PowerProtect Data Manager 19.17 for Cyber Recovery User Guide

PDF

Mail server certificates

For configurations with Transport Layer Security (TLS) enabled, mail server certificates provide an added level of security to your email messages.

If TLS is enabled, you must use a mail server certificate to be able to send email messages. If you choose to disable TLS, a mail server certificate is not required.

NOTE:Disabling TLS is not recommended.

The Cyber Recovery software retrieves the mail server certificate from the mail server that you identify when you configure mail settings. The Mail Settings window enables you to view and manage the mail server certificate that is in use. Options enable you to:

  • View the current mail server certificate information and determine specified field values
  • Verify the mail server certificate that is available from the specified mail server and then add it to your configuration
  • Renew a mail server certificate that is about to expire

If the mail server certificate is missing after an update, the Cyber Recovery software generates an alert and displays a red banner in the Cyber Recovery UI. You must then configure the mail settings to add it.

The behavior for a first-time software installation and a software update differs:

  • When you perform a fresh Cyber Recovery software installation, TLS is enabled by default. From the Mail Settings window, you must verify and accept the mail server certificate to add it to your configuration.
  • When you update your Cyber Recovery deployment that has TLS enabled, at login, a critical banner in the Cyber Recovery UI indicates that the mail server certificate is missing. Click the link in the banner to go to the Mail Settings window so that you can add the mail server certificate. The Cyber Recovery software also generates a critical alert, which is displayed every seven days until you add the mail server certificate.
    NOTE:After an update, you can continue to send email messages without a mail server certificate. The software continues to display the critical banner and generated the critical alert until you add a certificate,

When a mail server certificate is about to expire:

  • At 30 days before the mail server certificate expires, you receive a warning alert every seven days until you add a valid mail server certificate.
  • At three days before the mail server certificate expires, you receive a critical alert.
  • At 24 hours before the mail server certificate expires, you receive a critical alert.
NOTE:If you restart the Cyber Recovery services, the software resets the counter for the alerts. For example, if you received a warning alert and then restart services, you receive another warning alert even if seven days have not passed. The counter is reset to generate an alert every seven days.

When the certificate expires, you receive a final critical alert. You can no longer send email messages.

NOTE: If a certificate chain is used, the expiration of the root or intermediate certificate generates an alert. However, if only a leaf certificate is used and there is no intermediate certificate, then an alert is generated when the leaf certificate expires.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\