System Requirements

The Keyfactor CAClosed A certificate authority (CA) is an entity that issues digital certificates. Within Keyfactor Command, a CA may be a Microsoft CA or a Keyfactor gateway to a cloud-based or remote CA. Policy Module is supported on Microsoft certificate authorities running on Windows Server 2016 or higher. It interoperates with Keyfactor Command versions 9.0 or greater.

The policy module requires the Microsoft .NET Desktop Runtime version 10.0 (x64). Version 10.0 is available for download from Microsoft:

At the above link, this would be the Download x64 option under the “Run desktop apps” heading.

You can use the following PowerShell command to check the .NET core version(s) installed on a server (if any):

dotnet --list-runtimes

Output from this command will look something like this if you have the correct 10.0 x64 version of the .NET Desktop Runtime installed (notice the paths are in C:\Program Files, not C:\Program Files (x86), indicating this is the x64 version):

Microsoft.NETCore.App 10.0.2 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]

Microsoft.WindowsDesktop.App 10.0.2 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]

The policy module also requires a Keyfactor Command license key for the current release with a policy module license.

Important:  If you're upgrading from a previous version of the Keyfactor CA Policy Module, refer to the Keyfactor Command Upgrade Overview for important upgrade instructions and a required upgrade script. Newer versions of Keyfactor CA Policy Module cannot be installed over the top of existing Keyfactor CA Policy Module installations to complete an upgrade.