Installation
The following sections provide information on system requirements and step-by-step instructions for installing the Software Appliance.
The Software Appliance supports the leading virtualization platforms, including VMware ESXi, Microsoft Hyper-V, and KVM-based hypervisors.
System Requirements
Before you install the Software Appliance, ensure that the system requirements are met.
The following hardware specifications are recommended for the virtual machine.
- RAM: 16 GB
- Disk space:
1st Disk: 60 GB firmware
2nd Disk: 2 TB data disk - CPU: 8 vCPU cores
- 1 NIC
Software Appliance Installation
Prerequisites
The following lists prerequisites for the installation instructions:
- A Software Appliance package (downloaded from your Keyfactor download area).
- Mozilla Firefox installed on the administrator workstation.
Create Virtual Machine
For step-by-step instructions on how to create a virtual machine, see the following sections:
- Deploy a Virtual Machine on ESXi
- Deploy a Virtual Machine on Hyper-V
- Deploy a Virtual Machine on KVM based Hypervisors
Ports and Protocols
Pre-installation requirements:
Make sure that the network administration has granted the necessary rights to generate the following connections.
Protocol | Direction | Port | Protocol |
|---|---|---|---|
HTTP | in | 80 | TCP (Transmission Control Protocol) |
HTTPS | in | 443 | TCP (Transmission Control Protocol) |
SNMP (Simple Network Management Protocol) | in | 161 | UDP (User Datagram Protocol) |
internal clustering (VPN) | in/out | 54905 | UDP |
NTP (Network Time Protocol) optional | out | 123 | Default UDP |
DNS (Domain Name System) | out | 53 | UDP |
syslog (System Logging Protocol) | out | 514 (configurable) | Default UDP |
HSM (Hardware Security Module) | Direction | Port |
|---|---|---|
Luna Network HSM | out | 1792 (configurable) |
Thales DPoD | out | varies |
Utimaco CryptoServer LAN | out | 288 |
TrustWay Proteccio netHSM | out out | 5551 5552 |
Entrust nShield Connect | out in* | 9004 (configurable) 9004 |
* only open if the toggle Allow nShield HSMs to fetch software-based key hash is turned on.
External Database | Direction | Port |
|---|---|---|
MariaDB Database | out | 3306 |
Oracle Database | out | 1521 |
PostgreSQL | out | 5432 |
Microsoft SQL Server | out | 1433 |