Compare software

step-ca vs FreeIPA: catalog facts
step-ca	FreeIPA
Free Free and open source.	Free Free and open source.
Linux, Self-hosted, Command line	Linux, Web, Self-hosted, Command line
Issues both X.509 and SSH certificates Built-in ACME server for automated renewal	Integrates LDAP, Kerberos, DNS and certificates in one system Trusts with Microsoft Active Directory
Running a private CA requires careful key management Aimed at administrators comfortable with PKI concepts	Linux-centric; built around Fedora and related distributions Many integrated components make it heavy to deploy and operate
Downloadable app, Self-hosted	Self-hosted
Open source	Open source
License not stated	License not stated
Not stated if an account is needed	No account needed
Not stated if it works offline	Not stated if it works offline
Official website Full listing and sources Checked October 1, 2026	Official website Full listing and sources Checked September 23, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.