Passwordstate Documentation

Installation Overview ​

This guide will instruct you to download one of two PowerShell scripts, and execute it either on your Passwordstate webserver, or on a separate server of your choice. The scripts differ slightly depending on where you are intending on setting up the Gateway.

This script will perform the following tasks:

  • If installing on a separate server, it will install the gateway source to C:\Program Files (x86)\Passwordstate Remote Session Gateway
  • Creates a log file in the same directory where you execute the PowerShell script from
  • Can download OpenJDK from https://cdn.azul.com/zulu/bin/ and extracts this file to C:\Program Files (x86). This download is approximately 200mb in size
  • Adds a value of C:\Program Files (x86)\OpenJDK\bin to the “PATH” System Environment Variable. Also adds in a new Environment Variable called JAVA_HOME with the value of C:\Program Files (x86)\OpenJDK. If these already exist, they will be removed before adding them back in
  • If running this installer on your Passwordstate webserver, it will automatically export your certificate from your https binding in IIS. If installing separately, you must provide this certificate yourself
  • Installs a Windows Service called Passwordstate-Gateway
  • Removes all temporary source files that were created during this process

Please follow either Installing Gateway on Passwordstate Web Server of this document to install the gateway on your Passwordstate web server, or Installing Gateway on A Separate Server to install it on a separate server.

Note 1: Once our installation script has installed OpenJDK, future upgrades of Passwordstate will not also upgrade OpenJDK. Click Studios strongly encourages all customers to establish and follow a regular software patch management process, and patch OpenJDK on a regular basis.

Note 2: By default, Passwordstate comes installed with a Self-Signed Certificate as this is the only type of certificate Click Studios can supply during the install. Typically, you would change your certificate to something more secure such as one issued from your Internal Certificate Authority, or a purchased one from an online provider. If your Passwordstate website is still using a Self-Signed Certificate, and you do not supply your own during this install process, your RDP and SSH remote Sessions will fail until you force your browser to trust the certificate.