Installing IIS and ASP.NET on Windows Server 2019 and 2022

The following figures show the components of IIS and ASP.NET necessary to support Keyfactor Command on Windows Server 2019 and 2022. Your Keyfactor Command server may have additional roles or features installed that are not shown in these figures.

Important:  The ASP.NET Core Hosting Bundle that is also required (see System Requirements) should not be installed before installing IIS. If the hosting bundle is installed before IIS is installed, the bundle will not function correctly after the IIS install and will require repair.

Keyfactor Command makes use of the Active Directory tools for PowerShell to do group membership queries in Active Directory in some functions (e.g. when using a group to create a mapping between a Linux logon for SSHClosed The SSH (secure shell) protocol provides for secure connections between computers. It provides several options for authentication, including public key, and protects the communications with strong encryption. and one or more SSH keys). The Active Directory module for Windows PowerShell is installed as a feature as part of the Remote Server Administrator Tools.

Important:  Do not install the IIS WebDAV Publishing feature. Keyfactor Command will not operate correctly if this feature is installed.

Note that it is possible to install IIS and the necessary features using PowerShell rather than the below-referenced GUI-based installation method. The correct PowerShell command for this is:

Copy 
Install-WindowsFeature Web-Server, Web-Asp-Net45, Web-Default-Doc, Web-Dir-Browsing, Web-Http-Errors, Web-Static-Content, Web-Http-Logging, Web-Stat-Compression, Web-Filtering, Web-Basic-Auth, Web-Windows-Auth, Web-Net-Ext45, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Mgmt-Console, RSAT-AD-PowerShell
Tip:  To check and see if all the required roles and features have been installed, use Get-WindowsFeature with the same list of roles and features like so:
Get-WindowsFeature Web-Server, Web-Asp-Net45, Web-Default-Doc, Web-Dir-Browsing, Web-Http-Errors, Web-Static-Content, Web-Http-Logging, Web-Stat-Compression, Web-Filtering, Web-Basic-Auth, Web-Windows-Auth, Web-Net-Ext45, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Mgmt-Console, RSAT-AD-PowerShell

Output from this command will look something like the following, which shows some required features installed and some missing. Make sure all roles and features in the query output are marked Installed before continuing.

Figure 499: Use Get-WindowsFeature to Determine if All Required Roles and Features are Installed

Figure 500: Web Server Role

Figure 501: .NET 4.7 Feature

Figure 502: Role Services Page One

Figure 503: Role Services Page Two

Figure 504: Active Directory Module for Windows PowerShell