Confium PKI

Run a CA without a single trusted key.

CA OperatorsEnterprise PKI TeamsInstitutional PKI

What is Confium PKI?

Full PKI lifecycle from threshold keys: issue, revoke, CRL. OCSP responder, ACME integration. PKCS#11 server, OpenSSL 3.0 provider, JCE provider. Composite signatures for PQ migration.

Key Features

Threshold CA (issue/revoke/CRL)

PKCS#11 + OpenSSL adapters

OCSP responder

ACME protocol

PQ composite signatures

Quick Start

# Install

cargo install confium-cli

Who is this for?

CA Operators

Enterprise PKI Teams

Institutional PKI

Crates

{c}{c}{c}{c}{c}