Key Manager Plus Agent

Password Manager Pro allows users to discover the SSL Certificates deployed across their network through agents. The agent used to perform certificate management operations on remote machines is dynamically created by the Password Manager Pro.

  1. Downloading the KMP Agent
  2. Installing the KMP Agent
  3. Managing the KMP Agent 
  4. Discovering SSL Certificates using Agent
  5. Signing Certificate(s) using Agent
  6. Deploying Certificate(s) using Agent
  7. Deploying Certificate(s) in Multiple Servers using Agent
  8. Deleting Agent(s)

1. Downloading the KMP Agent

The agent used to perform certificate management operations on remote machines is dynamically created by the Password Manager Pro server and is available for download from within the interface. To download the KMP Windows agent:

  1. Navigate to Discovery >> Agent >> Download Windows Agent.
  2. From the pop up that opens, download the agent based on your server configuration. Also, copy and save the Install Key in a secure location.

2. Installing the KMP Agent

Once you have downloaded the agent, follow the instructions below to install it in the target servers. The downloaded package already contains the configurations necessary to perform the required operations. Just make sure the account in the server in which the agent is installed has sufficient privileges to perform certificate discovery.

Steps to Install KMP Agent as a Windows Service:

  1. Move the .zip file downloaded from the Password Manager Pro server to the target server.
  2. Unzip its contents and place the file in an unshared folder.
  3. Open the command prompt, navigate to the agent installation directory and type the command: AgentInstaller.exe install < Install Key > by supplying the Install Key stored in the secure location.

Note: The Install Key is revoked after being used for a single installation. If you want to perform another installation of the agent, you need to regenerate the Install Key from the Password Manager Pro server and supply it in the agent server.

Steps to Start the Agent as a Windows Service:

  1. Open the command prompt and navigate to the Password Manager Pro agent installation directory.
  2. Execute the following command: AgentInstaller.exe start.

On successful installation, you can find the KMP agent running as a service in the target server.

Steps to Stop the Agent:

  1. Open the command prompt and navigate to the KMP agent installation directory.
  2. Execute the following command: AgentInstaller.exe stop

3. Managing the KMP Agent

Key Manager Plus provides administrators insights about agent activity and allows management of agents installed on various target resources.

To manage Key Manager Plus agents,

  1. Navigate to Certificates >> Windows Agent.
  2. In the window that opens, you will be able to see a list of Key Manager Plus agents installed on remote resources along with insights such as Host Name, IP address, User Name, Version, Installed TimeHeartBeat Interval, Last HeartBeat, and last Operation performed.
  3. If you want to delete an agent, you can do so by choosing the agent and clicking Delete from the top menu.

4. Discovering SSL Certificates using Agents

  1. Navigate to Certificates >> Windows Agent and select the agent.
  2. Click Discovery.
  3. In the pop-up that appears,
    1. Choose DMZ to discover certificates from servers in the demilitarized zone.
    2. Choose to Discover by 
    3. If you choose to Discover by 
    4. If you choose Microsoft Certificate Authority, select the required checkboxes and enter the required details, mention the Time out(in seconds)and click Discover.

  4. The certificates are successfully discovered and imported into Password Manager Pro centralized certificate repository. You can view them from Certificates >> Windows Agent.
  5. After certificate discovery, click the Host Name of an agent to view all certificates associated with that particular agent.

5. Signing Certificate(s) using Agent

  1. Navigate to Certificates >> Windows Agent >> Discovery and select the agent.
  2. Select the Certificate Template or click Get Templates link to get new templates.
  3. Select the CSR from the dropdown and click Sign.

Now the certificates are successfully signed and will be available to the repository.

6. Deploying Certificate(s) using Agent

  1. Navigate to Certificates >> Windows Agent and select the agent.

  2. Click Deploy and select the required server from the drop-down. 
    1. If you choose Windows (using agent), select the Certificate Group, mention the Path and select the checkboxe(s) certificate and/or JKS/PKCS based on your requirement and click Deploy.
    2. If you choose MS Store (using agent), select the Certificate Group and click Deploy.
    3. If you choose IIS (using agent), select the Certificate Group and click Deploy.
    4. If you choose IIS Binding (using agent), select the Certificate Group, mention the Site Name and click Get Bindings.
    5. Click Manage link to manage the certificate group.
    6. Click Save to save the changes.
  3. Now, the certificates will be deployed and will be available under SSL tab.

7. Deploying Certificate(s) in Multiple Servers using Agent

  1. Navigate to Certificates >> Certificates tab and click multiple servers icon corresponding to the required certificate.
  2. A window opens listing the servers in which the certificate is deployed along with other information such as IP address, Port and certificate validity.
  3. The DNS name should be same as the Agent's name and this agent should be running under the DNS server.
  4. To modify the Server details, click credentials icon corresponding to the required certificate.
  5. Select the Deployment Type as Agent.
  6. Select the Server Type and select the required Agent.
  7. Mention the Path, and select the required checkbox(es).
  8. If you select Certificate, enter the Certificate File Name.
  9. If you select JKS / PKCS, mention the Store File Name.
  10. Click Save.

Now, the certificates have been successfully deployed using agent. To know more about SSL certificate deployment click here.

8. Deleting Agent(s)

  1. Navigate to Certificates >> Windows Agent and select the required Agent(s) to be deleted and click Delete.
  2. Click Ok in the pop-up that appears.
  3. The certificate will be deleted from the list.

©2014, ZOHO Corp. All Rights Reserved.

Top