger for the org.ejbca packages to this appender.
Remove the "category" for org.ejbca if you have made the configuration like above.

    <appender name="EJBCA" class="org.jboss.logging.appender.DailyRollingFileAppender">
        <errorHandler class="org.jboss.logging.util.OnlyOnceErrorHandler"/>
        <param name="File" value="${jboss.server.log.dir}/ejbca.log" />
        <param name="Append" value="true" />

        <!-- Rollover at midnight each day -->
        <param name="DatePattern" value="'.'yyyy-MM-dd" />
        <layout class="org.apache.log4j.PatternLayout">
            <!-- The default pattern: Date Priority [Category] Message\n -->
            <param name="ConversionPattern" value="%d %-5p [%c] %m%n" />
        </layout>
    </appender>

    <logger name="org.ejbca">
        <priority value="INFO"/>
        <appender-ref ref="EJBCA" />
    </logger>