Managing MTA certificates using the Web UI

Use the MTA Certificate Configuration section of the Certificate Management page to do the following:

Import the public and private keys for an MTA certificate.
Create a self-signed MTA certificate.
Create a Certificate Signing Request (CSR) to obtain a certificate from a certificate authority (CA).
Restore the system self-signed certificate as the active MTA certificate.
Export the public key.

To import an MTA certificate:

Click the Settings tab.
Click Certificates/Keys in the sidebar.
Click Import Certificate.
Import the certificate:
1. Click Choose File.
2. In the dialog box that opens, navigate to the certificate .pem file in your local file system.
  Note
  This could be an existing certificate file, or a certificate file obtained through a CSR. (For details, see Creating an MTA certificate signing request (CSR).)
3. If you imported an existing certificate file, proceed to the next step. Otherwise, proceed to step 6.
If the certificate you just imported already existed (that is, it was not obtained from a CSR as described in the previous step), import the matching private key:
1. Click Choose File.
2. In the dialog box that opens, navigate to the private key .pem file in your local file system.
Select the certificate you want to activate after it is imported.
Note
The certificate can be activated later, if you prefer. For details, see Activating named certificates.
Click Commit. The certificate is added to the certificate database with the name mta-cert.

To create a self-signed MTA certificate:

Click the Settings tab.
Click Certificates/Keys in the sidebar.
Click Create Self-Signed Certificate.
Provide values for the attributes in the section that opens. For descriptions of the attributes, see Defining default certificate attributes.
Click Commit. The certificate is added to the certificate database with the name mta-cert.

To use a CSR to obtain an MTA certificate:

Click the Settings tab.
Click Certificates/Keys in the sidebar.
Click Create Certificate Signing Request.
Provide values for the attributes in the section that opens. For descriptions of the attributes, see Defining default certificate attributes.
Click Commit.
Click Export Certificate Signing Request. A message at the top of the page informs you that the export was successful.
Locate the mta-csr.crt file in your local file system, and send it to the certificate authority (CA).
Tip
To view the CSR, click View Certificate Signing Request.
When you receive the certificate from the CA, import it as described in Importing an MTA certificate.
Important
Do not import a private key, because the system already generated one when you created the CSR.

To restore the system self-signed certificate:

Because private keys are sensitive, this procedure exports only the certificate, not the private key.

To export an MTA certificate:

Click the Settings tab.
Click Certificates/Keys in the sidebar.
Click Export in the Actions column for the MTA certificate you want to export.
Verify that the .crt file was downloaded to your local file system.