Kerio Connect - Administrators Guide - Kerio Software Archive

Configuring SSL certificates in Kerio ConnectAbout SSL certificatesYou need a SSL certificate if you wish to secure Kerio Connect by SSL/TLS encryption. SSLcertificates are used to authenticate an identity on a server.Kerio Connect creates the first self-signed certificate during the installation. Upon their firstlogin, users will have to confirm they want to go to a page which is not trustworthy. To avoidthis, generate a new certificate request in Kerio Connect and send it to a certification authorityfor authentication.To make the communication as secure as possible, you can:• disable all unsecured services or• set an appropriate security policyCertificates can be created in section Configuration → SSL Certificates.Figure 1SSL certificatesKerio Connect supports certificates in the following formats:• Certificate (public key) — X.509 Base64 in text format (PEM). The file has suffix .crt.• Private key — the file is in RSA format and it has suffix .key with 4KB max.Creating self-signed certificatesTo create a self-signed certificate, follow these steps:1. Go to section Configuration → SSL Certificates.2. Click on New → New Certificate.3. Fill in the information and save.171