Quick Start Guide

Installation

Download the MailStore Gateway setup file from here [1].
Start the installation process by double-clicking on the downloaded setup file .
Select the language and click OK.
Read the license agreement.
Select I accept the agreement and click Next.
Specify the target folder for the program files (default: C:\Program Files\MailStore\MailStore Gateway) and click Next.
The setup program now extracts all program files into the given target folder.
Click Finish to exit the installation program.

Initial Configuration

The initial configuration must be carried out in order to make MailStore Gateway aware of the email domain to be used and to set up the TLS certificate to be used.

The Gateway config tool shortcut is located on the desktop of your machine and is named MailStore Gateway. Double-click to open that tool.
Configure the E-Mail Domain by entering the domain you want to be handled by MailStore Gateway. Usually this domain is different than your primary domain.
Add an A-record to your DNS zone which points to the public IP address of the MailStore Gateway server. The A-record should match one of the SANs (Subject Alternative Names) of the certificate to be used.
Add an MX-record to your DNS zone which points to the name of the A-record created in the previous step. The MX-record must match the E-Mail Domain setting.
If MailStore Gateway is located behind a NAT router or firewall, additional configuration may be needed, e.g. SMTP and HTTP may need to be forwarded to MailStore Gateway. Refer to Firewall Configuration for further details.
Leave the Management-console port set to the default of 8450 and the Let's Encrypt Port set to 80.
In the "Certificate" field, click the box with the three dots and choose Create Self-Signed Certificate and click "OK". This will create a self-signed certificate using the FQDN of the MailStore Gateway machine which is the default configuration.
- Alternatively choose Obtain from Let's Encrypt... to obtain a certificate from Let's Encrypt. Refer to this article for further details.
Click the Apply button to apply the configuration changes and then click Start Service.

Creating A MailStore Gateway Mailbox

To log onto the MailStore Gateway Management Console and create a mailbox follow these instructions.

Open a supported web browser.
Navigate to https://<hostname-of-mailstore-gateway-server>:8450.
Accept possible certificate warnings from your web browser when using a self-signed certificate.
In the User Name field enter admin.
In the Password field enter the corresponding password of the admin user. For the first time login, the password is admin. After the first login, a random, secure password is created automatically.
Click Sign in to proceed.
Click Create Mailbox to proceed.
Type a name in the Name field, i.e. M365 Journal Mailbox.
Optional: Enter a description that helps to identify the purpose of the mailbox, e.g. Target for journal emails from Microsoft 365.
Click OK.
A strong, random password is generated and displayed.
Carefully read the warning, copy the password, and afterwards tick the checkbox I've read and understood the above warning.
Click OK to finish the mailbox creation.

Important notice: Make sure to store the password in a safe place as it is not stored in MailStore Gateway. The password is needed to decrypt the content of the mailbox. If the password is lost, there is no way to access emails that are still in the mailbox ever again; a lost password cannot be retrieved.

For MailStore Server customers we recommend to use an enterprise password manager to store such critical passwords. For MSPs using MailStore Service Provider Edition we do not recommend to store these passwords but instead ensure that when providing them to end customers, add a note about the importance of keeping the password safe.

Using your new journal Mailbox hosted on MailStore Gateway

You now have a functional gateway mailbox to receive journal messages from your email host.
From our domain above, the functional gateway mailbox address is as below:
[email protected]