Installation Steps

The following steps will install KeySafe 5 Service.

KeySafe 5 Service is shipped with a working configuration out of the box and will detect if existing certificates are in place, if no certificates are found then the installer will create self-signed ones with a 30-day validity. To regenerate self-signed certificates with a different validity, see keysafe5-server-admin Utility.

After installation KeySafe 5 Service will be running and available at https://127.0.0.1:18080.

Before installation ensure that all the prerequisites outlined in KeySafe 5 Service Prerequisites are met for the intended deployment.

By default, this KeySafe 5 central platform deployment will only be able to communicate with version 1.5 or later KeySafe 5 Agents. If you want your deployment to be able to communicate with legacy (1.4 or earlier) KeySafe 5 Agents then you must set agent_comms.compatibilityMode to true in KeySafe 5 Service Configuration.

Linux

  1. Extract the KeySafe 5 Service package to the root of the filesystem. The install package can be found in the keysafe5-service directory of the KeySafe 5 release package.

    This unpacks the KeySafe 5 Service binaries and associated scripts into the /opt/nfast/ directory.

    sudo tar -C / -xf /path/to/keysafe5-server-1.5.0-Linux.tar.gz

  2. Configure the KeySafe 5 Service as described in KeySafe 5 Service Configuration and KeySafe 5 Service Certificates.

    This step is optional, KeySafe 5 Service is shipped with a working configuration out of the box.

  3. Run the KeySafe 5 Service install script:

sudo /opt/nfast/keysafe5/server/sbin/install

Managing The Service

To stop, start, or restart the KeySafe 5 service on Linux, use /opt/nfast/scripts/init.d/keysafe5-server. For example:

sudo /opt/nfast/scripts/init.d/keysafe5-server restart

Windows

  1. Double-click on keysafe5-server-1.5.0-windows.msi. The install package can be found in the keysafe5-service directory of the KeySafe 5 release package.

  2. Configure the KeySafe 5 Service as described in KeySafe 5 Service Configuration and KeySafe 5 Service Certificates.

    This step is optional, KeySafe 5 Service is shipped with a working configuration out of the box.

Managing The Service

To stop, start, or restart the KeySafe 5 service on Windows, use the standard Windows Services facility.