XCA

by Christian Hohnstaedtv2.9.0

Last updated Aug 31, 2026

This application is intended for creating and managing X.509 certificates, certificate requests, RSA, DSA and EC private keys, Smartcards and CRLs.

Visit homepage

Install with winget

$ winget install --id ChristianHohnstadt.xca --exact --version 2.9.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for XCA

XCA uses MSI (WiX). The silent install switches are /quiet /norestart.

One-line silent install (x64, machine scope)

msiexec.exe /i xca-2.9.0-win64.msi /quiet /norestart

See the full silent install reference for XCA →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

From $49/month. No credit card required.

Not on Intune? Pckgr RMM deploys and patches apps like this one on any Windows fleet. Free for up to 5 devices.

Installers · v2.9.0

Architecture	Type	Scope	Install	Download
x64	MSI WiX	machine		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

No known CVEs for XCA.

Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.

Related apps

Paranoia File & Text EncryptionParanoia Works
ParanoiaWorks.PFTEv17.3.43
Encrypt files, folders, and text with strong algorithms. Includes steganography and post-quantum key exchange (ML-KEM).
CryptomatorSkymatic GmbH
Cryptomator.Cryptomatorv1.19.4
Encryption made easy and optimized for the cloud
FireDaemon OpenSSLFireDaemon
FireDaemon.OpenSSLv4.1.0
FireDaemon OpenSSL Installer
GNU Privacy GuardThe GnuPG Project
GnuPG.GnuPGv2.5.24
GNU Privacy Guard (GnuPG or GPG) is a free-software replacement for Symantec's PGP cryptographic software suite.
PrivateAccessSanDisk Corporation
SanDisk.PrivateAccessv6.4.14.0
SanDisk PrivateAccess tool for creating passwords, encrypting and backup.
PicocryptEvan Su
Picocrypt.Picocryptv1.49
A very small, very simple, yet very secure encryption tool.

More from Christian Hohnstaedt or browse cryptography.

Frequently asked questions

How do I install XCA on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id ChristianHohnstadt.xca --exact --version 2.9.0. winget downloads the installer from Christian Hohnstaedt and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install XCA silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id ChristianHohnstadt.xca --exact 2.9.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

What are the silent install switches for XCA?

XCA uses MSI (WiX). Run the downloaded installer with: msiexec.exe /i xca-2.9.0-win64.msi /quiet /norestart. The silent switches are /quiet /norestart.

How do I uninstall XCA via winget?

Run: winget uninstall --id ChristianHohnstadt.xca --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from XCA's Apps & Features entry.

Is XCA free?

XCA is distributed under BSD License. Refer to the publisher (https://hohnstaedt.de/xca/index.php) for the full license terms - Wingetly itself does not charge for installation.

Does XCA work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls XCA directly from the publisher.

How do I keep XCA up to date?

Run winget upgrade --id ChristianHohnstadt.xca --exact, or winget upgrade --all to update everything winget tracks. We index 8 versions of XCA from microsoft/winget-pkgs.

Recent versions

2.9.0latest
2.8.0
2.7.0
2.6.0
2.5.0
2.4.0
2.3.0
RELEASE.2.4.0