Articles in Root

Share Via Email

How do I install a certificate on MDaemon?

Problem

How do I install a certificate on MDaemon?

Solution

Part I - Installing the Root Certificate

Generally, your Windows Server should have the QuoVadis Root certificates installed, however there have been cases where they have not been.  When you install the SSL certificate, if the root certificate is not present, the system will prompt you to trust it, which will also install it.

 
First you must open the Microsoft Management Console.
  1. Click on Start and then type MMC.  This should display "mmc - Run command" as the best match. Click on it to open the Microsoft Management Console.

  2. The Console1 window will appear.

  3. Click on File at the top and then select Add/Remove Snap-in...  Alternatively, you can press Ctrl + M.

  4. In the Add/Remove Snap-in window, click on the Add... button at the bottom.  This will open a third window named Add Standalone Snap-in.

  5. Scroll down in the Add Standalone Snap-in window and find the Certificates component.  Once found, highlight it and click on the Add button at the bottom.  Alternatively, you can double-click on Certificates.

  6. In a new window, you will be given 3 options for which account you want the certificates snap-in to manage.

  7. Select the Computer account radio button and click on the Next button.

  8. At the next screen, click on the Finish button.

  9. Click on the ">" sign next to Certificates (Local Computer) to expand it (if it isn't already expanded).

  10. Locate and expand the Trusted Root Certification Authorities store and the click on the Certificates folder underneath it.

  11. In the right hand pane, you should see a list of certificates. Click on any certificate that you see and press the letter "Q" on your keyboard to fast-track to the QuoVadis root certificates.  Verify that you have the correct Root CA certificate in this list of certificates in the right hand pane. The correct certificate is shown and available for download within the certificate download page within Trust/Link.  If this certificate is in the Trusted Root Certification Authorities store, then you can skip to Part II​ to check for the Intermediate Certificate.  If this certificate is not installed, then the next steps will guide you through the process of installing this file.

  12. Place the certificate in a directory where it can be accessed by the server.

  13. Right-click on the Certificates folder underneath the Trusted Root Certification Authorities folder and in the drop-down menu, select All Tasks and then click on Import.

  14. The Certificate Import Wizard will appear.  At the welcome screen, click on the Next button.

  15. You must specify the file to import.  Click on the Browse... button and find and select the Root CA certificate.  Once selected, it should appear in the File name: field.  Click on the Next button.

  16. On the next screen, the option for Place all certificates in the following store should be selected by default and in the Certificate store: field should be Trusted Root Certification Authorities.  Click on the Next button.

  17. At the summary screen, click on the Finish button.

  18. You should get a message that reads, "The import was successful."

Part II - Installing the Intermediate (chaining) Certificate

Part II explains how to install the intermediate files that are required.  QuoVadis uses an intermediate certificate that must be installed on the server to prevent errors in certain browsers.  You may want to go through these steps and if the intermediate certificate is not installed, then please obtain it and follow through with the rest of Part II.  Part II assumes that you currently have the Microsoft Management Console open.  If you do not, you can find the instructions in Part I of this guide, steps 1-8.
  1. Click on the ">" sign next to Certificates (Local Computer) to expand it.

  2. Locate and expand the Intermediate Certification Authorities store and then click on the Certificates folder underneath it.

  3. In the right hand pane, you should see a list of certificates.  Verify that you have the correct Intermediate CA certificate (Chain) in this list of certificate in the right hand pane. The correct certificate is shown and available for download within the certificate download page within Trust/Link.  If this certificate is in the Intermediate Certification Authorities store, then you can skip to Part III.  If you do not, then the next steps will guide you through the process of installing this file.

  4. Place the certificate in a directory where it can be accessed by the server.

  5. Right-click on the Certificates folder underneath the Intermediate Certification Authorities folder and in the drop-down menu, select All Tasks and then click on Import.

  6. The Certificate Import Wizard will appear.  At the welcome screen, click on the Next button.

  7. You must specify the file to import.  Click on the Browse... button and find and select the Intermediate CA (Chain) certificate.  Once selected, it should appear in the File name: field.  Click on the Next button.

  8. On the next screen, the option for Place all certificates in the following store should be selected by default and in the Certificate store: field should be Intermediate Certification Authorities.  Click on the Next button.

  9. At the summary screen, click on the Finish button.

  10. You should get a message that reads, "The import was successful."

Part III - Install the certificate into the Windows Certificate Store.

Transfer your PKCS#12 file (*.p12 or *.pfx) to the MDaemon server.
  1. Install the certificate through MMC using the following steps:
    1. Open the Computer account in the Certificates snap-in for the server in MMC.
    2. Expand the Personal folder.
    3. Right-click on the Certificates folder underneath the Personal folder and select the All Tasks > Import... option.
    4. In the Certificate Import Wizard, browse to the PKCS#12 file that you copied to the server.  You may need to change the drop-down for the certificate type to Personal Information Exchange (*.p12;*.p12) for the file to appear.
    5. Enter in the password.  Ensure that you select the Mark this key as exportable option.
    6. Finish the wizard.
  2. In MDaemon, navigate to Security > Security Settings > SSL & TLS.
    • Optional: On MDaemon, enable the services that you are using with the checkboxes for: Enable SSL, STARTTLS, and STLS.
    • Optional: You may need to configure additional ports for SSL using the checkbox Enable the dedicated SSL ports for SMTP, IMAP, POP3 servers.
  3. On WorldClient (web mail) select HTTPS only and select the certificate.
  4. Restart the computer.

Legal


DigiCert is the world’s premier provider of high-assurance digital certificates—providing trusted SSL, private and managed PKI deployments, and device certificates for the emerging IoT market. Since our founding almost fifteen years ago, we’ve been driven by the idea of finding a better way. A better way to provide authentication on the internet. A better way to tailor solutions to our customer’s needs.

© 2020 DigiCert, Inc. All rights reserved. DigiCert, its logo and CertCentral are registered trademarks of DigiCert, Inc. Norton and the Checkmark Logo are trademarks of NortonLifeLock Inc. used under license. Other names may be trademarks of their respective owners.