For Kerio Webstar 5

Skip to Installation

Before You Begin

It is strongly recommended that you take the following precautions to ensure that you will be able to install your Entrust SSL certificate:

! Do not use commas in any of the fields you fill in when creating your Certificate Signing Request (CSR). Commas are interpreted as the end of the field and will cause an invalid CSR to be generated.

! Do not use any of the following characters in the Web server Distinguished Name: ! @ # $ % ^ * ( ) ~ ? > < & / \

! When you generate your CSR, make sure you are logged in as an Administrator to the computer that hosts your Web server.

Testing of this product was used on a Mac OS X 10.4 running the Kerio Webstar 5 Trial.

This process is in three parts:
1) Key pair and Certificate Signing Request (CSR) generation
2) Installing your Entrust SSL certificate
3) Enabling SSL on Kerio WebStar 5 Webserver

Part 1 of 3: Key pair and Certificate Signing Request (CSR) generation

1. Launch the WebStar Admin Client.

2. Under Web Server , click SSL Configurations .

3. In the menu, click Tools and choose Generate Keys and CSR .

4. In the Generate Key section, supply the following:

• Name: (a friendly name for the private key)
• Password: (enter a new private key password)
• Bits: (1024 or 2048 is supported) The recommended is 1024

5. Click the Generate Key button to generate your private key.

6. In the Generate Certificate Signing Request section, supply the following:

• Common Name (Normally, the public DNS site, such as http://www.entrust.com/ )
• Organization (The full legal name of your business or organization)
• Organization Unit (A friendly name, such as IT dept)
• City/Locality (Your city or locality)
• Country (2 letter Country code)
• State/Province (Your state or province)
• Phone number, Fax and Email - Please do not use.

7. Choose your key that you created and type in the password.

8. Choose the default Normal Certificate and click Generate CSR .

9. Copy your CSR for Entrust to sign. Provide this during your Entrust SSL enrollment.

10. Close out of the tool and refresh your WebStar Admin client.

Part 2 of 3: Installing your Entrust SSL certificate

1. Pick up your Entrust SSL certificate and copy the certificate including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines into a plain text file on your server.  Copy this file (your Entrust SSL certificate) to your / Applications/Kerio WebStar/SSL Tools/ServerCerts/ directory.

2. Launch the Webstar Admin Client and click SSL Configurations .

3. Click the New button.

4. Type in the name and password to the private key you created in the Generate Key section.

5. Choose your key file from the drop down list (this is the private key you generated).

6. Choose your certificate file from the drop down list (this is the Entrust SSL certificate you copied to your ServerCerts directory).

7. Under Cipher Style , specify a cipher strength.  You can choose simple or advanced.

8. Click SAVE .

Part 3 of 3: Enabling SSL on Kerio WebStar 5 Webserver

1. Launch the Webstar Admin Client and click Web Connections under the Web Server option.

2. Click New and select All under IP Addresses or specify your site IP address.

3. For the port, type 443.

4. For SSL Config , select the drop-down list and choose the Entrust certificate keypair.

5. Click SAVE .

Disaster recovery

Please make a backup copy of your private key and Entrust SSL certificate. The default location is Applications/Kerio WebStar/SSL Tools/ .

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.

Country	Number
Australia	0011 - 800-3687-7863 1-800-767-513
Austria	00 - 800-3687-7863
Belgium	00 - 800-3687-7863
Denmark	00 - 800-3687-7863
Finland	990 - 800-3687-7863 (Telecom Finland) 00 - 800-3687-7863 (Finnet)
France	00 - 800-3687-7863
Germany	00 - 800-3687-7863
Hong Kong	001 - 800-3687-7863 (Voice) 002 - 800-3687-7863 (Fax)
Ireland	00 - 800-3687-7863
Israel	014 - 800-3687-7863
Italy	00 - 800-3687-7863
Japan	001 - 800-3687-7863 (KDD) 004 - 800-3687-7863 (ITJ) 0061 - 800-3687-7863 (IDC)
Korea	001 - 800-3687-7863 (Korea Telecom) 002 - 800-3687-7863 (Dacom)
Malaysia	00 - 800-3687-7863
Netherlands	00 - 800-3687-7863
New Zealand	00 - 800-3687-7863 0800-4413101
Norway	00 - 800-3687-7863
Singapore	001 - 800-3687-7863
Spain	00 - 800-3687-7863
Sweden	00 - 800-3687-7863 (Telia) 00 - 800-3687-7863 (Tele2)
Switzerland	00 - 800-3687-7863
Taiwan	00 - 800-3687-7863
United Kingdom	00 - 800-3687-7863 0800 121 6078 +44 (0) 118 953 3088