> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kinetica.com/llms.txt
> Use this file to discover all available pages before exploring further.

# KAgent Security Install

<img src="https://mintlify.s3.us-west-1.amazonaws.com/kinetica/content/install/install/img/kagent_security.png" alt="../../install/img/kagent_security.png" />

<Note>
  The *Security* configuration section is only required if *Core*
  is being installed.
</Note>

1. Enter and confirm an **Admin Password**. It must meet
   the password strength requirements.

   <Note>
     This is the password used to access *Reveal*, *Workbench*, *KAgent*, and
     *GAdmin* as the default administrative user.
   </Note>

2. Select an **SSL Mode**:

   * **Cert/key setup not required** -- *Kinetica* will not require
     SSL certificate/key creation/upload and SSL will not be enabled
   * **User-provided cert/key per node** -- user must upload an SSL
     certificate and key for each node; *Kinetica* copies the cert/key pair
     to <Badge color="gray">/opt/gpudb/certs</Badge>, enables HTTPD, and configures HTTPD to use
     HTTPS
   * **Generate self-signed cert/key per node** -- *KAgent* generates
     a self-signed certificate and key for each node and places it in
     <Badge color="gray">/opt/gpudb/certs</Badge>, enables HTTPD, and configures HTTPD to use HTTPS

3. Select an **Authentication** type and fill the fields as necessary:

   * **None** -- no authentication or authorization
   * **LDAP** -- configures *Kinetica* to authenticate via *LDAP*;
     requires authentication to connect to the database, enables authorization,
     enables external authentication, automatically creates users in the
     database for *LDAP* users, and automatically grants roles in the database
     to *LDAP* users
   * **Active Directory** -- configures *Kinetica* to authenticate via
     *Microsoft Active Directory*; requires authentication to connect to the
     database, enables authorization, enables external authentication,
     automatically creates users in the database for *Active Directory* users,
     and automatically grants roles in the database to *Active Directory* users
   * **Kerberos** -- configures *Kinetica* to authenticate via
     *Kerberos*; requires authentication to connect to the database, enables
     authorization, enables external authentication, automatically creates users
     in the database for *Kerberos* users, and automatically grants roles in the
     database to *Kerberos* users
   * **OAuth** -- configures *Kinetica* to authenticate via an
     *OAuth* service; requires authentication to connect to the database,
     enables authorization, enables external authentication, automatically
     creates user in the database for *OAuth* users, and automatically grants
     roles in the database to *OAuth* users

   <Warning>
     No SSL or authentication is **not** recommended! For more information on
     security configurations and settings as well as how to manually configure
     *Kinetica* for a secure setup, see [Security Configuration](/content/security/sec_configuration).
   </Warning>

4. Click **Next**.