Certificate Install SSL/TLS SmarterMail 8
Jul 12 at 10:17am - admin
Installing a certificate for IIS or SmarterMail Web interface does not differ from a typical web server so that procedure does not change.
The information below applies to Windows 2003.
If the certificate has already been installed, you will find the private key in the computer's certificate store (aka, CAPSTORE). You will need to follow these steps to complete the process:
1.Start | Run | MMC | OK
2.CTRL + M
3.Click Add
4.Select Certificates Click Add
5.Select Computer Account
6.Click Next then Finish
7.Click Close and OK to get out to the MMC - now with two nodes.
8.Click Local Computer>Personal>Certificate>mail.domain.org
9.Right click select All Task then Export...
10.Select Yes, Export Private Key
11.Click Next, Next, Type a password, Next, Set filename to *.pfx select next and then finish
12.Click Service>Personal
13.Right click select All Task then Import...
14.Select the pfx-file you just exported and follow the rest of the wizard throgh (Check Mark key exportable if you want).
15.Finally, we need to export the certificate again for SmartMail. Click Local
16.Computer>Personal>Certificate>mail.domain.org and select Export...
17.Select No, do not export Private Key.
18.Select Base 64 encoded X.509 (.cer) - IMPORTANT
19.Set filename to mail.example.com.cer and save.
20.Change security so everyone has read access on the cer-file
21.Login as system administrator in SmarterMail
22.Go to Security>Advanced>SSL
23.Click New
24.Specify your IP-address (matching the name on the certificate)
25.Change to TLS (gives you better excptions in log-files)
26.Specify a fully qualified file-name of you base 64 encoded X.509 cer-file.
27.Save
28.Restart SmarterMail Service.
Add the specific ports you wish to have secured we have only done SSL in this example you can do TSL as well for common ports like 25, 110, 143 which will handle those ports but you must then remove the current non secure for those ports on save.

Make sure you have the check boxes selected for the specific IP addresses you wish to secure.

SSL - port 465 smtp, 993 imap, pop 995 point to your cert and the specific ip
TLS - port 25 smtp, imap 143, pop 110 point to your cert and the specific ip
Source More Details