> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure the log file location

> Create a log directory the Online Responder can write to and point the Futurex CNG provider configuration at it.

The Online Responder service runs as the Network Service account, so the Futurex CNG provider's log file must be placed in a directory that account can write to.

> [!NOTE]
>
> The log file must be stored in a location accessible by the Network Service account, which is
> the account used by the Online Responder service. Using a path under `C:\Users\` will cause
> log writes to fail silently when the Online Responder calls the Excrypt HSM.

**Step 1**

Create the log directory and grant Network Service write access:

```powershell expandable lines wrap title="PowerShell" theme={null} theme={null}
New-Item -Path "C:\ProgramData\Futurex" -ItemType Directory -Force
icacls "C:\ProgramData\Futurex" /grant "NETWORK SERVICE:(OI)(CI)F"
```

> [!TIP]
>
> Verify the permissions were applied correctly:
>
> ```powershell expandable lines wrap title="PowerShell" theme={null} theme={null}
> $acl = Get-Acl "C:\ProgramData\Futurex"
> $acl.Access | Format-Table IdentityReference, FileSystemRights, AccessControlType
> ```
>
> Confirm that `NT AUTHORITY\NETWORK SERVICE` appears with `FullControl` in the output.

**Step 2**

In the `<CONFIG>` section of the `fxcng.cfg` file, set the log file path to the new
directory:

```none expandable lines wrap title="fxcng.cfg" theme={null} theme={null}
<LOG-FILE> C:\ProgramData\Futurex\fxcng.log </LOG-FILE>
```

> [!NOTE]
>
> For development testing, set `<LOG-MODE>` to `DEBUG` and `<LOG-TRAFFIC>` to `YES`. Once in
> production, set `<LOG-MODE>` to `INFO` and `<LOG-TRAFFIC>` to `NO`. Set `<LOG-CONSOLE>` to
> `NO`: the default `fxcng.cfg` sets it to `YES`, which prints the provider log into the
> output of `certutil` and `certreq`.

Now test the connection to the HSM as described in [Verify the provider](https://docs.futurex.com/Integrations/HSM/Credential_management/Microsoft_OCSP_with_IIS/Install_Futurex_CNG_and_FXCLI_by_using_FXTools.md#verify-the-provider).