Workflow Overviewĭecryption works within the existing Message Analyzer architecture to simplify its usage and results analysis. If there are no errors reported, then the Decryption window displays either a blue Info icon for each message that was successfully decrypted, or a yellow Warning icon that flags each message for which a certificate could not be found.

Detailed error descriptions are also provided in the Decryption window to assist in troubleshooting and analysis. If there are decryption failures, errors are reported to the Decryption window, where a red Error icon displays for each message that failed the decryption process. After the trace results display in the Analysis Grid viewer, a Decryption Tool Window holds the decryption analysis information. Thereafter, Message Analyzer decrypts the trace by using the server certificate and password that you provided. You can then either load a saved trace file into Message Analyzer through a Data Retrieval Session or start a Live Trace Session that will be enabled for decryption. However, to enable a Decryption session in Message Analyzer, you will need to import a certificate that contains a matching identity for a target server, specify a required password, and then save the configuration. The Message Analyzer Decryption feature enables you to view data for Application layer protocols that are encrypted with TLS and SSL, such as the HTTP and Remote Desktop (RDP) protocols. Please be aware that decryption of TLS v1.2 messages is also supported, as is TDS/TLS.

Decrypt https traffic