Server Certificate Requirements

Before you can enable HTTPS, make sure the selected certificate meets the following requirements:

• The certificate is installed in the Local Computer certificate store.

• The certificate includes a private key.

• The Scan Review service account has permission to access the private key.

Verify that the Certificate has a Private Key

1. Open certlm.msc.

2. Go to Personal > Certificates.

3. Open the certificate you want to use.

4. On the General tab, verify that the following message is displayed: "You have a private key that corresponds to this certificate.".

Verify Private Key Permissions

The Windows service must be able to access the certificate's private key.

First, identify the account that the service is running under:

1. Open services.msc.

2. Locate Scan Review.

3. Open Properties and select the Log On tab.

4. Note the account used to run the service. Typical examples include:

   • Network Service (default)

   • Local System

   • Local Service

   • A dedicated domain service account

Next, verify that this account has permission to use the private key:

1. Open certlm.msc.

2. Go to Personal > Certificates.

3. Right-click the server certificate and select All Tasks > Manage Private Keys.

4. Confirm that the service account has at least Read permission.

If the account is not listed:

1. Click Add.

2. Select the service account.

3. Grant Read permission.

4. Click OK.

Restart

Changes to the Server Hosting settings do not take effect immediately.

After saving any changes to the hosting configuration or server certificate, restart the MyQ Scan Review Windows service. This allows the web server to reload its network bindings and begin using the updated settings.