Digicertsym-CAGateway - Upgrade commands and details

[s1ph0r]

I have an upgrade of the Digicertsym-CAGateway coming up soon.

1. I do not see directions on how to upgrade this gateway.
2. Does it work with Keyfactor Command 10.3.1 and the anygateway 22.1.1 framework (since any gateway 22.1.1 is a requirement for Keyfactor Command 10.3.1+)?
3. Are there any particular steps to upgrade the gateway instead of a fresh installation?

• The process is usally as follow:

####Upgrade with SQL Auth

#Upgrade Anygateway With SQL Auth
#Set location of installed directory
Set-Location "C:\Program Files\Keyfactor\Keyfactor AnyGateway"

#Get current json from DB
Get-KeyfactorGatewayConfig -CAHostname gw1.ad.local -LogicalName "Logical CA" -FilePath C:\InstallSource\AnygatewayBackup.json
#Check the Json for good information

#Run MSI first, then run this command
.\DatabaseManagementConsole.exe upgrade --server sql_server_FQDN --database DB_Name -u DB_User -p DB_User_Password

Import-Module ".\ConfigurationCmdlets.dll"
Set-KeyfactorGatewayEncryptionCert
#-u DB_User -p DB_User_Password
$account=Get-Credential

Set-KeyfactorGatewayDatabaseConnection -Database DB_Name -Server sql_server_FQDN -Account $account

#Setting the config with Keyfactorapi section filled out and unpublished from AD
#You may have to pull another JSON after the upgrade above to get the new section in the JSON to complete this.
Set-KeyfactorGatewayConfig -CAHostname gw1.ad.local -logicalName "Logical CA" -FilePath C:\InstallSource\AnyGateway-22.1.0\XXX.json -unpublishAD
 
#run Support.usp_DisassociateCA stored procedure on this Gateway and resync. If it is an older version of the gateway (less than 22.1.1) it could introduce sync and issuing certificate problems if not running the Support.usp_DisassociateCA.

#troubleshooting from Keyfactor Command Server
$certAdmin = New-Object -ComObject CertificateAuthority.Admin
$certAdmin.GetCAProperty("FQDN host\some logical name", 0x1D, 0, 4, 0)

####Upgrade with windows auth

#Upgrade Anygateway With Windows Authentication
#Set location of installed directory
Set-Location "C:\Program Files\Keyfactor\Keyfactor AnyGateway"

#Get current json from DB
Get-KeyfactorGatewayConfig -CAHostname gw1.ad.local -LogicalName "Logical CA" -FilePath C:\InstallSource\AnygatewayBackup.json

#Run MSI first, then run this command
.\DatabaseManagementConsole.exe upgrade --server sql_server_FQDN --database DB_Name

Import-Module ".\ConfigurationCmdlets.dll"
Set-KeyfactorGatewayEncryptionCert

Set-KeyfactorGatewayDatabaseConnection -Database DB_Name -Server sql_server_FQDN

#Setting the config with Keyfactorapi section filled out and unpublished from AD
#You may have to pull another JSON after the upgrade above to get the new section in the JSON to complete this.
Set-KeyfactorGatewayConfig -CAHostname gw1.ad.local -logicalName "Logical CA" -FilePath C:\InstallSource\AnyGateway-22.1.0\XXX.json -unpublishAD
 
#run Support.usp_DisassociateCA stored procedure on this Gateway and resync. If it is an older version of the gateway (less than 22.1.1) it could introduce sync and issuing certificate problems if not running the Support.usp_DisassociateCA.

#troubleshooting from Keyfactor Command Server
$certAdmin = New-Object -ComObject CertificateAuthority.Admin
$certAdmin.GetCAProperty("FQDN host\some logical name", 0x1D, 0, 4, 0)