• PKI Trust and Certificate service providers. .
• Strong authentication for users accessing your intranet/extranet/internet resources.
• Secure communication with SSL/TLS servers and SSL/TLS clients. EJBCA is an excellent SSL PKI.
• Smart card and token management.
• Smart card logon to Windows and/or Linux.
• Linux autoenrollment, Windows autoenrollment, automated secure VM deployment, and more.
• Signing and encrypting email (SMIME).
• VPN connections by issuing certificates to your VPN routers such as OpenVPN, Cisco, Juniper etc.
• Client VPN access with certificates in users VPN clients.
• Network authentication with 802.1x.
• Single sign-on by using a single certificate to secure logon to web applications.
• Creating signed documents.
• Mobile PKI, enrolling iOS etc.
• Secure mobile networks, i.e. 3GPP/LTE/4G using the CMP protocol.
• Counterfeit prevention by signing and pairing accessories.
• Internet of Things (IoT). Need some hundreds of millions of certificates fast? EJBCA will handle it.
• Mobile Device Management (MdM) and Enterprise Mobility Management (EMM).
• Issue citizen certificates for access to government resources, used in passports etc.
• CVCAs and DVs and issue CV certificates (CVC) to Document Verifiers and Inspection Systems for EAC ePassports, eIDs and eDL.
• ... and many many more ...

One of the reasons The International Civil Aviation Organization introduced the electronic system of Passport is to put an end to the menace of the constant tampering of the personal information printed on the passport booklet, and passport photographs as well by criminals and fraudsters.

To achieve this, a chip is introduced for the booklet. But it doesn't end there because if the chip is not closed and protected, criminals can still have access to the chip and tamper with information encrypted in the passport chip.

In this era of global and cross border terrorism, some advanced technology have become cheap that terrorists and criminals can afford them to undermine state and sovereign border security and peace.

So the International Civil Aviation Organization introduced a unique Public Key Infrastructure that can put a signature and digital seal of the issuing state in the passport chip.

They also introduced a standard and criteria for decrypting and authenticating these digital credentials so that Countries at their borders can recognize and validate every authenticated epassport while those that cannot be validated are questioned.

This, they called CSCA, or Country Signing Certificate Authority. In other words, they expect every State that signs its passport to have or be its own CA with the details furnished to ICAO for auditing and certification as a recognized ICAO eMRTDs Certificate Authority.