hmLoadTopic({
hmKeywords:"Certificates,HTTPS,Remote Administration,Remote Administration Certificates,Remote Administration HTTPS,Remote Administration SSL,SSL & TLS,SSL & TLS Remote Administration",
hmTitle:"Remote Administration",
hmDescription:"MDaemon\'s built-in web server supports the Secure Sockets Layer (SSL) protocol. SSL is the standard method for securing server\/client web communications. It provides server aut",
hmPrevLink:"ssl_worldclient.html",
hmNextLink:"ssl_white-list.html",
hmParentLink:"ssl__certificates.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; <a href=\"ssl__certificates.html\">SSL &amp; TLS<\/a>",
hmTitlePath:"Security Menu > Security Manager > SSL & TLS > Remote Administration",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Remote Administration<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5625rem;height:26.9375rem;border:none\" src=\".\/images\/ssl-tls_webadmin.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">&nbsp;<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">MDaemon\'s built-in web server supports the Secure Sockets Layer (SSL) protocol. SSL is the standard method for securing server\/client web communications. It provides server authentication, data encryption, and optional client authentication for TCP\/IP connections. Further, because HTTPS support (i.e. HTTP over SSL) is built into all major browsers, simply installing a valid digital certificate on your server will activate the connecting client\'s SSL capabilities.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">The options for enabling and configuring Remote Administration to use HTTPS are located on the SSL &amp; HTTPS screen under <\/span><span class=\"f_MenuPath\">Setup » Web &amp; IM Services » Remote Administration<\/span><span class=\"f_BodyText\">&quot;. For your convenience, however, these options are also mirrored under &quot;<\/span><span class=\"f_MenuPath\">Security » Security Settings » SSL &amp; TLS » Remote Administration<\/span><span class=\"f_BodyText\">&quot;.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">For more information on the SSL protocol and Certificates, see: <\/span><span class=\"f_DialogSectionHeading\"><a href=\"ssl__certificates.html\" class=\"topiclink\">SSL &amp; Certificates<\/a><\/span><span class=\"f_BodyText\"> <\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/lightbulb_on_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">This screen only applies to Remote Administration when using MDaemon<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif;\">\'<\/span><span class=\"f_Notes\">s built-in web server. If you configure Remote Administration to use some other web server such as IIS, these options will not be used <\/span><span class=\"f_NotesBox\">—<\/span><span class=\"f_Notes\"> SSL\/HTTPS support will have to be configured using your the other web server\'s tools.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p style=\"margin: 1.0000rem 0 0.5000rem 0.5000rem;\"><span class=\"f_DialogSectionHeading\">Accept the Following Connection Types<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">HTTP only<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose this option if you do not wish to allow any HTTPS connections to Remote Administration. Only HTTP connections will be accepted.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">HTTP and HTTPS<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose this option if you want to enable SSL support within Remote Administration, but do not wish to force your Remote Administration users to use HTTPS. Remote Administration will listen for connections on the HTTPS port designated below, but it will still respond to normal http connections on the Remote Administration TCP port designated on the <a href=\"wa--web_server.html\" class=\"topiclink\">Web Server<\/a> screen.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">HTTPS only<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose this option if you wish to require HTTPS when connecting to Remote Administration. Remote Administration will respond only to HTTPS connections when this option is enabled — it will not respond to HTTP requests.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">HTTP redirected to HTTPS<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose this option if you wish to redirect all HTTP connections to HTTPS on the HTTPS port.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">HTTPS port<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the TCP port that Remote Administration will listen to for SSL connections. The default SSL port is<\/span><span class=\"f_ControlIndent\"> 444. If the default SSL port is used, you will not have to include the port number in Remote Administration<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_ControlIndent\">s URL when connecting via HTTPS (i.e. &quot;https:\/\/example.com&quot; is equivalent to<\/span><span class=\"f_ControlIndent\"> &quot;https:\/\/example.com:444&quot;).<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/lightbulb_on_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">This is not the same as the Remote Administration port that is designated on the <a href=\"wa--web_server.html\" class=\"topiclink\">Web Server<\/a> screen. If you are still allowing HTTP connections to Remote Administration then those connections must use that other port to connect successfully. HTTPS connections must use the HTTPS port.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Select certificate to use for HTTPS\/SSL<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">This box displays your SSL certificates. Check the box next to any certificates you wish to be active. Click the star next to the one that you wish to set as the default certificate. MDaemon supports the Server Name Indication (SNI) extension to the TLS protocol, which allows a different certificate to be used for each of your server\'s host names. MDaemon will look at the active certificates and choose the one that has the requested host name in its Subject Alternative Names field (you can specify the alternate names when creating the certificate). If the client does not request a host name, or if no matching certificate is found, then the default certificate is used. Double-click a certificate to open it in Windows\' Certificate dialog for review (only available in the application interface, not in the browser-based remote administration).<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Delete<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Select a certificate in the list and then click this button to delete it. A confirmation box will open and ask you if you are sure that you want to delete the certificate.