Compatibility Matrix

All supported Keyfactor Command versions' compatibility with the various supported Keyfactor gateways, agents, platforms, and orchestrators, etc. is shown in Table 1: Compatibility Matrix (with Compatibility Matrix Legend).

Table 1: Compatibility Matrix

Product Keyfactor Command Compatibility
CA Connector Client
Version 25.1 24.x 12.0-12.5 11.0-11.6
25.1
24.4
12.0
Keyfactor ACME
Version 25.1 24.x 12.0-12.5 11.0-11.6
25.1
2.4.1.1
2.4.1
Universal Orchestrator
Version 25.1 24.x 12.0-12.5 11.0-11.6
25.1
24.x
12.x
11.x
Windows Orchestrator
Note:  The Keyfactor Windows Orchestrator was deprecated as of Keyfactor Command version 11. Customers must migrate to the Keyfactor Universal Orchestrator, with the appropriate custom extension, publicly available at:
EJBCA Native Support
Version 25.1 24.x 12.0-12.5 11.0-11.6
9.0

8.x

7.12.x
SSH Orchestrator
Version 25.1 24.x 12.0-12.5 11.0-11.6
2.0.0
1.0.1
AnyCAGateway REST
Version 25.1 24.x 12.0-12.5 11.0-11.6
25.1
24.4
24.2
24.1
23.1
AnyGateway DCOM
Version 25.1 24.x 12.0-12.5 11.0-11.6
25.1
24.4
24.2
24.1
23.x
22.1.x
Windows Enrollment Gateway (EJBCA CAs)
Version 25.1 24.x 12.0-12.5 11.0-11.6
25.1 * * * *
24.4 * * * *
24.2 * * * *
24.1 * * * *
23.4
23.3
23.1.0
SQL Server
Version 25.1 24.x 12.0-12.5 11.0-11.6
2022
2019
2017
Windows Server
Version 25.1 24.x 12.0-12.5 11.0-11.6
2022
2019
Windows Cloud Gateway (Microsoft CAs) The Windows Cloud Gateway and Keyfactor Command versions are independent of each other so there is no compatibility conflict between the two. The latest version of the Windows Cloud Gateway is v24.4.

Table 2: Compatibility Matrix Legend

Symbol Definition
All functionality is fully supported
No Functionality will work

Some functionality may work but is not considered to be supported

* OAuth functionality introduced in Windows Enrollment Gateway (EJBCA CAs) v24.1 requires Keyfactor Command v11 or higher.
+ Universal Orchestrator versions 10.x are supported with use of Active Directory, but not OAuth.