FOIAXpress Encryption Certificate Installation

Prev Next

1 Document/Correspondence Encryption Certificate Installation

This manual provides instructions to install an encryption certificate for Documents/Correspondence on your FOIAXpress server.

NOTE: The images in this manual demonstrate the ATIPXpress process, however the steps are identical for both FOIAXpress and ATIPXpress.

1.1 Generate Certificate

Follow the steps below to generate an encryption certificate:

Context menu for ATIPXpress Cert Config with various options displayed.

  1. Select Server > FOIAXpress Cert Config:

Context menu for ATIPXpress Cert Config with various options displayed.

  1. The Provision Certificates pop up window appears. Click the Enable checkbox and click

Settings for document encryption with an option to generate a certificate highlighted.

  1. The Generate Certificate popup window appears. Enter a password for the certificate in the Password and Confirm Password fields.

Certificate generation interface with fields for path, password, and confirmation.

  1. Click Browse. The Browse for Folder window appears.

  2. Select a destination folder for the certificate and click OK.

  3. The selected folder path appears in the Certificate Path field. Click Generate.

Certificate generation window showing path, password, and confirmation fields.

  1. The Confirm Certificate Provisioning pop up window appears. Click Yes to confirm certificate provisioning:

Confirmation dialog for provisioning a new certificate in Windows Certificates Store.

  1. A confirmation window appears, highlighting the file path that the certificate has been saved to. Click OK.

1.2 Install Certificate

Follow the steps below to install a certificate on the FX/AX server.

  1. Navigate to a generated certificate (see step 8 in the previous section), then right click the certificate and select Install from the drop down list.

Context menu displaying options with 'Install PFX' highlighted prominently for user action.

  1. The Certificate Import Wizard window appears. Select the appropriate Store Location radio button and click Next.

Certificate Import Wizard interface showing options for certificate store location selection.

  1. Click Browse and select the desired certificate file.

Certificate Import Wizard displaying file import options and formats for certificates.

  1. Click Next.

Certificate Import Wizard displaying password entry and import options for private key protection.

  1. Enter the Password for the private key in the Password field (step 3 in section 1.1) and click Next.

  2. Select a Certificate Store option. If selecting Place all certificates in the following store, also select a storage location. Click Next.

Certificate Import Wizard interface showing options for selecting certificate store location.

  1. Click Finish to complete the certificate import.

Certificate Import Wizard completion screen showing selected settings and file name.

  1. A pop-up window appears, indicating that the certificate import was successful. Click OK.

1.3 Manage Certificates

Follow the steps below to finish applying the certificate to the server.

  1. Click Manage Certificates > Personal > Certificates.

  2. Double click on the desired certificate and select Details. The thumbprint should be same as in tblconfig > col

  3. Right click the certificate, then select All Tasks > Manage Private Keys from the drop down list.

Menu options for managing private keys in a certificate management interface.

  1. In the Enter the object names to select field, add Network service as shown below:

Dialog box for selecting users, groups, or service accounts in a network environment.

  1. Click Apply, then click OK at the confirmation to complete the certificate configuration.