For Kerio Webstar 5

Skip to Installation

Before You Begin

It is strongly recommended that you take the following precautions to ensure that you will be able to install your Entrust SSL certificate:

! Do not use commas in any of the fields you fill in when creating your Certificate Signing Request (CSR). Commas are interpreted as the end of the field and will cause an invalid CSR to be generated.

! Do not use any of the following characters in the Web server Distinguished Name: ! @ # $ % ^ * ( ) ~ ? > < & / \

! When you generate your CSR, make sure you are logged in as an Administrator to the computer that hosts your Web server.

Testing of this product was used on a Mac OS X 10.4 running the Kerio Webstar 5 Trial.

This process is in three parts:
1) Key pair and Certificate Signing Request (CSR) generation
2) Installing your Entrust SSL certificate
3) Enabling SSL on Kerio WebStar 5 Webserver

Part 1 of 3: Key pair and Certificate Signing Request (CSR) generation

1. Launch the WebStar Admin Client.

2. Under Web Server , click SSL Configurations .

3. In the menu, click Tools and choose Generate Keys and CSR .

4. In the Generate Key section, supply the following:

• Name: (a friendly name for the private key)
• Password: (enter a new private key password)
• Bits: (1024 or 2048 is supported) The recommended is 1024

5. Click the Generate Key button to generate your private key.

6. In the Generate Certificate Signing Request section, supply the following:

• Common Name (Normally, the public DNS site, such as http://www.entrust.com/ )
• Organization (The full legal name of your business or organization)
• Organization Unit (A friendly name, such as IT dept)
• City/Locality (Your city or locality)
• Country (2 letter Country code)
• State/Province (Your state or province)
• Phone number, Fax and Email - Please do not use.

7. Choose your key that you created and type in the password.

8. Choose the default Normal Certificate and click Generate CSR .

9. Copy your CSR for Entrust to sign. Provide this during your Entrust SSL enrollment.

10. Close out of the tool and refresh your WebStar Admin client.

Part 2 of 3: Installing your Entrust SSL certificate

Part 3 of 3: Enabling SSL on Kerio WebStar 5 Webserver

1. Launch the Webstar Admin Client and click Web Connections under the Web Server option.

2. Click New and select All under IP Addresses or specify your site IP address.

3. For the port, type 443.

4. For SSL Config , select the drop-down list and choose the Entrust certificate keypair.

5. Click SAVE .

Disaster recovery

Please make a backup copy of your private key and Entrust SSL certificate. The default location is Applications/Kerio WebStar/SSL Tools/ .

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.