Getting Started with Key Manager Plus

Upon completing the Key Manager Plus setup, you can begin using the application. Before configuring the necessary settings and working with the Key Manager Plus console, it is important to familiarize yourself with a set of initial start-ups that will facilitate continuing with further Key Manager Plus operations. This guide provides comprehensive steps on starting, shutting down, and launching the Key Manager Plus application in both Windows and Linux environments.

1. Starting & Shutting Down Key Manager Plus

1.1 In Windows

1.2 In Linux

Key Manager Plus can be run as a background service by executing specific commands in a non-root user environment. The service can be started or stopped using terminal commands.

1. To start the Key Manager Plus as a service in Linux, log in as non-root user and execute the following command.
   sudo /etc/init.d/sshkeymanager-service start
   Upon execution, Key Manager Plus server runs in the background as service.
2. To stop the Key Manager Plus server running as a service, execute the following command as a non-root user:
   sudo /etc/init.d/sshkeymanager-service stop

Changing the Key Manager Plus Service to systemd Service Manager

By default, the Key Manager Plus service is managed using the init.d process control system. However, you can switch to the systemd service manager to take advantage of parallel service execution and enhanced management capabilities by following the steps below:

1. Create a systemd unit file using the following command:
   sudo vi /etc/systemd/system/kmp.service
2. Now, add the following content to the kmp.service file, updating it with your valid Key Manager Plus details:

   _[Unit]
   Description=Key Manager Plus
   After=network.target_
   _[Service]
   Type=simple
   User=root
   WorkingDirectory=<KeyManagerPlus-Installation-Directory>/bin
   ExecStart=<KeyManagerPlus-Installation-Directory>/bin/wrapper -c <KeyManagerPlus-Installation-Directory>/conf/wrapper_lin.conf
   ExecStop=<KeyManagerPlus-Installation-Directory>/bin/*sshkeymanager-service* stop
   KillMode=none
   Restart=on-failure
   TimeoutSec=300_
   _[Install]
   WantedBy=multi-user.target_

3. Replace <KeyManagerPlus-Installation-Directory> with the absolute path of the Key Manager Plus installation directory. Then, save the file kmp.service file to the location '/etc/systemd/system'.
4. Enable the service using the following command:
   sudo systemctl enable kmp.service
5. Start the service using the following command:
   sudo systemctl start kmp.service
6. To check the status of the service, execute the following command:
   sudo systemctl status kmp.service

2. Accessing the Key Manager Plus Web Interface

There are different ways to connect to the Key Manager Plus web interface:

2.1 Automatic Browser Launch

Once the Key Manager Plus server starts successfully, a web browser is automatically launched displaying the Key Manager Plus login page. Since the connection uses HTTPS, you will be prompted to accept the security certificate. Click Yes to proceed. Enter the username and password on the login screen and press Enter.

2.2 Launching the Web Client Manually

In Windows environments, you can also launch the web client manually from the Windows system tray. Right-click the Key Manager Plus tray icon and select Key Manager Plus Web Console. A browser will open displaying the Key Manager Plus login page.

Since the connection uses HTTPS, you will be prompted to accept the security certificate. Click Yes, enter the username and password, and press Enter.

In Linux environments, open a web browser and connect to the following URL:
https://<hostname>:<portnumber>/

where,

• hostname - The machine on which Key Manager Plus is running.
• portnumber - The port used by the Key Manager Plus server (the default port number is 6565).

For example: https://localhost:6565/

2.3 Connecting to the Web Client in Remote Hosts

To connect to the Key Manager Plus web client from a remote machine (different from the one where the server is running), open a browser and connect to:
https://<hostname>:portnumber/

where,

• hostname - The machine on which Key Manager Plus is running.
• portnumber - The port used by the Key Manager Plus server (the default port number is 6565).

As Key Manager Plus uses a secure HTTPS connection. You will be prompted to accept the security certificate. Click Yes, enter your Username and Password on the login screen, and press Enter.

3. Managing the Key Manager Plus Encryption Key

Key Manager Plus uses AES-256 encryption to secure SSH keys, SSL certificates, and other sensitive information stored in its database. The encryption key is auto-generated and unique to every installation. By default, it is stored in a file named kmp_key.key under the <KeyManagerPlus-Installation-Directory>/conf directory.

Key Manager Plus does not allow the encryption key to be stored within its installation directory. This is to ensure that the encrypted key and encrypted data, in both live and backed-up databases, do not reside in the same location.

We strongly recommend storing the encryption key outside of the Key Manager Plus server — preferably on a separate machine or an external drive (hard drive, USB drive, etc.). In such cases, ensure that the Key Manager Plus server has full permission to access the device and the key file at every startup. Once the service is up and running, it no longer needs access to the key and the external device can be taken offline.

Key Manager Plus stores the path of the encryption key in a configuration file named manage_key.conf, located under <KeyManagerPlus-Installation-Directory>/conf. You can edit this file directly to update the key file location.

4. Licensing

Key Manager Plus offers three license types:

The term 'keys' refers to the total number of SSH private keys, SSL certificates, and any other digital keys managed using Key Manager Plus.

4.1 Apply License File

When you purchase Key Manager Plus, you will receive a product license key. To apply the license key, follow the steps given below:

1. Click your account information in the top-right corner of the GUI.
2. Select the License option from the drop-down list.
3. Click the Update License button in the License Details pop-up window.
4. Upload the license file you have and apply the license.