Re-Issuing SSL Certificates in Kerio Connect

Overview

At times, administrators may have issues renewing the SSL certificate using a new CRT file provided by the Certification Authority (CA). This article shares the process of re-issuing the SSL certificate to fix this issue. 

---

 

Process

Follow these steps for re-issuing SSL certificates: 

1. Generate a New Certificate Request
2. Import the Renewed Certificate in Kerio Connect
3. Install Intermediate Certificates (If Applicable)
4. Examine the Installed Certificates (Confirmation)

Refer to the sections below for instructions about each step.

 

Generate a New Certificate Request

Follow these steps to generate a new certificate request and send it to a Certification Authority:

1. Open the Kerio Connect administration console.
2. Navigate to Configuration > SSL Certificates.
3. Click New > New Certificate Request.
   
   
   
   
4. Enter the required details and click OK.
   
   
   

   Note: You can review the details of the old certificate to fill in the New Certificate Request form.

    

5. Select the certificate request you have created.
6. Click Export > Export Request.
   
   
   
   
7. Save the certificate on your computer and send it to a Certification Authority (e.g., Verisign, Thawte, SecureSign, Microsoft Authenticode, etc.) for validation.
8. Open the certificate request to re-issue the certificate with your vendor.
   
   
   1. Choose the certificate request and click Show Details. 
      
      
      
      
   2. From the Source tab, copy the Certificate Request text to your CA's web form.
      
      
      
      
   3. When prompted to select the certificate type, choose Apache Server.
      

      Note: If your Certification Authority does not have this type, you can choose the Other option.

---

 

Import the Renewed Certificate in Kerio Connect

Follow these steps to import the SSL Certificate (CRT file) you have received from the Certification Authority:

1. In the SSL Certificates section, click on the Request you created earlier.
2. Click Import > Import Signed Certificate from CA.
   
   
   
   
3. Select the server SSL Certificate (CRT file) you received from the Certification Authority.
   
   
   
   
4. Click Import.
5. In the SSL Certificates section, select the new certificate.
6. Click Set as Default (in the lower right corner).
7. Click Tasks > Restart Kerio Connect.
   
   
   

---

 

Install Intermediate Certificates (If Applicable)

If your Certification Authority provides additional files with a .crt extension, also known as intermediate certificates, you can install these certificates in Kerio Connect separately.

---

 

Examine the Installed SSL Certificates (Confirmation)

Follow these steps to check if the certificates were installed correctly: 

1. In a web browser, enter and run the URL for your domain: https://mail.[your domain].com
2. If you receive any warning messages regarding the installed certificates, it means that they were not installed correctly. 

Back to top