Install a user certificate on a computer

Install the user certificate, and add full permissions on every computer from which you will access the failover web console.

Install the user certificate on the same computer where you have installed the server certificate.

  1. Copy the [user name].p12 file from the primary computer to the computer that needs access to the failover web console.
  2. Right-click the user certificate and select Install Certificate.

  3. In the Certificate Import wizard, choose the Store Location:

    • For the primary and secondary computers, select Local Machine

    • For all other computers, select Current User

    Select Next.

  4. Browse to the certificate file and select Next.

  5. Specify the password for the private key from when you created the server certificate, and select Next

  6. Place the file in the Certificate Store: Personal and select Next.

  7. Verify the information and select Finish to import the certificate.

Add full control permissions

You need to allow the user that runs the Management Server service to use the private key of the user certificate.

To add full control permissions, on the primary and secondary computers:

  1. Open the Start menu, and enter certlm.msc to open the Certificate Manager tool for the local device.

  2. Select Personal and Certificates, and then select the user certificate that you have just installed.

  3. Right-click the certificate and select All Tasks > Manage Private Keys.

  4. Add full control permission for the user that runs the Management Server service. The default user is Network Service:

    Allow full control for NETWORK SERVICE from the Securty tab in the Permissions window.

If you had opened the web page of the failover web console before you installed the certificates, refresh the web page. Your browser may prompt you to select a user certificate.