Enable Key Recovery in EJBCA for Device Certificates
In my previous post, I used EJBCA RA Web to issue ThingsBoard device certificates from an externally signed IoT device […]
Identity, Security & PKI
Identity, Security & PKI
Identity, Security & PKI
Manage ThingsBoard Device Certificates with EJBCA After Creating an External IoT Device CA
In my environment, I already had Step CA running as my private PKI bootstrap CA, EJBCA CE running on Ubuntu
Identity, Security & PKI
Integrate EJBCA RA Web Login with Keycloak (OIDC / OAuth2)
This post documents a working setup to log in to EJBCA RA Web using Keycloak as an OpenID Connect (OIDC)
Identity, Security & PKI
Install EJBCA CE on Ubuntu 24.04 with WildFly + MariaDB (no Docker)
This guide installs EJBCA Community Edition (example: r9.3.7) on Ubuntu 24.04, using WildFly as the application server and MariaDB as
Identity, Security & PKI
Why Jenkins Keeps Logging You Out (OIDC + Keycloak): Finding and Fixing the Timeout Layer
When Jenkins is authenticated by Keycloak (OIDC) and sits behind NGINX, “session timeout” is not a single knob. You can
Identity, Security & PKI
Enable GitHub SSO for Teleport Community Edition
This guide enables GitHub login for a self-hosted Teleport Community Edition cluster using a GitHub OAuth App and maps GitHub
Identity, Security & PKI
Authenticate WordPress to Keycloak with OpenID Connect (OIDC) using a plugin
This post shows how to authenticate WordPress (https://www.maksonlee.com) against Keycloak (https://keycloak.maksonlee.com) using OpenID Connect (OIDC) with a WordPress plugin (no
Identity, Security & PKI
Upgrade Keycloak (Tarball + systemd + MariaDB) on Ubuntu 24.04
Short outage method: Stop → Backup → Upgrade → Start Example upgrade: 26.4.6 → 26.5.2 This post upgrades a Keycloak
Identity, Security & PKI
Enroll a Self-Hosted PostgreSQL into Teleport CE
This post shows how to enroll a self-hosted PostgreSQL (Ubuntu 24.04, PostgreSQL 16) into an existing Teleport Community Edition cluster
Identity, Security & PKI
Enroll a Kubernetes Cluster into Teleport CE (Helm)
This post follows Teleport’s official Kubernetes Access “Getting Started” flow, using the Web UI guided enrollment (Helm) and validating access