System Requirements

The Keyfactor Remote CAClosed A certificate authority (CA) is an entity that issues digital certificates. Within Keyfactor Command, a CA may be a Microsoft CA or a Keyfactor gateway to a cloud-based or remote CA. Gateway ConnectorClosed The Keyfactor Gateway Connector is installed in the customer forest to provide a connection between the on-premise CA and the Azure-hosted, Keyfactor managed Hosted Configuration Portal to provide support for synchronization, enrollment and management of certificates through the Azure-hosted instance of Keyfactor Command for the on-premise CA. It is supported on both Windows and Linux. is supported on the following operating systems:

  • Windows Server 2019 or higher

  • Oracle Linux 7 or higher

  • Red Hat Enterprise 7 or higher

  • Ubuntu 16 or higher

Important:  Connections to Microsoft CAs are only supported from instance of the Keyfactor Remote CA Gateway Connector running on Windows.
Note:  The gateway connector may be installed on the CA as long as the system requirements are met.

The gateway has the following application requirements:

The following applications are required in order to install the Keyfactor Remote CA Gateway Connector on Windows servers.

The gateway connector requires the ASP.NET version 6.

You can use the following PowerShell command to check the .NET core runtime version(s) installed on a server (if any):

dotnet --list-runtimes

If you plan to connect to a Microsoft CA, the gateway connector requires the Microsoft Visual C++ 2019 (or later) redistributable for x64. This is available for download from Microsoft:

https://aka.ms/vs/16/release/vc_redist.x64.exe

The Microsoft Visual C++ Redistributable appears as an application in the Windows Apps & features.

Note:  If this redistributable is missing, you may encounter an error similar to the following:
Could not load file or assembly 'Keyfactor.CAClient.Microsoft.DCOM, Version=2.1.1.0, Culture=neutral, PublicKeyToken=0ed89d330114ab09'. An attempt was made to load a program with an incorrect format.

The following applications are required in order to install the Keyfactor Remote CA Gateway Connector on Linux servers.

The gateway connector requires ASP.NET  version 6. In many cases, this can be installed via the OS package manager. The method to complete this varies depending on the Linux operating system.

You can use the following command to check the .NET core runtime version(s) installed on a server (if any):

dotnet --list-runtimes

The gateway connector can only be installed on a Linux server that has jq installed. You can use the following command to check the jq version of a server:

jq --version

The gateway connector requires a Linux server that uses the systemd service manager. You can use the following command to test whether a system is running systemd:

ps -p 1

The gateway connector can only be installed on a Linux server that is running bash version 4.3 or higher. You can use the following command to check the bash version of a server:

bash --version
A given instance of the Keyfactor Remote CA Gateway Connector and associated Keyfactor Remote CA Service and Keyfactor Remote CA Configuration Portal can support only one type of CA. If you have more than one type of CA (e.g. both Microsoft and EJBCA), you will need more than one instance of these.