System Requirements

The Keyfactor CAClosed A certificate authority (CA) is an entity that issues digital certificates. Within Keyfactor Command, a CA may be a Microsoft CA or a Keyfactor gateway to a cloud-based or remote CA. Policy Module is supported on Microsoft certificate authorities running on Windows Server 2016 or higher. It interoperates with Keyfactor Command versions 9.0 or greater.

The policy module requires the Microsoft .NET Desktop Runtime version 6.0 (x64). Version 6.0 is available for download from Microsoft:

At the above link, this would be the Download x64 option under the “Run desktop apps” heading.

You can use the following PowerShell command to check the .NET core version(s) installed on a server (if any):

dotnet --list-runtimes

Output from this command will look something like this if you have the correct 6.0 x64 version of the .NET Desktop Runtime installed (notice the paths are in C:\Program Files, not C:\Program Files (x86), indicating this is the x64 version):

Microsoft.NETCore.App 6.0.11 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]

Microsoft.WindowsDesktop.App 6.0.11 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App]

The policy module also requires a Keyfactor Command license key for the current release with a policy module license.

Important:  If you're upgrading from a previous version of the Keyfactor CA Policy Module, refer to the Keyfactor Command Upgrade Overview for important upgrade instructions and a required upgrade script. Newer versions of Keyfactor CA Policy Module cannot be installed over the top of existing Keyfactor CA Policy Module installations to complete an upgrade.