hmLoadTopic({
hmKeywords:"Certificate,Let\'s Encrypt,SSL & TLS,SSL & TLS CA,SSL & TLS Certificate,SSL & TLS Let\'s Encrypt",
hmTitle:"Let\'s Encrypt",
hmDescription:"Using Let\'s Encrypt to Manage Your Certificate To support SSL\/TLS and HTTPS for MDaemon, Webmail, and Remote Administration, you need an SSL\/TLS Certificate. Certificates are",
hmPrevLink:"ssl_dnssec.html",
hmNextLink:"security--backscatter_protection.html",
hmParentLink:"ssl__certificates.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; <a href=\"ssl__certificates.html\">SSL &amp; TLS<\/a>",
hmTitlePath:"Security Menu > Security Manager > SSL & TLS > Let\'s Encrypt",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Let\'s Encrypt<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5625rem;height:26.9375rem;border:none\" src=\".\/images\/ssl-tls_lets-encrypt.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">&nbsp;<\/span><\/p>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">Using Let\'s Encrypt to Manage Your Certificate<\/span><\/h3>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">To support <a href=\"ssl__certificates.html\" class=\"topiclink\">SSL\/TLS and HTTPS<\/a> for <a href=\"ssl_mdaemon.html\" class=\"topiclink\">MDaemon<\/a>, <a href=\"ssl_worldclient.html\" class=\"topiclink\">Webmail<\/a>, and <a href=\"ssl_webadmin.html\" class=\"topiclink\">Remote Administration<\/a>, you need an SSL\/TLS Certificate. Certificates are small files issued by a Certificate Authority (CA) that are used to verify to a client or browser that it is connected to its intended server, and that enable SSL\/TLS\/HTTPS to secure the connection to that server. <a href=\"https:\/\/letsencrypt.org\/\" target=\"_blank\" class=\"weblink\" title=\"Let\'s Encrypt\">Let\'s Encrypt<\/a> is a CA that provides free certificates via an automated process designed to eliminate the currently complex process of manual creation, validation, signing, installation, and renewal of certificates for secure websites.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">To support using Let\'s Encrypt\'s automated process to manage a certificate, this screen is provided to help you easily configure and run the PowerShell script included in the &quot;<\/span><span class=\"f_PlainText\">MDaemon\\LetsEncrypt<\/span><span class=\"f_BodyText\">&quot; folder. Running the script will set up everything for Let\'s Encrypt, including putting the necessary files in the Webmail HTTP folder to complete the http-01 challenge. It uses the <a href=\"domain-manager_host_name_ip.html\" class=\"topiclink\">SMTP host name<\/a> of the <a href=\"domain-manager.html\" class=\"topiclink\">default domain<\/a> as the domain for the certificate, includes any <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\">Alternate host names<\/span><span class=\"f_BodyText\"> you have specified, retrieves the certificate, imports it into Windows, and configures MDaemon to use the certificate for MDaemon, Webmail, and Remote Administration. Further, the script creates a log file in the &quot;<\/span><span class=\"f_PlainText\">MDaemon\\Logs\\<\/span><span class=\"f_BodyText\">&quot; folder, called <\/span><span class=\"f_PlainText\">LetsEncrypt.log<\/span><span class=\"f_BodyText\">. This log file is removed and recreated each time the script runs, and it includes the starting date and time of the script. Also, notification emails will be sent when errors occur if you specify an <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\">Admin email for notifications<\/span><span class=\"f_BodyText\">.<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/forbidden_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">Let\'s Encrypt requires <a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/\" target=\"_blank\" class=\"weblink\">PowerShell 5.1<\/a> and .Net Framework 4.7.2, which means that it will not work on Windows 2003. Also, <a href=\"wc--web_server.html\" class=\"topiclink\">Webmail<\/a> must be listening on port 80, and the script will not work if you have an <a href=\"domain-manager_host_name_ip.html\" class=\"topiclink\">SMTP host name<\/a> (i.e. FQDN) setup for your default domain that does not point to the MDaemon server.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Let\'s Encrypt PowerShell Updates<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Enable updates<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you wish to automatically create and update an SSL\/TLS certification via the Let\'s Encrypt script. The certificate will be updated every 10-60 days according to your <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Days between updates<\/span><span class=\"f_ControlIndent\"> setting below.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Alternate host names (separate multiple host names with a comma)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">If you wish to setup alternate host names in the certificate, specify those host names here, separated by commas. You do not need to include the SMTP host name for the default domain in this list. For example, if your default domain were &quot;<\/span><span class=\"f_PlainText\">example.com<\/span><span class=\"f_ControlIndent\">,&quot; configured with an SMTP host name of &quot;<\/span><span class=\"f_PlainText\">mail.example.com<\/span><span class=\"f_ControlIndent\">,&quot; and you wanted to use an alternate host name of &quot;<\/span><span class=\"f_PlainText\">imap.example.com<\/span><span class=\"f_ControlIndent\">,&quot; then you would only include &quot;<\/span><span class=\"f_PlainText\">imap.example.com<\/span><span class=\"f_ControlIndent\">&quot; as an alternate host name. If you do not wish to use any alternate host names then leave this option blank. <\/span><span class=\"f_ControlIndent\" style=\"font-weight: bold;\">Note:<\/span><span class=\"f_ControlIndent\"> if you include alternate host names, an HTTP challenge from Let\'s Encrypt must be completed for each one to validate your server\'s control of that host name. If the challenges are not all completed then the process will fail.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">IIS site name (available when using external web mail server)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">If you are running Webmail via IIS, enter the IIS site name here. You must have Microsoft\'s Web Scripting tools installed in order for the certificate to be automatically set up in IIS.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Admin email for notifications<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Specify an administrator email address here if you wish to be notified when an error occurs during a Let\'s Encrypt update.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Remove old certificates (expired &gt; 30 days ago)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">By default MDaemon will remove any old certificates that have been expired longer than 30 days. Uncheck this box if you do not wish to remove them automatically.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Days between updates (10-60)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this option to specify how often your certificate should be updated, from 10-60 days. The default setting is 60 days.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Run Now<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to immediately run the script.<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r"
})
