Setting Up Discovery Server : General Settings : Installing or removing a DeviceLock certificate
  
Installing or removing a DeviceLock certificate
The Discovery Server may not be able to access the Discovery Agent due to insufficient access rights of the service startup account of the DeviceLock Content Security Server. In this case, DeviceLock certificate authentication should be set up by installing the private key of a DeviceLock certificate on the DeviceLock Content Security Server. The public key of that certificate must be installed for the DeviceLock Service on each computer to be scanned by the Discovery Agent. For details on DeviceLock certificates, see DeviceLock Certificates DLP .
To install or remove DeviceLock Certificate on DeviceLock Content Security Server
1. In the console tree, expand DeviceLock Content Security Server.
2. Under DeviceLock Content Security Server, select Server Options.
3. In the details pane, double-click DeviceLock certificate or right-click DeviceLock certificate and then click Properties.
4. In the DeviceLock Content Security Server dialog box that appears, do the following:
To install the private key of the DeviceLock certificate
a) Next to the Certificate Name box, click the button to open the Select the DeviceLock Certificate file dialog box and browse for the file to use.
b) In the Select the DeviceLock Certificate file dialog box, locate and select the certificate file, and then click Open.
To remove the private key of the DeviceLock certificate
Next to the Certificate Name box, click Remove.
5. Click OK.