[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-283649-105":53,"doc-detail-283649-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","keyfactor-command-115-server-installation-guide","Keyfactor Command 11.5 - Server Installation Guide","","Keyfactor Command 11.5 Server Installation Guide provides step-by-step installation and initial configuration guidance for deploying the Keyfactor Command server environment. It covers logical and physical architecture, solution design, prerequisite system requirements, planning tasks, identity provider selection, SQL Server setup, certificate authority preparation, service account and access control groups, and certificate chain trust configuration. The guide also explains SSL and IIS/.NET installation, Kerberos authentication, logging, CA certificate synchronization, certificate template creation for enrollment and auto-enrollment, CA policy module installation, and relevant troubleshooting topics.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/keyfactor-command-115-server-installation-guide/283649/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/keyfactor-command-115-server-installation-guide/283649.png","ImageObject",442,249,{"name":88,"@type":89},"Skyler","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-11-04","2026-09-17",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",22,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What are the key planning items before installing Keyfactor Command 11.5 servers?","Question",{"text":109,"@type":110},"The guide emphasizes selecting an identity provider, preparing SQL Server details, choosing certificate authorities, creating service accounts, setting up access-control groups, and configuring certificate chain trusts and hostname resolution.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"How does the guide handle certificate and SSL setup for the Keyfactor Command Server?",{"text":114,"@type":110},"It instructs acquiring a public key certificate for the server, installing IIS and .NET, configuring SSL for the default web site, and setting the server to require SSL, with optional preparation for external log shipping over TLS.",{"name":116,"@type":107,"acceptedAnswer":117},"What components are installed during the Keyfactor CA Policy Module setup?",{"text":118,"@type":110},"The document covers installing CA Policy Module handlers, including the RFC 2818 policy handler, SAN attribute policy handler, and whitelist policy handler, followed by logging configuration and steps to manage non-Keyfactor SCEP servers.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},283649,1791716175,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":22},2336464648746,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","2024 | Keyfactor  \nKeyfactor Command 11.5  \nServer Installation Guide  \nTable of Contents  \n1.0 Introduction  1  \n2.0 Installing Servers  2  \n2.1 Logical Architecture  3  \n2.2 Physical Architecture  6  \n2.3 Solution Design  8  \n2.4 Keyfactor Command Server  8  \n2.4.1 System Requirements  9  \n2.4.2 Planning & Preparing  11  \n2.4.2.1 Selecting an Identity Provider for Keyfactor Command  11  \n2.4.2.2 SQL Server  50  \n2.4.2.3 Certificate Authorities  63  \n2.4.2.4 Keyfactor Command Server(s)  65  \n2.4.2.5 Create Service Accounts for Keyfactor Command  66  \n2.4.2.6 Create Groups to Control Access to Keyfactor Command Features  72  \n2.4.2.7 Configure Certificate Chain Trusts for CAs  73  \n2.4.2.8 Hostname Identification and Resolution  74  \n2.4.2.9 Firewall Considerations  75  \n[2.4.2.10](2.4.2.10) Acquire a Public Key Certificate for the Keyfactor Command Server  77  \n[2.4.2.11](2.4.2.11) Install IIS and .NET on the Keyfactor Command Server  78  \n[2.4.2.12](2.4.2.12) Configure SSL for the Default Web Site on the Keyfactor Command Server  84  \n[2.4.2.13](2.4.2.13) Configure the Keyfactor Command Server to Require SSL  84  \n[2.4.2.14](2.4.2.14) Prepare for External Log Shipping over TLS (Optional)  85  \n2.4.3 Installing  90  \n2.4.3.1 Install the Keyfactor Command Components on the Keyfactor Command Server(s)  90  \n2.4.3.2 Install the Keyfactor Command Server from the Command Line  125  \n2.4.4 Initial