Answer

PROBLEM

ENVIRONMENT

• GFI MailEssentials
• all supported environments

SOLUTION

1. Open Microsoft Internet Information Services (IIS) Manager
2. Click the Server
3. In the left pane, click Server Certificates under IIS
4. Create a new certificate, or attach to an existing certificate

1. Open Internet Information Services (IIS) Manager
2. Expand the Server > Sites
3. Right Click the Default Web Site (Which is hosting the MailEssentials website by default) and select Edit Bindings
4. Ensure that the https binding is created
   • If not click on the Add... button and add a new https type binding. Click OK to create the binding.

1. Open Internet Information Services (IIS) Manager
2. Expand the Server > Sites > Default Web Site
3. Click the MailEssentials node.
4. In the left pane, click SSL Settings under IIS
5. Tick the options Require SSL and Require 128-bit SSL

1. Open the Microsoft Internet Information Services (IIS) Manager
2. Browse to Websites
3. Right click the website used by GFI MailEssentials and select Properties. By default, the Default Web Site is used.
4. From the Directory Security tab select Server Certificate
5. Follow the IIS certificate wizard to create a new certificate, or attach to an existing certificate
6. Click OK to close the Default Web Site properties
7. Under Default Web Site select the MailEssentials virtual directory
8. Right click and select Properties
9. Select the Directory Security tab and in the Secure Communications section click Edit
10. Check Require secure channel (SSL) and Require 128-bit encryption
11. Ensure that in the Client Certificates section, Ignore client certificates is selected
12. Click OK to close the Secure Communications window
13. Click OK to close the MailSecurity virtual Directory Properties

Notes:

Ensure that the HTTP SSL service is running. By default, the startup type for this service is set to manual. From the properties of the services, change the startup type to automatic and start the service

CAUSE