If you do not want to use a default SMTP client certificate provided with Safeguard for Privileged Passwords, you can enroll a certificate using a Certificate Signing Request (CSR) to replace the default SMTP client certificate. You can return to the default certificate later.
- Go to SMTP Certificate:
- web client: Navigate to Certificates | SMTP Certificate.
- desktop client: Navigate to Administrative Tools | Settings | Certificates | SMTP Certificate. The SMTP Certificate pane displays the following information for the SMTP certificates stored in the database.
- Click the Add Certificate button for the certificate to be replaced and select Create Certificate Signing Request (CSR).
- In the Certificate Signing Request dialog, enter the following information:
Subject (Distinguished Name): Enter the distinguished name of the person or entity to whom the certificate is being issued in the proper format like: cn=common name,ou=organizational unit,o=organization. Using the format example, cn=sam doe,ou=marketing,o=mycompany. Maximum length is 500 characters.
- Click Use Distinguished Name Creator to create the distinguished name based on your entries in Fully Qualified Domain Name (required), Department, Organization, City/Locality, State/County/Region, and Country.
- Subject Alternate Names (DNS): Optionally, enter the Data Source Name (DNS) name of the server that will be protected by this certificate. For example, this might be the DNS names of all of the appliances in the Safeguard for Privileged Passwords cluster.
If the DNS name changes, you must generate a new certificate.
- Subject Alternate Names (IP Address): Optionally, enter the IP addresses of the server that will be protected by this certificate. For example, this might be the IP addresses of all the appliances in the Safeguard for Privileged Passwords cluster.
If the IP address changes, you must generate a new certificate.
Key Size: Select the bit length of the private key pair. The bit length determines the security level of the SSL certificate. A larger key size is more secure but encryption is slower.
- 2048 (default)
Click OK then Save to save your selections and enroll the certificate. The certificate is listed in the SMTP Certificates pane.