Jellyfish

Functional comparison of PKI platforms

The following table provides a high-level comparison of Jellyfish and selected enterprise PKI platforms across 18 capabilities. The comparison covers five areas:

  1. Deployment options
  2. Core PKI services
  3. Automated certificate enrolment
  4. Post-quantum cryptography
  5. Hardware Security Module integration

The platforms assessed are:

  • Jellyfish CA
  • Entrust (Cryptographic Security Platfom + PKI Hub + Enrollment Gateway)
  • Keyfactor (EJBCA + Command + SignServer)
  • Nexus Group (SmartID)
  • RedHat (Certificate System)
  • Microsoft (AD CS + NDES)
  • Sectigo (Enterprise PKI)

Feature

Jellyfish

Entrust

Keyfactor

Nexus Group

RedHat

Microsoft

Sectigo

On-Prem deployment

✅

✅

✅

✅

✅

✅

✅

PKIaaS

✅

✅

❌

✅

❌

❌

✅

CA

✅

✅

✅

✅

✅

✅

✅

RA

✅

✅

✅

✅

✅

❌

✅

OCSP/VA

✅

✅

✅

✅

✅

✅

✅

AE spt - CMC

✅

✅

✅

❌

✅

❌

❌

AE spt - EST

✅

✅

✅

✅

✅

✅

✅

AE spt - CMP

✅

✅

✅

✅

✅

❌

✅

AE spt - SCEP

✅

✅

✅

✅

✅

✅

✅

AE spt - ACME

✅

✅

✅

✅

✅

❌

✅

AE spt - MS AE (WSTEP/WCCE)

✅

✅

✅

❌

❌

✅

❌

PQC - ML-DSA

✅

✅

✅

❌

❌

❌

❌

PQC - ML-KEM

✅

❌

✅

❌

❌

❌

❌

PQC - SLH-DSA

✅

❌

✅

❌

❌

❌

❌

HSM - Thales

✅

❌

✅

✅

✅

✅

✅

HSM - nCipher

✅

✅

✅

✅

✅

✅

✅

HSM - Utimaco

✅

❌

✅

✅

✅

✅

✅

HSM - PKCS-11

✅

❌

✅

✅

✅

✅

✅