This article describes how to secure SmarterMail server by configuring SSL/TLS.
NOTE: Before performing following steps, you will have to purchase SSL certificate from SSL provider and have it installed on your VPS.
Export SSL Certificate to a Base-64 Encoded Certificate
- Connect to your Windows VPS/Server through Remote Desktop where you have installed SmarterMail.
- Click Start, select Run. Type MMC, hit enter.
- Open File >> Add\Remove Snap ins.
- From the list of available snap-ins, select Certificates and hit Add.
- A new window will appear, choose Computer account and hit Next.
- Ensure local computer is selected and hit Finish.
- In certificate tree view, expand Personal and choose Certificates.
- Right click on certificate you wish to export >> All Tasks >> Export.
- A new window will appear, hit Next.
- Select No, do not export private key >> Next.
- Save the certificate as Base 64 x509 .cer file >> Next.
- Save the certificate at location C:\SmarterMail\Certificates\<websitename>. Name the certificate and click Save.
Add Ports to Listen Over SSL/TLS
- Login to SmarterMail as admin user.
- Click on Settings icon.
- Expand the Bindings folder and click Ports in the navigation pane.
- Click New in the content pane toolbar. A popup window will display.
- Enter required fields; Protocol, Encryption (SSL or TLS), Name, Port and Path of Certificate.
- Click on Verify Certificate to ensure the certificate exists in the specified path.
- Click on Save.
- Using above steps, add POP3, SMTP and IMAP ports to be encrypted with SSL or TLS.
Add Secure Ports to Listen on SmarterMail IP address
- Log in to SmarterMail as admin user.
- Click on Settings icon.
- Expand the Bindings folder and click IP Addresses in the navigation pane.
- Select desired IP address and click Edit.
- Use the checkboxes to select the port(s) you would like the IP address to listen on.
- Click Save.
- Allow the ports 993, 995 and 465 in firewall and verify it by telnet.
