Web Farm Install
- Last Updated: July 29, 2025
- 2 minute read
- MOVEit Gateway
- Version 2024.1
- Version 2024
- Documentation
To install MOVEit Gateway in a MOVEit Transfer web farm, first create the MOVEit Transfer web farm as per the MOVEit Transfer documentation.
For each web farm node, provision a separate Windows computer to run MOVEit Gateway for that node.
Install and Configure MOVEit Gateway
For each web farm node:
- Run the MOVEit Gateway installer on that node's MOVEit Gateway server.
- Configure the tunnel for MOVEit Gateway on the MOVEit Transfer web farm node via the Transfer Config Utility, on the Gateway tab.
SSH/SFTP Key Pair Requirements for Web Farms
In a MOVEit Gateway Web Farm configuration, it may be necessary to export/import an SSH keypair from MOVEit Gateway for import on another Gateway server. To complete this process, the Keystore Explorer (http://keystore-explorer.org/downloads.html) third-party application is required, and the Java Runtime environment must be downloaded on to the Gateway server.
Export the Gateway Proxy SSH/SFTP Key
Pair
To export the SSH key pair from the primary Gateway
node:
- Log in to the Gateway Manager on the Gateway server.
- Click on the SETTINGS tab in the Gateway Manager interface.
- Scroll down to find the KeyStore and TrustStore Password Reset section.
- Enter new passwords for both the Keystore and TrustStore. Make a secure note of these passwords for future use.
- Click Update Passwords to apply changes. A confirmation popup will appear.
- Open the Keystore Explorer application, and click Open an Existing KeyStore.
- Navigate to the Gateway KeyStore, which is by default C:\ Program Files\MOVEit\MOVEit Gateway\keys.
- Double click keystore.jks. When prompted for a password, use the Keystore password set in step 4.
- Locate the SFTP keypair in the list, right-click it, and choose .
- Enter the keystore password and click OK.
- To export the keypair, select the format PKC#12, provide a password for the exported file, and the export location. Click Export.
Import the SSH/SFTP Key Pair on
Additional Nodes
To import the SFTP key pair on another
Gateway server:
- On the Keys and Certs page, click Import.
- Drag a key file (.pfx or .p12) into the boxed area or click to browse and locate the file. A single .pfx or .p12 file may contain multiple keys.
- Enter the password for the key file.
- Click Import. After successful import, the new key displays in the Keys list.
Apply the Imported SSH/SFTP Key to the SSH Proxy
- Log in to the MOVEit Gateway Manager on the target server where the SSH keypair was imported.
- Navigate to the SSH proxy configuration section and stop the currently running SSH proxy service.
- Select the SSH proxy and click Edit to modify its settings.
- In the SSH Key drop-down menu, choose the key that was imported during the keypair import process.
- Click Save to apply the updated configuration.
- Start the SSH proxy.
See also Web Farms and Load Balancers.