Upgrade the Gateway Server

To upgrade to MOVEit Gateway 2024

1. Reboot the MOVEit Gateway machine and sign in as an administrator.
2. Go to the My Products section of the Customer Portal and download the MOVEit Gateway 2024 installer for MOVEit Transfer.
3. Open the Gateway installer and click Run to run the install wizard.
4. Welcome: To agree to the End User License Agreement and begin the installation, click Next.
5. System Check: The installer verifies the following:
   • Operating System Version: The machine must be running the Windows Server 2016, 2019, or 2022 operating system
   • Administrator privileges

     Click Next.

6. Gateway Configuration Interface. Designate a certificate to use as the identity of the Gateway Configuration interface. This certificate will be used for connections to the administrator interface, typically on port 9443.
   Choose one of the following certificate options.

   • X.509 (*.pfx or *.p12) certificate from your computer (recommended): Browse to locate the SSL *.pfx or *.p12 file. Since in many cases the hostname of the Gateway server will be the hostname previously assigned to a MOVEit Transfer server, you may wish to use the certificate already installed on your MOVEit Transfer server. If you need to create a *.pfx or *.p12 file from your MOVEit Transfer server, see Create a *.pfx or *.p12 File. Enter the Certificate password in the space provided.
   • No changes - keep the current certificate configuration: By default, the installer reuses the existing configuration.
   Choose the network interface and port to listen on:

   • Network Interface: Select a network interface (IP address) from the drop-down list. In most cases, you will want the Gateway to listen on All Interfaces.
   • Port: Enter the TCP port to which Gateway administrators will connect with a browser, to administer MOVEit Gateway. It is recommended that you accept the default of 9443. When configuring the TCP port for the administrative interface, do not choose a port number that is likely to already be in use by the system, such as 443. The default, 9443, is a good choice for most systems.

   Click Next.

   If you chose to import a certificate from your computer, insert the keystore password.

7. SSH Tunnel Authentication Key: Enter the SSH Tunnel Authentication Key used by the MOVEit Transfer Server tunnel, or leave blank to enter the key later.

   The SSH Tunnel Authentication Key is managed by MOVEit Transfer. It is located on the MOVEit Transfer server Config Utility, on the Gateway tab.

   Click Next.

8. Service Logon Account: Designate which account Gateway should use to run the Gateway service process:
   • Local System account
   • Different account: Enter the username and password of the different account.

   Click Next.

9. Upgrade:
   • Verify the upgrade options.
   • Save the keystore and truststore passwords. After installation, the passwords are encrypted and unreadable.
   • Click Upgrade. After a few moments, the upgrade is complete.
10. To complete the MOVEit Gateway configuration, click Finish.
    Note: When you see the Enable Windows Firewall message, ignore it for now.
    Note: Your web browser may open the Gateway Configuration Interface. Configure the Gateway Connection on the MOVEit Transfer Server before updating the Gateway Configuration Interface.

Next steps

Configure the Gateway Connection on the MOVEit Transfer Server

Gateway Configuration Interface

Review the Firewall Rules

Remove the Legacy Tunnel