Chapter 8: Device Management157Enabling the AKC Download Server Certificate ValidationIf you are using the AKC client, you can choose to use the Enable AKCDownload Server Certificate Validation feature or opt not to use thisfeature.Option 1: Do Not Enable AKC Download Server CertificateValidation (default setting)If you do not enable AKC Download Server Certificate Validation, allDominion device users and CC-SG Bookmark and Access Client usersmust: Ensure the cookies from the IP address of the device that is beingaccessed are not currently being blocked. Windows Vista, Windows 7 and Windows 2008 server users shouldensure that the IP address of the device being accessed is includedin their browser's Trusted Sites Zone and that Protected Mode is noton when accessing the device.Option 2: Enable AKC Download Server Certificate ValidationIf you do enable AKC Download Server Certificate Validation: Administrators must upload a valid certificate to the device orgenerate a self-signed certificate on the device. The certificate musthave a valid host designation. Each user must add the CA certificate (or a copy of self-signedcertificate) to the Trusted Root CA store in their browser.To install the self-signed certificate when using Windows Vista®operating system and Windows 7® operating system:1. Include the KX II IP address in the Trusted Site zone and ensure'Protected Mode' is off.2. Launch Internet Explorer® using the KX II IP address as the URL. ACertificate Error message will be displayed.3. Select View Certificates.4. On the General tab, click Install Certificate. The certificate is theninstalled in the Trusted Root Certification Authorities store.5. After the certificate is installed, the KX II IP address should beremoved from the Trusted Site zone.To enable AKC download server certificate validation:1. Choose Device Settings > Device Services. The Device ServiceSettings page opens.2. Select the Enable AKC Download Server Certificate Validationcheckbox or you can leave the feature disabled (default).3. Click OK.