Skip to main content

Certificate Services Support

User-added image
For Kerio Webstar 5

Skip to Installation

Before You Begin

It is strongly recommended that you take the following precautions to ensure that you will be able to install your Entrust SSL certificate:

    ! Do not use commas in any of the fields you fill in when creating your Certificate Signing Request (CSR). Commas are interpreted as the end of the field and will cause an invalid CSR to be generated.

    ! Do not use any of the following characters in the Web server Distinguished Name: ! @ # $ % ^ * ( ) ~ ? > < & / \

    ! When you generate your CSR, make sure you are logged in as an Administrator to the computer that hosts your Web server.

Testing of this product was used on a Mac OS X 10.4 running the Kerio Webstar 5 Trial.

This process is in three parts:
1) Key pair and Certificate Signing Request (CSR) generation
2) Installing your Entrust SSL certificate
3) Enabling SSL on Kerio WebStar 5 Webserver

Part 1 of 3: Key pair and Certificate Signing Request (CSR) generation

1. Launch the WebStar Admin Client.

2. Under Web Server, click SSL Configurations.

3. In the menu, click Tools and choose Generate Keys and CSR.

4. In the Generate Key section, supply the following:

  • Name: (a friendly name for the private key)
  • Password: (enter a new private key password)
  • Bits: (1024 or 2048 is supported) The recommended is 1024

5. Click the Generate Key button to generate your private key.

6. In the Generate Certificate Signing Request section, supply the following:

  • Common Name (Normally, the public DNS site, such as http://www.entrust.com/)
  • Organization (The full legal name of your business or organization)
  • Organization Unit (A friendly name, such as IT dept)
  • City/Locality (Your city or locality)
  • Country (2 letter Country code)
  • State/Province (Your state or province)
  • Phone number, Fax and Email - Please do not use.

7. Choose your key that you created and type in the password.

8. Choose the default Normal Certificate and click Generate CSR.

9. Copy your CSR for Entrust to sign. Provide this during your Entrust SSL enrollment.

10. Close out of the tool and refresh your WebStar Admin client.

Part 2 of 3: Installing your Entrust SSL certificate

1. Pick up your Entrust SSL certificate and copy the certificate including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines into a plain text file on your server.  Copy this file (your Entrust SSL certificate) to your /Applications/Kerio WebStar/SSL Tools/ServerCerts/ directory.

2. Launch the Webstar Admin Client and click SSL Configurations.

3. Click the New button.

4. Type in the name and password to the private key you created in the Generate Key section.

5. Choose your key file from the drop down list (this is the private key you generated).

6. Choose your certificate file from the drop down list (this is the Entrust SSL certificate you copied to your ServerCerts directory).

7. Under Cipher Style, specify a cipher strength.  You can choose simple or advanced.

8. Click SAVE.

Part 3 of 3: Enabling SSL on Kerio WebStar 5 Webserver

1. Launch the Webstar Admin Client and click Web Connections under the Web Server option.

2. Click New and select All under IP Addresses or specify your site IP address.

3. For the port, type 443.

4. For SSL Config, select the drop-down list and choose the Entrust certificate keypair.

5. Click SAVE.

Disaster recovery

Please make a backup copy of your private key and Entrust SSL certificate. The default location is Applications/Kerio WebStar/SSL Tools/.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation: 
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call. 

CountryNumber
Australia0011 - 800-3687-7863
1-800-767-513
Austria00 - 800-3687-7863
Belgium00 - 800-3687-7863
Denmark00 - 800-3687-7863
Finland990 - 800-3687-7863 (Telecom Finland)
00 - 800-3687-7863 (Finnet)
France00 - 800-3687-7863
Germany00 - 800-3687-7863
Hong Kong001 - 800-3687-7863 (Voice)
002 - 800-3687-7863 (Fax)
Ireland00 - 800-3687-7863
Israel014 - 800-3687-7863
Italy00 - 800-3687-7863
Japan001 - 800-3687-7863 (KDD)
004 - 800-3687-7863 (ITJ)
0061 - 800-3687-7863 (IDC)
Korea001 - 800-3687-7863 (Korea Telecom)
002 - 800-3687-7863 (Dacom)
Malaysia00 - 800-3687-7863
Netherlands00 - 800-3687-7863
New Zealand00 - 800-3687-7863
0800-4413101
Norway00 - 800-3687-7863
Singapore001 - 800-3687-7863
Spain00 - 800-3687-7863
Sweden00 - 800-3687-7863 (Telia)
00 - 800-3687-7863 (Tele2)
Switzerland00 - 800-3687-7863
Taiwan00 - 800-3687-7863
United Kingdom00 - 800-3687-7863
0800 121 6078
+44 (0) 118 953 3088

 

Helpful Resources