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Create Certificate<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to open the Create SSL Certificate dialog.<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><img style=\"margin:0;width:27.7500rem;height:19.5000rem;border:none\" src=\".\/images\/worldclient_ssl-https_create.png\"\/><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Certificate Details<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Host name<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When creating a certificate, enter the host name to which your users will connect (for example, &quot;wc.example.com&quot;).<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Organization\/company name<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enter the organization or company that &quot;owns&quot; the certificate here.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Alternative host names (separate multiple entries with a comma)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">If there are alternative host names to which users may be connecting and you want this certificate to apply to those names as well, then enter those domain names here separated by commas. Wildcards are permitted, so &quot;<\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">*.example.com<\/span><span class=\"f_ControlIndent\">&quot; would apply to all sub domains of <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">example.com<\/span><span class=\"f_ControlIndent\"> (for example, &quot;<\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">wc.example.com<\/span><span class=\"f_ControlIndent\">&quot;, &quot; <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">mail.example.com<\/span><span class=\"f_ControlIndent\">&quot;, and so on).<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/lightbulb_on_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">MDaemon supports the Server Name Indication (SNI) extension to the TLS protocol, which allows a different certificate to be used for each of your server\'s host names. MDaemon will look at the active certificates and choose the one that has the requested host name in its Subject Alternative Names field. If the client does not request a host name, or if no matching certificate is found, then the default certificate is used.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Encryption key length<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose the desired bit-length of the encryption key for this certificate. The longer the encryption key the more secure the transferred data will be. Note, however, that not all applications support key lengths longer than 512.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Country\/region<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose the country or region in which your server resides.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Hash algorithm<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose the hash algorithm that you wish to use: SHA1 or SHA2. The default setting is SHA2.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Restart web server<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to restart the web server. The web server must be restarted before a new certificate will be used.<\/span><\/p>\n\r<h3 class=\"p_Heading3\" style=\"page-break-after: avoid;\"><span class=\"f_Heading3\">Using Let\'s Encrypt to Manage Your Certificate<\/span><\/h3>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Let\'s Encrypt is a Certificate Authority (CA) that provides free certificates via an automated process designed to eliminate the currently complex process of manual creation, validation, signing, installation, and renewal of certificates for secure websites.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">To support using Let\'s Encrypt\'s automated process to manage a certificate, the <a href=\"ssl_lets-encrypt.html\" class=\"topiclink\">Let\'s Encrypt<\/a> screen is provided to help you easily configure and run the PowerShell script included in the &quot;<\/span><span class=\"f_PlainText\">MDaemon\\LetsEncrypt<\/span><span class=\"f_BodyText\">&quot; folder. Running the script will set up everything for Let\'s Encrypt, including putting the necessary files in the Webmail HTTP folder to complete the http-01 challenge. It uses the <a href=\"domain-manager_host_name_ip.html\" class=\"topiclink\">SMTP host name<\/a> of the <a href=\"domain-manager.html\" class=\"topiclink\">default domain<\/a> as the domain for the certificate, includes any <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\">Alternate host names<\/span><span class=\"f_BodyText\"> you have specified, retrieves the certificate, imports it into Windows, and configures MDaemon to use the certificate for MDaemon, Webmail, and Remote Administration. Further, the script creates a log file in the &quot;<\/span><span class=\"f_PlainText\">MDaemon\\Logs\\<\/span><span class=\"f_BodyText\">&quot; folder, called <\/span><span class=\"f_PlainText\">LetsEncrypt.log<\/span><span class=\"f_BodyText\">. This log file is removed and recreated each time the script runs, and it includes the starting date and time of the script. Also, notification emails will be sent when errors occur if you specify an <\/span><span class=\"f_BodyText\" style=\"font-style: italic;\">Admin email for notifications<\/span><span class=\"f_BodyText\">. See the <a href=\"ssl_lets-encrypt.html\" class=\"topiclink\">Let\'s Encrypt<\/a> topic for more information.<\/span><\/p>\n\r<p class=\"p_BodyText\"><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">For more information on SSL and Certificates, see:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"wa--running_webadmin_under_iis.html\" class=\"topiclink\">Running Remote Administration under IIS<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"ssl__certificates.html\" class=\"topiclink\">SSL and Certificates<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"ssl_creating_and_using_ssl_certifi.html\" class=\"topiclink\">Creating and Using SSL Certificates<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">For more information on Remote Administration, see:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"webadmin_web-config.html\" class=\"topiclink\">Remote Configuration<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"wa--web_server.html\" class=\"topiclink\">Remote Administration » Web Server<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"template-manager_web-services.html\" class=\"topiclink\">Web Access Defaults<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"ae_worldclient_webadmin.html\" class=\"topiclink\">Account Editor » Web<\/a><\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r"
})
