Configuring the Internet Agent to Use SSL

The Internet Agent can use the SSL (Secure Socket Layer) protocol to enable secure connections to other SMTP hosts, POP/IMAP clients, and the Internet Agent Web console.

To use SSL, the Internet Agent requires access to a server certificate file and key file. The Internet Agent can use any Base64/PEM or PFX formatted certificate file located on the server. If the Internet Agent's server does not have a server certificate file, you can use the GroupWise Generate CSR utility to help you obtain one. For information, see GroupWise Generate CSR Utility (GWCSRGEN).

To configure the SSL settings for the Internet Agent:

  1. In ConsoleOne®, right-click the Internet Agent object > click Properties.

  2. Click the GroupWise tab > click SSL to display the SSL page.


    SSL property page

  3. Fill in the Certificate File, SSL Key File, and Set Password fields:

    Certificate File: Select the server certificate file that the Internet Agent will use. The certificate file must be in Base64/PEM or PFX format. If you enter the filename rather than using the Browse button to select it, use the full path if the file is not in the same directory as the Internet Agent program. This setting corresponds to the Internet Agent's /certfile switch.

    SSL Key File: Select the key file associated with the certificate. If the private key is included in the certificate file rather than in a separate key file, leave this field blank. If you enter the filename rather than using the Browse button to select it, use the full path if the file is not in the same directory as the Internet Agent program. This setting corresponds to the Internet Agent's /keyfile switch.

    Set Password: Click Set Password to specify the password for the key. If the key does not require a password, do not use this option. This setting corresponds to the /keypasswd switch.

  4. Select the connections for which you want to use SSL:

    HTTP: Select this option to enable the Internet Agent to use a secure connection to the Web browser being used to display the Internet Agent Web console. The Web browser must also be enabled to use SSL; if it is not, a non-secure connection will be used. This setting corresponds with the Internet Agent's /httpssl switch. You can also use the /httpport switch to determine on which port the Internet Agent listens for HTTP requests.

    IMAP: Select this option to enable the Internet Agent to use a secure connection to IMAP clients. The IMAP client must also be enabled to use SSL or TLS (Transport Layer Security); if it is not, a non-secure connection will be used. This setting corresponds with the Internet Agent's /imapssl switch. You can also use /imapsport switch to determine on which port the Internet Agent listens for SSL connections and the /imapport switch to determine the port for non-SSL connections.

    POP: Select this option to enable the Internet Agent to use a secure connection to POP clients. The POP client must also be enabled to use SSL or TLS (Transport Layer Security); if it is not, a non-secure connection will be used. This setting corresponds with the Internet Agent's /popssl switch. You can also use /popsport switch to determine on which port the Internet Agent listens for SSL connections and the /popport switch to determine the port for non-SSL connections.

    SMTP: Select this option to enable the Internet Agent to use a secure connection to other SMTP hosts. The SMTP host must also be enabled to use SSL or TLS (Transport Layer Security); if it is not, a non-secure connection will be used. This setting corresponds with the Internet Agent's /smtpssl switch.

  5. Click OK to save the changes.