Skip to main content
Welcome to Virtru's support portal. As we work to make this page more accessible to screen readers, please contact us at support@virtru.com for technical support.

Virtru Private Keystore (for Virtru Solutions) Reference - Testing Procedure

  • Updated

This guide assumes that your Virtru Private Keystore (VPK) is up and running. You can follow these steps if you have recently deployed, upgraded your TLS/SSL certificate or added additional servers.

 Initial System and Certificate Check

  1. Verify Server Status

    • Begin by checking the status of your VPK server to ensure it is operational.

      You might need to add your Workstation IP address to your firewall rule to test your access.

      FQDN: https://cks.yourdomain.com/status
  2. Validate Your SSL/TLS Certificate  
    Confirm that your certificate is properly installed and valid.

 Email Encryption and Decryption Test

Once your initial checks are successful and the VPK server is running, follow these steps:

  1. Send an Encrypted Content 
    • Install the Virtru Gmail Extension or Microsoft Add-In
    • Log Into your Virtru Secure Share: https://[your_custom_subdomain].secure.virtru.com/secure-share
    • Send an encrypted outbound email or a Secure Share content to both the Virtru Solutions Architect and your personal email account.
  2. Verify Decryption 
    • Ensure that you can successfully decrypt the email. If decryption is successful, your VPK is functioning correctly.

 Service Disruption Test

If the email decryption is successful, proceed with the following steps to further test the system:

  1. Access the Server 

    • SSH into your VPK server and run the command below to identify the running container:

      docker ps
  2. Stop the Container 

    • Once you have the container ID, stop the container with the following command:

      docker stop <container ID>
  3. Notify the Virtru Solutions Architect
    • Inform the Solutions Architect once the container is stopped. Keep the container offline for one hour. During this time:

      • Access to FQDN: You should not be able to access the URL:

        https://cks.yourdomain.com/status
      • Email Decryption: You should not be able to decrypt the previously sent encrypted email.
  4. Verify System Behavior 
    • Confirm that both you and the Virtru Solutions Architect are unable to decrypt the email and access the FQDN.
  5. Restart the Container 

    • After the one hour period, restart the container using:

      docker start <container ID>

 Troubleshooting

 If email decryption fails at any point, verify that your certificate chain is correct. A common issue is a typo or incomplete certificate chain.

 Also, ensure that the Virtru backend configuration is correct to prevent further issues.

 

By following this process, you can verify that your VPK setup is functioning correctly and securely.

Related articles