Current Compatibility Matrix - Keyfactor Products

The tables below show compatibility between supported Keyfactor Command releases and supported Keyfactor products, including gateways, platforms, and orchestrators. Versions that are no longer supported are not included.

In the tables below, each row represents the external product version. Columns indicate supported Keyfactor Command release streams.

Table 1: Compatibility Matrix Legend

Symbol Definition
All functionality is fully supported
Functionality is not supported
* OAuth functionality introduced in Windows Enrollment Gateway (EJBCA CAs) v24.1 requires Keyfactor Command v11 or higher.

EJBCA Native Support

Table 2: Compatibility Matrix - Keyfactor Command and EJBCA

EJBCA Versions Command 25.x Command 24.x Command 12.x
9.4
9.3.5 - 9.3.6
9.3.4
9.3.3
9.2 - 9.2.2
9.1

Windows Enrollment Gateway (EJBCA CAs)

Table 3: Compatibility Matrix - Keyfactor Command and Windows Enrollment Gateway

Gateway Versions Command 25.x Command 24.x Command 12.x
25.x * * *
24.x * * *
23.x

AnyCAGateway REST

Table 4: Compatibility Matrix - Keyfactor Command and AnyCAGateway REST

Gateway Versions Command 25.3 - 25.5 Command 25.1-25.2 Command 24.x Command 12.x
25.5
25.1 - 25.4
24.4
24.2
24.1
23.1

CA Connector Client versions 25.5 and later require AnyCAGateway REST versions 25.5 and later.

AnyGateway DCOM

AnyGateway DCOM versions 22.1.x and later are supported with Keyfactor Command 12.x and later.

Windows Cloud Gateway (Microsoft CAs)

Windows Cloud Gateway versions are independent of Keyfactor Command releases. There are no version-based compatibility restrictions between the two.

Universal Orchestrator

Universal Orchestrator versions 12.x and later are supported with Keyfactor Command 12.x and later.

SSH Orchestrator

Table 5: Compatibility Matrix - Keyfactor Command and SSH Orchestrator

Orchestrator Versions Command 25.x Command 24.x Command 12.x
2.0.0
1.0.1

Windows Orchestrator

The Keyfactor Windows Orchestrator was deprecated as of Keyfactor Command version 11. Customers must migrate to the Keyfactor Universal Orchestrator, with the appropriate custom extension, publicly available at:

CA Connector Client

CA Connector Client versions 12.1 and later are supported with Keyfactor Command 12.x and later.

CA Connector Client versions 25.5 and later require AnyCAGateway REST versions 25.5 and later.

Keyfactor ACME

Table 6: Compatibility Matrix - Keyfactor Command and Keyfactor ACME

Keyfactor ACME Versions Command 25.x Command 24.x Command 12.x
25.x
24.x
2.4.1