Process

You need access to Kerio Connect Webadmin and server for this procedure.

Make sure you have the IIS role enabled in Windows and bind only the HTTP of your Kerio Connect internet hostname on port 80.
Login to Kerio Administration, navigate to Configuration > Services, and set the HTTP service startup to manual and stop the service.
Kerio Connect will use port 443.
Download Win-acme and run wacs.exe.
Choose the necessary options, as shown below.

There are other possible methods, but they are not covered in this article.
On the specified location, you will get three files:
- Hostname-chain.pem
- Hostname-crt.pem
- Hostname-key.pem
Open Kerio Connect Webadmin and navigate to Configuration > SSL Certificates. Click Import > Import a New certificate and select the cert and key files.