System Requirements for Key Manager Components
This section provides the minimum and recommended system requirements for Key Manager components.
Key Manager Server Requirements
A Key Manager Server is a machine that runs a Key Manager back end and/or a Key Manager front end. Before installing Key Manager Server software, make sure that the machine meets the following system requirements:
| Minimum | Recommended |
|---|---|
| 4 processors or cores | 16 processors or cores |
| 8 GB RAM | 32 GB RAM |
| 30 GB disk space | 100 GB disk space |
| Tectia SSH Server 6.6.3 or newer | Tectia SSH Server 6.6.3 or newer |
The Key Manager back-end architecture supports multiprocessing and benefits from using multiple CPUs or multiple CPU cores. For 40 concurrent jobs (default maximum value), a modern multi-core CPU is recommended.
Each concurrent process running on a Key Manager back end requires up to 500 MB of memory.
Key Manager Server software can be installed on these platforms:
| Operating system | Supported versions |
|---|---|
| Rocky Linux (x86-64) | 8.10 and later 8.x releases 9.7 and later 9.x releases 10.1 and later 10.x releases |
| Red Hat Enterprise Linux (x86-64) | 8.10 and later 8.x releases 9.7 and later 9.x releases 10.1 and later 10.x releases |
| Amazon Linux | 2023.10 and later 2023 releases |
The following table describes the space-allocation requirements.
| Area | Space requirement |
|---|---|
| Base OS in site-specific configuration | 5 GB |
| Key Manager related software | 1 GB / version |
| Database area with external database | 0 GB |
| Database area with local database | Hundreds of GB |
| Working areas (temporary directories) | > 10 GB |
| Home directories | 5 GB |
For temporary directories allocate at least 10 GB. You can count the exact required space as follows:
number concurrently running KA scanners (max processes) * average number of logins during scan interval to the target server * 500 bytes. The required space can range from 1 GB to 100 GB, depending on target
activity and whether log rotation is used.
Do not place this area on a memory-backed filesystem such as tmpfs: Downloaded log files may be large and may compete with memory needed by the processes that handle them. We recommend cleaning up old files (last modified several days ago) from the temporary area.
Reserve several GB of disk space for software upgrades on Key Manager Servers. On hosts running the Key Manager client, reserve enough space for operator-generated report data.
For large environments using script-based scans, allocate an additional 10-15 GB of disk space for each 100 000 deployed hosts.
Key Manager Database Requirements
The supported versions and the system requirements for an external database are as follows:
- PostgreSQL 14, 15, 16
- Oracle Enterprise Edition 19c
| Minimum | Recommended |
|---|---|
| 4 processors or cores | 16 processors or cores |
| 8 GB RAM | 64 GB RAM |
| 500 GB disk space | 1 TB disk space or more |
Key Manager also supports RDS and Aurora PostgreSQL instances of the listed PostgreSQL versions. However, RDS instances of Oracle Enterprise Editions are not supported.
Reserve enough space for log data and monitor the growth of the database.
The Key Manager system stores all collected log data in the Key Manager Database, and large deployments of hosts may generate considerable amounts of data over time.