InterScanTM Messaging Security Virtual Appliance - Online Help ...

smtpd_tls_key_file =
/opt/trend/imss/postfix/etc/postfix/key.pem
Configuring Transport Layer Security Settings
When the administrator enables the downstream TLS from the Web Console, the
Manager makes the following configuration changes in the main.cf configuration file
that affect the SMTP client:
smtp_tls_security_level = may
Enabling the TLS Support in Outlook Express
To enable TLS support on the Outlook Express Mail clients, follow the procedure
described below.
Converting Certificates
Outlook Express does not recognize the certificates in PEM-format, so they need to be
converted into the PKCS12-format. The example below shows how to convert the
IMSVA signed certificate needed for the Outlook Express clients that contact IMSVA
directly:
[root@imsva82b ~]# openssl pkcs12 -export -out
/tmp/imsva_cert.p12 -inkey /tmp/imsva_key.pem -in
/tmp/imsva_cert.pem
Enter Export Password:
Verifying - Enter Export Password:
[root@imsva82b ~]#
The /tmp/imsva_cert.p12 file contains the IMSVA certificate in PKCS12-format
and must be transferred to the Windows machines running Outlook Express and
communicating directly with IMSVA.
Importing Certificates
Go to the Outlook Express Menu and use the following sequence to see the available
certificates: Menu > Tools > Options > Security > Digital IDs.
Click Import… to search for files in the Personal Information Exchange format
(*.pfx, *.p12) and select the imsva_cert.p12 file generated above. Confirm the
certificate import with an empty password to import the certificate.
11-21