InterScanTM Messaging Security Virtual Appliance - Online Help ...

Trend Micro InterScan Messaging Security Virtual Appliance Administrator’s Guide
10-6
5. Specify the Transport Layer Security Settings:
a. Select Enable Incoming Transport Layer Security.
This option allows the IMSVA SMTP Server to provide Transport Layer
Security (TLS) support to SMTP clients, but does not require that clients use
TLS encryption to establish the connection.
b. Select Only accept SMTP connection by TLS for IMSVA to only accept
secure incoming connections.
This option enables the IMSVA SMTP Server to accept messages only through
a TLS connection.
c. Click a Browse button next to one of the following:
• CA certificate: A CA certificate is usually used for verifying SMTP clients.
However, IMSVA does not verify the client and only uses the CA
certificate for enabling the TLS connection.
Only upload this file if it is provided to you together with the public key.
Otherwise, this file is not mandatory for enabling a TLS connection.
• Private key: The SMTP client encrypts a random number using IMSVA
SMTP server's public key and an encryption key to generate the session
keys.
IMSVA SMTP server then uses the private key to decrypt the random
number in order to establish the secure connection.
This key must be uploaded to enable a TLS connection.
• SMTP server certification: The IMSVA SMTP server's public key made
available to the SMTP clients for generating the session keys.
This key must be uploaded to enable a TLS connection.
d. Click Upload to save the file on the IMSVA server.
e. Select Enable Outgoing Transport Layer Security to protect outbound
messages, if desired.
6. Click Save.