How do I renew an expired SSL certificate?

You have renewed your expired certificate with your certificate provider, and a .crt file has arrived in your email. You need to import it into KMS.

  1. In the KMS Administration console, look in Configuration > SSL Certificates. Get the certificate name of the active certificate (Example: server, server1, server2, etc.)
  2. On the operating system of KMS, go to the SSL certificate folder for the mailserver. Default locations:
  • Windows: C:\Program Files\Kerio\Mailserver\sslcert
  • Linux: /opt/kerio/mailserver/sslcert (you must be root)
  • Mac OS: /usr/local/kerio/mailserver/sslcert (you must be root)
  1. Stop Kerio MailServer.
  2. In this folder, you will see files with names like server.crt, server1.crt, etc. Find the name which matches the name from step 1 above. Make a backup of the .crt file with your active certificate name.
  3. Copy the new crt file over it and give it the same name as the file from the previous step.
  4. Start Kerio MailServer.
  5. If all goes well, your certificate should now be updated.
  6. If there are any problems, stop Kerio MailServer, put the original certificate back in the sslcert folder, and start Kerio MailServer. Then perform the steps to re-issue your SSL certificate.
  • 1 Users Found This Useful
Was this answer helpful?

Related Articles

Configuring SSL certificates in Kerio Connect

To secure Kerio Connect by SSL/TLS encryption, you need an SSL certificate. SSL certificates...

Adding trusted root certificates to the server

If you want to send or receive messages signed by root authorities and these authorities are...

How do I configure OS X to use my self-signed SSL certificate?

Learn to configure OS X to use your self-signed SSL certificate with Entourage, Safari and...

How do I import a private key which is protected by a pass phrase?

When generating a certificate request, some key generation applications will create a pass...

How do I re-issue my SSL certificate?

You need to re-issue an SSL certificate, perhaps because it was not possible to renew with a new...