Log in to the SafeQ Web administration with sufficient rights to manage devices.

Go to Devices > Printers > Edit device > Advanced tab.

Set Backend to IPPSSL value and press   button. The Port value will automatically change to 443 and the IPP queue value will automatically change to ipp.

Click Save device to apply settings.

Go to System > System settings and set IppSslTrustManager property to secure.
If print backend IPPSSL is used, YSoft SafeQ server validates the certificate recieved from MFP to verify the device identity. There are 2 ways how the certificates can be processed: 
secure  - the most secure way, the MFP certificate is validated against trusted Certification Authorities installed in YSoft SafeQ server. This option is recommended.
simple  - MFP certificates are not validated at all, any certificate received is accepted. This is the default option, it is recommended to change it to  secure  as soon as you install your CA into YSoft SafeQ server.

Then click Save settings.

Prepare .cer file (for example certificate.cer)

Use following command to configure ssl-trustore ( ..\JAVA\bin\keytool.exe -server -import -trustcacerts -alias ysoft -file certificate.cer -keystore ..\..\conf\ssl-truststore )

Enter keystore password. (To obtain keystore password, please contact customer service support)

Confirm importing with "yes" word. Example:

To verify imported certificate run following command: ..\JAVA\bin\keytool.exe -server -list -v -alias ysoft -keystore ..\..\conf\ssl-truststore
 

Enter keystore password. (To obtain keystore password, please contact customer service support)
 

Details of imported certificate should be displayed. Example: