009 - How to request a Group Certificate

As an Administrator, you may find it useful to have access to the encryption keys used by your Accounts. You can gain access to these by requesting a Group Certificate and then uploading it to the Storage Platform using the Storage Platform Console. You can also request a Group Certificate for a Collection. This certificate will then be valid for all Collections and Groups within the parent Collection. Read more about Group Certificates in Article 1148. 

Important note: As a rule, a backup agent's encryption key is only captured when a backup is performed following the upload of the Group Certificate. If the agent has not been active after the Group Certificate was uploaded, it is highly unlikely that the key will be able to be retrieved. The only way to ensure access to a key is for at least one backup of the account to have completed after the Group Certificate was uploaded.

To request a Group Certificate:

1. In the Account Management view of the the Storage Platform Console, right-click the relevant Group name and click Certificate.

2. Click Request Certificate.

3. In the Information box that appears, click OK.

4. In the Passphrase dialog box, type a passphrase, confirm it and click OK.

5. The dialog box that appears will provide you with the location of your newly created certificate file (.csr). To activate your certificate, you will need to log a support ticket, attaching your .csr file.

When creating your ticket, select Group Certificate in the Product or Component field.

6. In response to your support ticket, Redstor will return a certificate file (.crt) to you. Note that there is a lead time of two (2) business days for a Group Certificate to be issued. You can then upload your Group Certificate to the Storage Platform Console.