Trust the Document Processor Certificate on a Remote Client

When a remote client connects to MyQ Document Processor over HTTPS, the client machine must trust the Document Processor server certificate.

This procedure is required when Document Processor uses its internally generated Certificate Authority (CA) and server certificate. It is not required when Document Processor uses a certificate issued by a publicly trusted CA.

Prerequisites

Before you begin, make sure that:

• The client machine can reach the Document Processor server over the required network port.

• The Document Processor server has a hostname that resolves from the client machine.

• You know the hostname and port of the Document Processor server.

• You have administrative access to the client machine.

Clients must connect to Document Processor using a hostname included in the Document Processor certificate, for example:

https://doc-processor.local:8080

Do not use the Document Processor server IP address.

Set up Certificate Trust

1. Export the Document Processor CA package

On the Document Processor server, use the SysTray Agent to export the Document Processor CA package.

The exported ZIP file contains:

• ca.crt

• install-ca.bat

2. Copy the package to the client machine

Copy the exported ZIP file to the client machine using a secure method and extract it.

Keep ca.crt and install-ca.bat in the same folder.

3. Install the Document Processor CA certificate

You can install the Document Processor CA certificate in two ways – by running the exported batch script, or by installing the certificate manually.

Install the certificate with the batch script

On the client machine, run the file install-ca.bat. Confirm the User Account Control prompt when requested. The script installs the Document Processor CA certificate into the Trusted Root Certification Authorities store for the local machine.

When the installation completes successfully, the script displays:

[SUCCESS] Certificate installed successfully to Trusted Root Certification Authorities (Local Machine)

Install the certificate manually

1. On the client machine, double-click on the certificate ca.crt file and select Install Certificate...

2. Set the Store Location to Local Machine and click Next. Click Yes on the UAC confirmation that appears.

3. For the certificate store, select Place all the certificates in the following store.

4. Click Browse, then select Trusted Root Certification Authorities and click OK.

5. Click Next and then Finish.

Validate the Connection

Go to MyQ > Settings > Connections, and define a connection to connection from the client application. Fill in the required fields, and click Test.

If the test is successful, the client trusts the Document Processor certificate correctly and you are ready to use Document Processor.