Replace Self-signed SSL Certificates - Revision history

Ltalaschus at 15:35, 30 January 2024

2024-01-30T15:35:46Z

2024-01-30T15:01:54Z

2020-07-13T09:09:36Z

Installing New Certificates

2020-04-15T12:15:17Z

Installing New Certificates

2019-06-17T08:57:57Z

2019-06-17T08:34:57Z

Installing New Certificates

2018-06-08T10:02:06Z

Installing New Certificates

2017-01-19T13:12:09Z

2014-11-12T07:53:54Z

Prerequisites

2014-07-01T10:37:48Z

@@ Line 3: / Line 3: @@
 Therefore it is recommended to replace the SSL certificates used by the Client Access Servers for offering IMAP and web based access to the archives with certificates signed by an official certificate authority. Information on requesting, renewing and working with such certificates can be found in this [[Working_with_SSL_Certificates|article]].
-It usually is not necessary to replace the certificates that are used by MailStore Service Provider Edition for the internal communication. If you would change these certificates, you also have to [[Multi_Server_Mode_Setup#Pairing_with_Management_Server|pair]] your ''Client Access Server'' or ''Instance Host'' with the ''Management Server'' to gain trust again.
+It usually is not necessary to replace the certificates that are used by MailStore Service Provider Edition for the internal communication. These certificates are configured in the ''Client Access Server Settings'' and ''Instance Host Settings'' sections of the role configuration dialog. If you would change these certificates, you also have to [[Multi_Server_Mode_Setup#Pairing_with_Management_Server|pair]] your ''Client Access Server'' or ''Instance Host'' with the ''Management Server'' to gain trust again.
 == Prerequisites ==

← Older revision		Revision as of 15:01, 30 January 2024
Line 2:		Line 2:

	Therefore it is recommended to replace the SSL certificates used by the Client Access Servers for offering IMAP and web based access to the archives with certificates signed by an official certificate authority. Information on requesting, renewing and working with such certificates can be found in this [[Working_with_SSL_Certificates\|article]].		Therefore it is recommended to replace the SSL certificates used by the Client Access Servers for offering IMAP and web based access to the archives with certificates signed by an official certificate authority. Information on requesting, renewing and working with such certificates can be found in this [[Working_with_SSL_Certificates\|article]].
		+
		+	It usually is not necessary to replace the certificates that are used by MailStore Service Provider Edition for the internal communication. If you would change these certificates, you also have to [[Multi_Server_Mode_Setup#Pairing_with_Management_Server\|pair]] your ''Client Access Server'' or ''Instance Host'' with the ''Management Server'' to gain trust again.

	== Prerequisites ==		== Prerequisites ==

@@ Line 11: / Line 11: @@
 * Click ''Configure..''.
 * For each endpoint in the ''Features'' section (HTTP, IMAP, IMAPS) click on the button behind the '''Certificate'' field to select the new certificate from the Windows certificate store.
-*:[[File:Ms_spe_replace_self_signed_cert_01.png]]
+*; [[File:Ms_spe_replace_self_signed_cert_01.png]]
 *; '''Please note:''' It is not required to replace the ''Certificate'' under the ''Client Access Server Settings''. If you would change this certificate, you also have to [[Multi_Server_Mode_Setup#Pairing_with_Management_Server|pair]] your ''CAS'' with the ''Management Server'' to gain trust again.
 * Click ''OK'' to save changes or ''Cancel'' to discard.

@@ Line 12: / Line 12: @@
 * For each endpoint in the ''Features'' section (HTTP, IMAP, IMAPS) click on the button behind the '''Certificate'' field to select the new certificate from the Windows certificate store.
 *:[[File:Ms_spe_replace_self_signed_cert_01.png]]
-*; '''Please note:''' The ''Certificate'' under the ''Client Access Server Settings'' usually must not be replaced. If you change this certificate, you also need to [[Multi_Server_Mode_Setup#Pairing_with_Management_Server|pair]] your ''CAS'' with the ''Management Server'' to gain trust again.
+*; '''Please note:''' It is not required to replace the ''Certificate'' under the ''Client Access Server Settings''. If you would change this certificate, you also have to [[Multi_Server_Mode_Setup#Pairing_with_Management_Server|pair]] your ''CAS'' with the ''Management Server'' to gain trust again.
 * Click ''OK'' to save changes or ''Cancel'' to discard.
 * Start the Client Access Server.
 Repeat the above on each Client Access Server in your MailStore Service Provider Edition infrastructure.

@@ Line 1: / Line 1: @@
 MailStore Service Provider Edition automatically creates self-signed certificates when adding a new role to a server. While these certificates are suitable for authenticating MailStore Service Provider Edition's own services against each other by storing and verifying the unique fingerprints of the used certificates, self-signed certificates are not suitable for public internet services like email or web servers.
-Therefore it is recommended to replace the SSL certificates used by the Client Access Servers for offering IMAP and web based access to the archives with certificates signed by an official certificate authority.
+Therefore it is recommended to replace the SSL certificates used by the Client Access Servers for offering IMAP and web based access to the archives with certificates signed by an official certificate authority. Information on requesting, renewing and working with such certificates can be found in this [[Working_with_SSL_Certificates|article]].
 == Prerequisites ==

← Older revision		Revision as of 13:12, 19 January 2017
Line 15:		Line 15:

	Repeat the above on each Client Access Server in your MailStore Service Provider Edition infrastructure.		Repeat the above on each Client Access Server in your MailStore Service Provider Edition infrastructure.
−
−	~~== What to do next ==~~
−	The last step of the installation and setup process is optional, but allows to give your MailStore Service Provider Edition a unique look: Read more about customizing the appearance of MailStore Client, MailStore Web Access and MailStore Outlook Add-in in [[Branding]]
−
−	If the appearance of MailStore Client, MailStore Web Access and MailStore Outlook Add-in does not need to be modified, the installation and setup process is of MailStore Service Provider Edition is finished. All other administrative tasks are carried out through the web-based [[Management_Console_-_General\| MailStore Management Console]].

@@ Line 4: / Line 4: @@
 == Prerequisites ==
-Before a certificate can be used by the Client Access Server service, the certificate and its private key must be store in the computer's personal certificate store ('''not''' Administrator's or any other user's).
+Before a certificate can be used by the Client Access Server service, the certificate and its private key must be stored in the computer's personal/MY certificate store ('''not''' Administrator's or any other user's).
 == Installing New Certificates ==