Managing legacy key encryption

Re-encrypt private keys

Navigate to Settings Legacy Key Encryption.
Select the appropriate organization or department, and click Re-Encrypt.

There is only one encryption key pair for all MRAOs and it is not associated with specific organizations or departments.
Copy and save the encryption private key in a secure location.
Click Done.

Recover client certificate private keys

Retrieving a client certificate private key from secure storage results in the revocation of that certificate, regardless of the administrator’s level.

Navigate to Persons.

You can also recover client certificate private keys from the Client Certificates page.
Select the appropriate user, and click Certificates.
Select the certificate for which you want to recover the private key, and click View.
Click the Download icon, and select Certificate and Private key, PKCS#12, Legacy.
Enter a password for the downloaded .p12 file.
Paste the encryption private key.
Select an encryption algorithm.
Click Download.