Review Service Accounts for the Gateway

The Keyfactor Cloud Gateway installs two services:

• Keyfactor Managed CA A certificate authority (CA) is an entity that issues digital certificates. Within Keyfactor Command, a CA may be a Microsoft CA or a Keyfactor gateway to a cloud-based or remote CA. Gateway

  The main gateway service that receives and processes enrollment Certificate enrollment refers to the process by which a user requests a digital certificate. The user must submit the request to a certificate authority (CA). requests and other CA-related functions.

• Keyfactor Managed CA Sync Service

  The optional service that synchronizes Active Directory account (user and group) and certificate template A certificate template defines the policies and rules that a CA uses when a request for a certificate is received. information from the local forest An Active Directory forest (AD forest) is the top most logical container in an Active Directory configuration that contains domains, and objects such as users and computers. to the managed environment.

By default, these run as Network Service. To update the user running a gateway service, see Start the Gateway Services.

During configuration of the gateway, you will enter a service account from the managed identity provider (Active Directory) in the gateway configuration to allow the gateway to communicate with the Keyfactor Gateway Receiver. You need to have the credentials information (username and password for Basic authentication) ready for this service account before you begin your gateway installation. This information will be provided to you by your Keyfactor representative.