> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kinetica.com/llms.txt
> Use this file to discover all available pages before exploring further.

# KAgent Security Add Upgrade

<img src="https://mintlify.s3.us-west-1.amazonaws.com/kinetica/content/install/install/img/kagent_security.png" alt="../../install/img/kagent_security.png" />

1. Enter and confirm the existing **Admin Password**. This is the
   password used to access *Reveal*, *Workbench*, *KAgent*, and *GAdmin* as the
   default administrative user.

   <Note>
     The password provided here must match the existing cluster's admin
     password.
   </Note>

2. Select an **SSL Mode** that best aligns with the existing cluster's
   SSL configuration:

   * **Cert/key setup not required** -- *Kinetica* will not require
     SSL certificate/key creation/upload but there will be no updates to
     security configuration settings
   * **User-provided cert/key per node** -- user must upload an SSL
     certificate and key for each node; *Kinetica* copies the cert/key pair
     to <Badge color="gray">/opt/gpudb/certs</Badge>, enables HTTPD, and configures HTTPD to use
     HTTPS
   * **Generate self-signed cert/key per node** -- *KAgent* generates
     a self-signed certificate and key for each node and places it in
     <Badge color="gray">/opt/gpudb/certs</Badge>, enables HTTPD, and configures HTTPD to use HTTPS

3. Select the current **Authentication** type used for the existing
   cluster and fill the fields as necessary:

   * **None** -- no authentication or authorization
   * **LDAP** -- configures *Kinetica* to authenticate via *LDAP*;
     requires authentication to connect to the database, enables authorization,
     enables external authentication, automatically creates users in the
     database for *LDAP* users, and automatically grants roles in the database
     to *LDAP* users
   * **Active Directory** -- configures *Kinetica* to authenticate via
     *Microsoft Active Directory*; requires authentication to connect to the
     database, enables authorization, enables external authentication,
     automatically creates users in the database for *Active Directory* users,
     and automatically grants roles in the database to *Active Directory* users
   * **Kerberos** -- configures *Kinetica* to authenticate via
     *Kerberos*; requires authentication to connect to the database, enables
     authorization, enables external authentication, automatically creates users
     in the database for *Kerberos* users, and automatically grants roles in the
     database to *Kerberos* users

4. Click **Next**.