How to: Export and Import Encryption Keys

Article
10/25/2016

You can encrypt data on the Microsoft Dynamics NAV Server instance by generating new encryption keys or importing or changing existing encryption keys that you enable on the server instance.

Note

If Dynamics NAV is configured with multiple service tiers (Microsoft Dynamics NAV Server instances), then you must first enable encryption on one server instance and then export the key so it can be imported to another server instance where you enable encryption. You cannot generate different keys within one multiple-server instance environment.

Exporting an Encryption Key

You export an encryption key to make a copy of the key or so that it can be imported on another server instance. Exporting an encryption key stores the encryption key that is used by the current server instance to a file on your computer or network.

To export an encryption key

In the Search box, enter Data Encryption Management, and then choose the related link.
On the Home tab, in the Process group, choose Export Encryption Key.

On the message about saving the encryption key, choose Yes.
In the Set Password window, enter the password that will protect the exported key file, and then choose OK.
In the Export File window, choose Save, choose a safe location where the key file is stored, and then choose Save.

Importing an Encryption Key

You can import an encryption key to a server instance from an encryption key file that was exported from another server instance or saved as a copy when the encryption was enabled. You cannot import an encryption key on a server instance that already includes an encryption key. In this case, you must change the encryption key instead.

To import an encryption key

In the Search box, enter Data Encryption Management, and then choose the related link.
On the Home tab, in the Process group, choose Import Encryption Key.
In the Select a key file to import window, choose the encryption key file, and then choose Open.
In the Password window, enter the password that protects the key file, and then choose OK.

Changing an Encryption Key

If a server instance already has an encryption key, then you can replace the current encryption key with an encryption key that is stored in an encryption key file that was exported from another server.

Note

If Dynamics NAV is configured with multiple server instances, when you change the encryption key on a server instance, then the old encryption key is no longer valid on the other server instances. To enable the new encryption key on the other server instances, import it on each server instance.

To change an encryption key

In the Search box, enter Data Encryption Management, and then choose the related link.
On the Home tab, in the Process group, choose Change Encryption Key.
In the Select a key file to import window, choose the encryption key file, and then choose Open.
In the Password window, enter the password that protects the key file, and then choose OK.

Share via