keyfactor / digicertsym-cagateway Goto Github PK

#Upgrade Anygateway With SQL Auth
#Set location of installed directory
Set-Location "C:\Program Files\Keyfactor\Keyfactor AnyGateway"

#Get current json from DB
Get-KeyfactorGatewayConfig -CAHostname gw1.ad.local -LogicalName "Logical CA" -FilePath C:\InstallSource\AnygatewayBackup.json
#Check the Json for good information

#Run MSI first, then run this command
.\DatabaseManagementConsole.exe upgrade --server sql_server_FQDN --database DB_Name -u DB_User -p DB_User_Password

Import-Module ".\ConfigurationCmdlets.dll"
Set-KeyfactorGatewayEncryptionCert
#-u DB_User -p DB_User_Password
$account=Get-Credential

Set-KeyfactorGatewayDatabaseConnection -Database DB_Name -Server sql_server_FQDN -Account $account

#Setting the config with Keyfactorapi section filled out and unpublished from AD
#You may have to pull another JSON after the upgrade above to get the new section in the JSON to complete this.
Set-KeyfactorGatewayConfig -CAHostname gw1.ad.local -logicalName "Logical CA" -FilePath C:\InstallSource\AnyGateway-22.1.0\XXX.json -unpublishAD
 
#run Support.usp_DisassociateCA stored procedure on this Gateway and resync. If it is an older version of the gateway (less than 22.1.1) it could introduce sync and issuing certificate problems if not running the Support.usp_DisassociateCA.

#troubleshooting from Keyfactor Command Server
$certAdmin = New-Object -ComObject CertificateAuthority.Admin
$certAdmin.GetCAProperty("FQDN host\some logical name", 0x1D, 0, 4, 0)

#Upgrade Anygateway With Windows Authentication
#Set location of installed directory
Set-Location "C:\Program Files\Keyfactor\Keyfactor AnyGateway"

#Get current json from DB
Get-KeyfactorGatewayConfig -CAHostname gw1.ad.local -LogicalName "Logical CA" -FilePath C:\InstallSource\AnygatewayBackup.json

#Run MSI first, then run this command
.\DatabaseManagementConsole.exe upgrade --server sql_server_FQDN --database DB_Name

Import-Module ".\ConfigurationCmdlets.dll"
Set-KeyfactorGatewayEncryptionCert

Set-KeyfactorGatewayDatabaseConnection -Database DB_Name -Server sql_server_FQDN

#Setting the config with Keyfactorapi section filled out and unpublished from AD
#You may have to pull another JSON after the upgrade above to get the new section in the JSON to complete this.
Set-KeyfactorGatewayConfig -CAHostname gw1.ad.local -logicalName "Logical CA" -FilePath C:\InstallSource\AnyGateway-22.1.0\XXX.json -unpublishAD
 
#run Support.usp_DisassociateCA stored procedure on this Gateway and resync. If it is an older version of the gateway (less than 22.1.1) it could introduce sync and issuing certificate problems if not running the Support.usp_DisassociateCA.

#troubleshooting from Keyfactor Command Server
$certAdmin = New-Object -ComObject CertificateAuthority.Admin
$certAdmin.GetCAProperty("FQDN host\some logical name", 0x1D, 0, 4, 0)