> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/server/knowledge-base/how-to-articles/remove-the-security-provider.md).

# Remove the security provider

{% hint style="success" %}
For any question or for assistance with this procedure, contact us at <service@devolutions.net>.
{% endhint %}

The Security provider was implemented in earlier Devolutions Server versions. It was deprecated in Devolutions Server version 2019.2.9.0. It is no longer considered as secure as mentioned in [Update on Devolutions Server Security Provider Deprecation](https://blog.devolutions.net/2020/02/update-on-devolutions-password-server-security-provider-deprecation).

The following procedure explains how to remove the Security provider and implement the encryption at rest using the encryption keys.

1. Ensure that no user is connected to the Devolutions Server workspace or to the Devolutions Server web interface. It is possible to verify and disconnect all users in ***Reports*** – ***Connected user list*** in the Devolutions Server web interface.
2. Switch the Devolutions Server instance to offline with the ***Go offline*** button in the ***Server*** tab of the Devolutions Server Console.

![](https://cdnweb.devolutions.net/docs/DVLSCONSOLE4026_2025_1.png)

3. If the scheduler is installed, uninstall it from the Devolutions Server Console in ***Companions – Scheduler service – Uninstall***. If a service account is configured to run the scheduler service, make sure you have the service account's password to reinstall it at the end of the procedure.

![](https://cdnweb.devolutions.net/docs/DVLSCONSOLE4027_2025_1.png)

4. Back up the Devolutions Server web application folder or, if possible, take a snapshot of the virtual machine where Devolutions Server is hosted.
5. Make a full database backup.
6. In the ***Tools*** menu of the Devolutions Server Console, click on ***Remove security provider***.

![](https://cdnweb.devolutions.net/docs/DVLSCONSOLE4029_2025_1.png)

7. Click ***Yes*** when prompted to confirm the removal of the Security Provider.

![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB8048.png)

8. The security provider was successfully removed. Click ***OK*** to close the window.

![](https://cdnweb.devolutions.net/docs/docs_en_kb_KB8049.png)

9. Switch the Devolutions Server instance to online mode using ***Go online*** in the ***Server*** tab of the Devolutions Server Console.

![](https://cdnweb.devolutions.net/docs/DVLSCONSOLE4028_2025_1.png)

10. Once completed, verify that the data is available (entries' configuration, passwords, etc.). Verify the documents or attachments that exist in the database.

{% hint style="info" %}
If Devolutions Server is installed in a load balancing / high availability topology, only remove the Security Provider on one node. Then, refresh the other nodes to notice that the Security Provider has been removed.
{% endhint %}

11. On success, switch the instance to offline mode, make another database backup, and a screenshot of the virtual machine where Devolutions Server is hosted. If for any reason, any of the next steps fail, a backup will be available to get back to this step instead of starting over.

{% hint style="info" %}
If the ***Activate encryption at rest*** button is not visible in ***Tools*** , it means that it is already enabled. In that case, please jump to step 15.
{% endhint %}

12. Go in ***Tools*** in the Devolutions Server Console, then click on ***Activate encryption at rest***. This step is essential to properly encrypt the data in the SQL database.

![](https://cdnweb.devolutions.net/docs/DVLSCONSOLE4030_2025_1.png)

13. Once completed, export the Encryption Keys. Make sure to save that file and the password in a secure place to be able to build another Devolutions Server instance connected to the same SQL database. Without those encryption keys, it is impossible to access the data.

{% hint style="warning" %}
We recommend not to store the encryption keys file and its password in your Devolutions Server instance.
{% endhint %}

![](https://cdnweb.devolutions.net/docs/DVLSCONSOLE4031_2025_1.png)

![](https://cdnweb.devolutions.net/docs/DVLSCONSOLE4032_2025_1.png)

14. Once completed, verify again if the entries, documents, and attachments are available.
15. If the scheduler service has been uninstalled in step 3, install it back from the Devolutions Server Console in the ***Companions*** tab.

![](https://cdnweb.devolutions.net/docs/DVLSCONSOLE4033_2025_1.png)

16. On success, one last database backup and virtual machine screenshot can be done.

{% hint style="info" %}
If Devolutions Server is installed in a load balancing / high availability topology, refresh the Devolutions Server Console and import the encryption keys to ensure using the same on every node.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/server/knowledge-base/how-to-articles/remove-the-security-provider.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.