MYOWNCA / DOCUMENTATION
Questions & answers
Answers about trust, deployment, certificate identities, and licensing.
Can I modify the source or create a derivative version?
No. EnigmaIS source is available for inspection, but source modifications and derivative versions are prohibited under both free and paid terms. Normal settings, supported APIs, and deployment configuration remain permitted. Third-party components retain their own licenses.
What is myOwnCA?
myOwnCA is a self-hosted private certificate authority for small and medium-sized organizations and home labs. It brings certificate requests, approvals, issuance, renewal, and revocation into a guided browser-based workflow, while you control the infrastructure and signing keys.
Will browsers automatically trust my certificates?
Certificates issued by your private CA are trusted by devices and applications where you have installed your root certificate. myOwnCA does not distribute that trust anchor for you. For publicly trusted service certificates, it also includes an outbound ACME client for external certificate authorities.
Can I keep my root certificate authority offline?
Yes. Production setup supports an air-gapped root that signs your issuing CA through an offline ceremony. The root private key stays off the issuing-CA server. A separate Test/Lab installation mode can create a local root and issuing CA for evaluation.
Do I need a hardware security module?
No. You can use encrypted software-held signing keys, or configure AWS KMS or Azure Key Vault. For a host-attached PKCS#11 HSM or smart card, use the supported standalone deployment. The supplied Docker Compose setup uses software-held keys by default and does not include local PKCS#11 passthrough.
What counts toward my plan’s identity limit?
Each first issuance starts a certificate identity, also called a lineage. It counts while any certificate in that lineage is active and unexpired. A genuine renewal stays in the same lineage, including during key rotation, so renewal overlap does not consume another slot. Changing the certificate identity creates a new lineage. External or imported service certificates do not count.
How does commercial licensing work?
Personal includes 10 active certificate identities for genuine non-commercial use. Every commercial use requires a paid license, even within that limit. Annual subscriptions are priced net in PLN per production installation: Starter includes 100 identities for 2,190 PLN, Business 500 for 5,690 PLN, and Professional 1000 for 8,790 PLN. Enterprise covers larger or custom requirements by individual quote. Paid subscriptions include the license, updates, and support appropriate to the plan. Source is available for inspection; modifications and derivative versions are prohibited under both free and paid terms. Normal settings, supported APIs, and deployment configuration remain permitted. An installation-bound license raises the certificate-identity allowance and is verified offline. Renewals, monitoring, revocation, export, audit, and recovery are not gated by paid capacity. Consumers resident in Poland and businesses registered in Poland can buy Starter, Business, or Professional online in PLN with 23% VAT. Gross annual prices are 2,693.70 PLN, 6,998.70 PLN, and 10,811.70 PLN respectively. Payment covers one year upfront without automatic renewal. Licenses and invoices are delivered separately by EnigmaIS. Contact info@enigmais.com for Enterprise or other requirements.
See plans and pricing, the launch licensing policy summary, purchase terms, and purchase privacy information.
Planning a deployment?
Talk to EnigmaIS