Configuration  132  \n2.4.4.1 Configure Kerberos Authentication  133  \n2.4.4.2 Configure Logging  140  \n2.4.4.3 Configure CA Certificate Synchronization  141  \n2.4.4.4 Create or Identify Certificate Templates for Enrollment  150  \n2.4.4.5 Configure Renewal Handler Permission  151  \n2.4.4.6 Create a Certificate Template for Mac Auto-Enrollment  153  \n2.5 Keyfactor CA Policy Module  154  \n2.5.1 System Requirements  155  \n2.5.2 Preparing for the Keyfactor CA Policy Module  155  \n2.5.3 Installing the Keyfactor CA Policy Module Handlers  156  \n2.5.3.1 Install the Keyfactor RFC 2818 Policy Handler  160  \n2.5.3.2 Install the Keyfactor SAN Attribute Policy Handler  165  \n2.5.3.3 Install the Keyfactor Whitelist Policy Handler  171  \n2.5.4 Configure Logging for the Keyfactor CA Policy Module  178  \n2.5.5 Add Non-Keyfactor SCEP Servers to the Ignore List  180  \n2.6 Appendices  180  \n2.6.1 Appendix-Troubleshooting Logi Log Files  180  \n2.6.2 Appendix-Logi Load Balancing: Keyfactor Command Configuration Wizard Setup  182  \n2.6.3 Appendix-Configuration Wizard Errors in the Logs  184  \n3.0 Glossary  185  \n4.0 Copyright Notice  195  \nList of Tables  \nTable 1: System Requirements 9  \nTable 2: Keyfactor Identity Provider Container Parameters 23  \nTable 3: Typical Service Accounts 71  \nTable 4: Protocols Keyfactor Command Uses for Communication 76  \nTable 5: .NET Framework Release Values 78  \nTable 6: Available components for Keyfactor. 92  \nTable 7: Identity Provider Parameters 103  \nTable 8: Features Required for Each Server Role 127  \nTable 9: Input Parameters XML File Fields 129  \nTable 10: ConfigurationWizardConsole.exe Options 132  \nTable 11: Microsoft CA Permission Matrix 145  \nList of Figures  \nFigure 1: Keyfactor Command Logical Architecture Diagram 3  \nFigure 2: Keyfactor Command Physical Architecture Diagram 7  \nFigure 3: Simple Keyfactor Command Solution Design 8  \nFigure 4: Select the Download Hosting Bundle Option Under Run Server Apps 10  \nFigure 5: Export the SQL Server Certificate as a P7B 14  \nFigure 6: Add a SQL Authentication Login 17  \nFigure 7: Add a SQL Database 18  \nFigure 8: Select a Realm in the Keyfactor Identity Provider Administration Console 26  \nFigure 9: Select Command-OIDC-Client in the Keyfactor Identity Provider Administration Console 26  \nFigure 10: Set the Client Access Settings 27  \nFigure 11: OpenID Endpoint Configuration Link 28  \nFigure 12: OpenID Endpoint Configuration Settings 29  \nFigure 13: SSO Session Values 29  \nFigure 14: Access Token Lifespan 30  \nFigure 15: Add a Keyfactor Identity Provider User 31  \nFigure 1","cbCainEzku3u93q6","https://ap.wps.com/l/cbCainEzku3u93q6","pdf",28028377,201,"English","# 1.0 Introduction\n# 2.0 Installing Servers\n## 2.1 Logical Architecture\n## 2.2 Physical Architecture\n## 2.3 Solution Design\n## 2.4 Keyfactor Command Server\n## 2.4.1 System Requirements\n## 2.4.2 Planning & Preparing\n## 2.4.3 Installing\n## 2.4.4 Initial Configuration\n## 2.5 Keyfactor CA Policy Module\n## 2.6 Appendices\n# 3.0 Glossary\n# 4.0 Copyright Notice","[{\"question\":\"What are the key planning items before installing Keyfactor Command 11.5 servers?\",\"answer\":\"The guide emphasizes selecting an identity provider, preparing SQL Server details, choosing certificate authorities, creating service accounts, setting up access-control groups, and configuring certificate chain trusts and hostname resolution.\"},{\"question\":\"How does the guide handle certificate and SSL setup for the Keyfactor Command Server?\",\"answer\":\"It instructs acquiring a public key certificate for the server, installing IIS and .NET, configuring SSL for the default web site, and setting the server to require SSL, with optional preparation for external log shipping over TLS.\"},{\"question\":\"What components are installed during the Keyfactor CA Policy Module setup?\",\"answer\":\"The document covers installing CA Policy Module handlers, including the RFC 2818 policy handler, SAN attribute policy handler, and whitelist policy handler, followed by logging configuration and steps to manage non-Keyfactor SCEP servers.\"}]","Keyfactor Command 11.5 - Server Installation Guide | PDF",1789615669]