PowerProtect Data Manager 19.16 for Cyber Recovery User Guide

Enabling TLS on Postfix

Enable TLS on Postfix for incoming and outgoing connections.

If you do not have a self-signed certificate to use for the Postfix service, generate a self-signed certificate by using the openssl command:
```
openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 -out cert.pem
```
Ensure that you save the key.pem and the cert.pem files in a secure location.
To enable TLS for incoming connections, add the following lines to the /etc/postfix/main.cf file:
```
smtpd_tls_security_level = encrypt
smtpd_tls_cert_file = cert.pem
smtpd_tls_key_file = $smtp_tls_cert_file
```
The incoming connections are from the Cyber Recovery notifications container to the relay server.
To enable TLS for outgoing connections, add the following lines to the /etc/postfix/main.cf file:
```
smtp_tls_security_level = encrypt
smtp_tls_cert_file = cert.pem
smtp_tls_key_file = $smtp_tls_cert_file
```
The outgoing connections are from the relay server to the relay host (which you set in step 2c that is shown in Configuring the Postfix email service).
Reload the Postfix configuration file:
```
# postfix reload
```
Stop and start Postfix:
```
# postfix stop
# postfix start
```
Optionally, check the Postfix status:
```
# postfix status
```