How to Install SSL Certificate on Kerio Connect Server?

Steps to Install SSL Certificate on a Kerio Connect Server

Ensuring secure and protected connections for your Kerio Connect mail server requires the installation of an SSL certificate. This comprehensive guide provides detailed instructions on how to successfully install an SSL certificate on your Kerio Connect mail server.

However, before proceeding with the SSL certificate installation on Kerio Connect, obtaining an SSL cert from a reliable and recognized CA (Certificate Authority) is crucial. The first step to get an SSL cert issued by a CA is to submit a CSR (An encoded text submitted to a Certificate Authority to verify your company’s or website’s identity.) to them. And, to submit a CSR, you need to create one, so let’s understand how to accomplish that.

Generate a CSR (Code Signing Request)

To create or generate a CSR, you have two options:

Use our CSR Generator Tool: This option offers an excellent opportunity to save considerable time, as the entire process is handled automatically. Simply input the required details into the designated fields and initiate the generation process with a single click. This automated approach ensures optimal efficiency and convenience.
Do it Manually: When opting for this option, it is crucial to proceed with utmost caution and diligently verify the accuracy of the provided information. Take your time to verify all the details and be 100% sure there are no errors or misleading data – as if a CA finds out even the most minor inaccuracy in the provided data, they can reject the issuance of your SSL certificate. Therefore, enter up-to-date and correct data to minimize the risk of setbacks or complications in obtaining your desired SSL certificate.

How to Install an SSL Certificate on Kerio Connect?

Follow the steps mentioned below to install an SSL certificate on Kerio Connect:

Unzip the folder (.zip) received from CA.
Extract the files from your local machine.
Install the SSL Certificate.

Let’s explore each of these steps in detail.

Unzip the Folder (.zip) Received From CA

Once your request has been successfully verified (validated) by the Certificate Authority, they send you the SSL certificate and other files, such as the Intermediate certificate, Private Key, etc., in a .zip folder. Typically, this folder is delivered to your designated email address. Upon receiving the email, unzip the received folder and verify that you have all the files mentioned below:

Root and Intermediate Certs (.ca-bundle file)
Primary certificate (.crt file)
Private key

Extract the Files on Your Local Machine

After confirming the presence of all the files, the next step is to extract them to your local machine or any preferred location. Follow the steps given below to extract the files:

Press Ctrl + A on the keyboard to select all the files.
Navigate to the desired location.
Press Ctrl + V to transfer (paste) the SSL files to your desired location.

Note: Alternatively, you can also drag and drop the files to the new location.

Install the SSL Certificate on the Kerio Connect Server

Follow the steps mentioned below to add an SSL cert to the Kerio Connect mail server:

Login to the admin web interface of your Kerio Connect server.
Navigate to Configuration > SSL Certificates.
From the Import list, select Import Signed Certificate from CA.
Select the SSL certificate and then click Set as Active.
Open the .crt file (primary certificate file) using a text editor like Notepad (Say – Notepad1).
Open the .CA Bundle file (Intermediate certificate file) using a text editor like Notepad (Say – Notepad2).
Paste the contents of the Notepad2 file into the Notepad file without giving any space in between the content of both files.

Here’s the format for your reference:

BEGIN CERTIFICATE—–

(Server certificate)

—–END CERTIFICATE—–

—–BEGIN CERTIFICATE—–

(Intermediate certificate)

—–END CERTIFICATE—–

Save the Settings to install the SSL cert successfully.

Test the Installation

Testing SSL certificate installation is a must, as it helps to point out and rectify any potential SSL and installation-related concerns or vulnerabilities. The best way to test the installation is to use SSL Checker Tool, it is a valuable tool that enables you to verify the proper implementation of a chain certificate quickly. It is advisable to proactively test the chain certificate after the SSL certificate implementation to ensure its integrity.