> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/cloud/web-interface/administration/configuration-and-security/access-and-authentication/encryption-service/configure-devolutions-cloud-encryption-service-using-the-devolutions-cloud-services.md).

# Configure Devolutions Cloud encryption service using the Devolutions Cloud Services

Using the Devolutions Cloud Services to configure the Encryption service may prove more complicated than leveraging an Azure template, but specific use cases may call for it.

{% hint style="info" %}
For the configuration method with Azure, see [Configure Devolutions Cloud Encryption service using an Azure template](https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/authentication/encryption-service/encryption-service-configuration-azure/).
{% endhint %}

### Requirements

The following prerequisites are necessary to enable and configure the encryption service:

* A self-hosted server to install the Devolutions Cloud Services.
* A configured and active [Single Sign-On (SSO) setup](https://docs.devolutions.net/cloud/getting-started/get-started-with-sso-in-devolutions-cloud/).
* An [application identity](https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/authentication/encryption-service/configure-devolutions-cloud-encryption-using-the-devolutions-cloud-services/#application-identity-permissions) in Devolutions Cloud.
* A trusted SSL certificate.
* A reachable network port within the local network and, if applicable, from the internet.

#### Application identity permissions

[Create an application identity](https://docs.devolutions.net/cloud/web-interface/administration/management/application-users/manage-application-users/#create-an-application-identity) and assign it the following [system permissions](https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/system-permissions/):

* ***Manage users and user groups***.
* ***Manage system configuration*** (includes system permissions, system settings, and IP allowlists).

{% hint style="info" %}
If you are using an IP allowlist, the encryption service IP must be added as the allowed IP. Failure to do so will prevent the service from communicating with Devolutions Cloud, rendering it non-functional.
{% endhint %}

### Encryption service setup

If you wish to use the Devolutions Cloud Services method, make sure that all previously mentioned requirements are fulfilled before moving forward, and plan every change in advance in order to avoid configuration issues, in which case it is better to deactivate the feature altogether while working on a fix.

1. [Download the Devolutions Cloud Services](https://devolutions.net/download-center/#hub) and launch the installer.
2. Click ***Next*** to continue past the welcome page.
3. Read and accept the terms in the License Agreement, then click ***Next***.
4. Under ***Custom Setup***, select ***Encryption***, then click ***Next***.
5. Enter the following information in the corresponding fields:
   * the ***Host***, which is the URL of your Devolutions Cloud.
   * the ***Application secret*** and ***Application key***, which were provided to you when the application identity was initially created.
6. Click on ***Test connection***. You should receive a message indicating that the connection was successful. If this is not the case, check the validity of the information you have entered and try again. If you are still experiencing connection problems, please contact our help desk technicians at <service@devolutions.net>.
7. Click ***Next***.
8. Enter the ***URL*** (HTTPS is mandatory) and ***Port*** number where the encryption service will listen for incoming requests. Ensure the port is configured to be reachable.
9. Search for your ***Certificate*** and select it. If your certificate is protected with a password, enter it in ***Certificate Password***.
10. Click ***Next*** to complete the setup.

#### See also

* [Encryption service – Frequently Asked Questions](https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/authentication/encryption-service/#faq)
* [Encryption service – Troubleshooting](https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/authentication/encryption-service/#troubleshooting)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/cloud/web-interface/administration/configuration-and-security/access-and-authentication/encryption-service/configure-devolutions-cloud-encryption-service-using-the-devolutions-cloud-services.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.