Skip to main content

How do I set up an Entrust SSL certificate with Kerio Webstar 5?

User-added image
For Kerio Webstar 5


Skip to Installation

Before You Begin

It is strongly recommended that you take the following precautions to ensure that you will be able to install your Entrust SSL certificate:

! Do not use commas in any of the fields you fill in when creating your Certificate Signing Request (CSR). Commas are interpreted as the end of the field and will cause an invalid CSR to be generated.

! Do not use any of the following characters in the Web server Distinguished Name: ! @ # $ % ^ * ( ) ~ ? > < & / \

! When you generate your CSR, make sure you are logged in as an Administrator to the computer that hosts your Web server.

Testing of this product was used on a Mac OS X 10.4 running the Kerio Webstar 5 Trial.

This process is in three parts:
1) Key pair and Certificate Signing Request (CSR) generation
2) Installing your Entrust SSL certificate
3) Enabling SSL on Kerio WebStar 5 Webserver

Part 1 of 3: Key pair and Certificate Signing Request (CSR) generation

1. Launch the WebStar Admin Client.

2. Under Web Server , click SSL Configurations .

3. In the menu, click Tools and choose Generate Keys and CSR .

4. In the Generate Key section, supply the following:

  • Name: (a friendly name for the private key)
  • Password: (enter a new private key password)
  • Bits: (1024 or 2048 is supported) The recommended is 1024

5. Click the Generate Key button to generate your private key.

6. In the Generate Certificate Signing Request section, supply the following:

  • Common Name (Normally, the public DNS site, such as http://www.entrust.com/ )
  • Organization (The full legal name of your business or organization)
  • Organization Unit (A friendly name, such as IT dept)
  • City/Locality (Your city or locality)
  • Country (2 letter Country code)
  • State/Province (Your state or province)
  • Phone number, Fax and Email - Please do not use.

7. Choose your key that you created and type in the password.

8. Choose the default Normal Certificate and click Generate CSR .

9. Copy your CSR for Entrust to sign. Provide this during your Entrust SSL enrollment.

10. Close out of the tool and refresh your WebStar Admin client.

Part 2 of 3: Installing your Entrust SSL certificate

1. Pick up your Entrust SSL certificate and copy the certificate including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines into a plain text file on your server.  Copy this file (your Entrust SSL certificate) to your / Applications/Kerio WebStar/SSL Tools/ServerCerts/ directory.

2. Launch the Webstar Admin Client and click SSL Configurations .

3. Click the New button.

4. Type in the name and password to the private key you created in the Generate Key section.

5. Choose your key file from the drop down list (this is the private key you generated).

6. Choose your certificate file from the drop down list (this is the Entrust SSL certificate you copied to your ServerCerts directory).

7. Under Cipher Style , specify a cipher strength.  You can choose simple or advanced.

8. Click SAVE .

Part 3 of 3: Enabling SSL on Kerio WebStar 5 Webserver

1. Launch the Webstar Admin Client and click Web Connections under the Web Server option.

2. Click New and select All under IP Addresses or specify your site IP address.

3. For the port, type 443.

4. For SSL Config , select the drop-down list and choose the Entrust certificate keypair.

5. Click SAVE .

Disaster recovery

Please make a backup copy of your private key and Entrust SSL certificate. The default location is Applications/Kerio WebStar/SSL Tools/ .

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.

Country Number
Australia 0011 - 800-3687-7863
1-800-767-513
Austria 00 - 800-3687-7863
Belgium 00 - 800-3687-7863
Denmark 00 - 800-3687-7863
Finland 990 - 800-3687-7863 (Telecom Finland)
00 - 800-3687-7863 (Finnet)
France 00 - 800-3687-7863
Germany 00 - 800-3687-7863
Hong Kong 001 - 800-3687-7863 (Voice)
002 - 800-3687-7863 (Fax)
Ireland 00 - 800-3687-7863
Israel 014 - 800-3687-7863
Italy 00 - 800-3687-7863
Japan 001 - 800-3687-7863 (KDD)
004 - 800-3687-7863 (ITJ)
0061 - 800-3687-7863 (IDC)
Korea 001 - 800-3687-7863 (Korea Telecom)
002 - 800-3687-7863 (Dacom)
Malaysia 00 - 800-3687-7863
Netherlands 00 - 800-3687-7863
New Zealand 00 - 800-3687-7863
0800-4413101
Norway 00 - 800-3687-7863
Singapore 001 - 800-3687-7863
Spain 00 - 800-3687-7863
Sweden 00 - 800-3687-7863 (Telia)
00 - 800-3687-7863 (Tele2)
Switzerland 00 - 800-3687-7863
Taiwan 00 - 800-3687-7863
United Kingdom 00 - 800-3687-7863
0800 121 6078
+44 (0) 118 953 3088