What is KMA™?
Exostar Key Management Agent (KMA™) is a Java based application developed by Exostar. KMA™ replaces ActiveX as your tool for downloading digital certificates on your hardware token.
Users will need to use Exostar KMA™ to download and install certificates on to USB PKI hardware tokens (i.e., MLOA hardware). For Software or Disk-based PKI Identity and Email certificates you do not need to install and use KMA.
To self-check KMA™ click here.
Exostar offers various types of authenticators to access services including Managed Access Gateway (MAG). Some of the authenticators Exostar offers are:
- USB PKI hardware tokens (Medium Level of Assurance MLOA hardware)
- Software or Disk-based PKI Identity
- Email certificate (Basic Level of Assurance BLOA software)
- OTP hardware tokens and mobile application (phone-based OTP authenticators)
Who should install KMA™?
You will need to download and install KMA™ if you are:
- A MAG user downloading digital certificates for hardware token for the first time
- A MAG user renewing digital certificates for hardware token
- An Enterprise Proofer
| Level of Assurance | Requirements |
|---|---|
| Basic Level of Assurance (BLOA) Software BLOA SecureEmail Software | • Does not require in-person identity check (no proofing required) • User does not have to download KMA™ • Identity certificates are stored on the user’s computer |
| Medium Level of Assurance (MLOA) Software | • In-person proofing required • User does not have to download KMA™ • All 3 certificates (signature, identity and encryption) are installed on the user’s computer |
| Medium Level of Assurance (MLOA) Hardware | • In-person proofing required • User has to download KMA™ but can use any modern browser • All 3 certificates (signature, identity and encryption) are installed onto a USB token |
How do I install KMA™?
The KMA™ application is packaged in a Microsoft Installer (MSI) file which will guide you through the setup process.
To download and install KMA™, click the link – KMA Desktop File
To download and install Corporate KMA™, click the link – KMA Corporate File
| KMA Version | Details |
|---|---|
| KMA Desktop | https://portal.exostar.com/kma/ExostarKeyManagementAgentDesktop-1.0.90.msi MD5: c198b0f9ef3a8c93690239ef4ee1f47f SH2: 494a16dd4ba7a16c8ff2337b20fa28daf7f92546c638dfed4f58873b374f8b33 |
| KMA Corporate | https://portal.exostar.com/kma/ExostarKeyManagementAgentDesktop-corporate-1.0.90.msi MD5: c0a3f868af498003e2b254a8f06c45f8 SH2: cc68554444960b24ae197de382c3a168958cec399cb81793494cad4b1afbbf4c |
| DMG | https://portal.exostar.com/kma/Exostar%20KMA-1.0.90.dmg MD5: 8fbcff06f6e0fea1024635ab62221977 SH2: 0fce7c282f801d23de59f0f0d0d3b9705d367aa0e4f1f13ee965694a403b6315 |
| JSON | JSON File: https://portal.exostar.com/kma/ekma.json |
| MAC OSX | OSX: https://portal.exostar.com/kma/SAC_10.9.2499_MAC.zip |
Is my system compatible with KMA™?
The following operating systems and browsers are compatible with KMA™:
| Operating System | Chrome (132.0.6834.15) | MS Edge (131.0.2903.63) | Firefox* (132.0.2) | Safari (26.0) |
|---|---|---|---|---|
| Windows 11 | Yes | Yes | Yes | N/A |
| Windows 10 | Yes | Yes | Yes | N/A |
| MAC OSX | No | No | No | Yes |
*NOTE: If you use Firefox to download KMA™ for software certificates, the certificates will be imported into OS key store. Users will have to manually import the certificates into Firefox for 2FA into MAG.
Frequently Asked Questions
1. Exostar SafeNet Client
2. Exostar KMA™
Common Issues
We encourage our users to check if any of the errors you are seeing is listed below before reaching to Exostar Customer Support.
Downloadable Guides
FIS Product Guide: Full user guide on FIS product and how to download certificates.
Related Pages: