System Requirements

For a full list of the requirements, see the System Requirements section of the Keyfactor Command Server Installation Guide1.

Operating System

Keyfactor Command server is supported on Windows Server 2019 or 2022.

Note:  As of Keyfactor Command version 10.0, Windows Server 2016 is no longer supported. The installer will not check your server version nor prevent installation, but the product will not function properly in some instances. Customers should upgrade to Windows Server 2019 or higher before upgrading to Keyfactor Command version 10.0 or later.
PKI Architecture

Please visit Confirm the Architecture and review the implications of upgrading with regard to the PKI architecture elements.

SQL Server

As of Keyfactor Command version 10.0, connectivity to the SQL server requires TLS encryption. For information about configuring TLS for SQL server, see:

https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/enable-encrypted-connections-to-the-database-engine?view=sql-server-ver15

Microsoft SQL Server 2016 with cumulative update (CU) 2 or higher, SQL 2017, or SQL 2019 is required. You also need to ensure the database compatibility is updated to support 2016 or higher (level 130 or higher). For more information about SQL 2016 CU 2 see:

https://support.microsoft.com/en-us/topic/kb3182270-cumulative-update-2-for-sql-server-2016-8dc9ecae-4af9-cb12-d058-37cafc7f3758

Tip:  To check the compatibility level of the database, run the query:

SELECT name, compatibility_level FROM sys.databases

The value returned for compatibility_level should match the version of SQL server you are using for your Keyfactor Command database(s). If this needs to be updated, take a backup before updating the compatibility level via SQL query. For example, to update to compatibility_level 150 (SQL 2019):

ALTER DATABASE [KeyfactorDB] SET COMPATIBILITY_LEVEL = 150

Where [KeyfactorDB] is the name of your Keyfactor Command database and the compatibility_level value matches the version of SQL server you are using.

For more information, see:

https://docs.microsoft.com/en-us/sql/t-sql/statements/alter-database-transact-sql-compatibility-level?view=sql-server-ver15

.NET Framework

Microsoft .NET 4.7.2 or greater must be installed on the Keyfactor Command server(s) prior to installation of the latest Keyfactor Command software.

For Windows Server 2019 and Windows Server 2022, .NET is a standard Windows feature added through the Windows Server Manager tool. It can be updated to .NET 4.7.2 or greater with a downloadable update package or through Windows update.

To verify the version of .NET installed, either:

  1. Open the Registry Editor:

    regedit

  2. Navigate to:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
  3. Validate that the Release attribute value indicates a version of .NET Framework that is 4.7.2 or higher is installed, as shown in Table 1: .NET Framework Release Values.

Or:

  1. Open a command prompt or PowerShell window and type the following command:

    reg query "HKLM\Software\Microsoft\NET Framework Setup\NDP\v4\Full"
  2. Validate that the Release attribute value indicates a version of .NET Framework that is 4.7.2 or higher is installed, as shown in Table 1: .NET Framework Release Values.

Table 1: .NET Framework Release Values

.NET Framework

Release Value (Decimal)

 Release Value (Hexadecimal)
.NET Framework 4.6.2 394802 or 394806 60632 or 60636
.NET Framework 4.7 460805 70805
.NET Framework 4.7.1 461308 or 461310 709FC or 709FE
.NET Framework 4.7.2 461808 or 461814 70BF0 or 70BF6
.NET Framework 4.8 528040, 528049, 528372, or 528449 8oEA8, 80EB1, 80FF4, 81041
PowerShell Requirement

More recent versions of Keyfactor Command make use of the Active Directory tools for PowerShell to do group membership queries in Active Directory in some functions (e.g. when using a group to create a mapping between a Linux logon for SSH and one or more SSH keys). If this feature is not already installed on your Keyfactor Command server, you will need to install it before upgrading the Keyfactor Command software. The Active Directory module for Windows PowerShell is installed as a feature as part of the Remote Server Administrator Tools. You may install this through the Roles and Features wizard or using the following PowerShell command:

Install-WindowsFeature RSAT-AD-PowerShell