Import a certificate into the Portal appliance for secure SMTP use

Question:

How can I import a certificate on the Portal appliance for secure SMTP use?

Answer:

For the secure SMTP connection you can replace certificates with your own on the Portal Appliance with the steps below.

Steps:

Pull the certificate details from the secure SMTP server.

CODE

openssl s_client -connect smtp-secure.yourdomain.com:25 -starttls smtp

2. Copy the following part of the output to a file named smtptls.pem

CODE

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

3. Verify its contents with:

CODE

openssl x509 -text -in smtptls.pem

4. Stop the Portal:

CODE

sudo systemctl stop nxportal

5. Import the SMTP server's certificate into the java keystore:

CODE

sudo sh /var/nexthink/portal/security/import_certificate.sh -alias SMTP -file /home/nexthink/smtptls.pem  -storepass changeit

6. Start the Portal:

CODE

sudo systemctl start nxportal

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.