Managing legacy key encryption

Re-encrypt private keys

Navigate to Settings Legacy Key Encryption.
Select the appropriate organization or department, and click Re-Encrypt.

There is only one encryption key pair for all MRAOs and it is not associated with specific organizations or departments.
Copy and save the encryption private key in a secure location.
Click Done.

Recover client certificate private keys

Retrieving a client certificate private key from secure storage results in the revocation of that certificate, regardless of the administrator’s level.

Navigate to Certificates Client Certificates.

You can also recover client certificate private keys from the Persons page.
Select the certificate for which you want to recover the private key, and click View.
In the Client Certificate dialog, click the Download icon, and select Certificate and Private key, PKCS#12, Legacy.
Enter a password for the downloaded .p12 file.
Paste the encryption private key.
Select an encryption algorithm.
Click Download.