Start a conversation

Configuring Autodiscover in Kerio Connect

Overview

Autodiscover simplifies the configuration of desktop applications and mobile devices that support communication using Microsoft Exchange or other web-based protocols (like Exchange ActiveSync). Applications use this feature to obtain parameters associated with the account. This allows users to set up the account with only an email address and password without needing to insert additional mail server information.

Here are the applications that support Autodiscover:

  • Kerio Connect Client desktop application
  • Microsoft Outlook
  • macOS applications (Apple Mail)
  • Most mobile devices implementing Exchange ActiveSync (iOS, Android devices)

Prerequisites


Your configuration must meet the following requirements for proper work of the Autodiscover process:

  • Secure connectivity (HTTPS) to your Kerio Connect server is accessible from the internet. For more information, refer to the Securing Kerio Connect article.
  • Your Kerio Connect server's SSL certificate is signed by a trusted certificate authority (CA) such as  InstantSSL or RapidSSL or even Let's Encrypt. For more information, refer to the Configuring SSL certificates in Kerio Connect article.
  • All web servers that are accessible via HTTPS, when connecting to the root level of your domain (e.g., example.com), must provide an SSL certificate that is signed by a trusted CA and matches with the root domain name. You can use online tools such as SSL Shopper to test the accessibility and validity of your server's SSL certificate.
  • You do not have a CNAME or any host record for your domain that resolves autodiscover.
  • The Internet hostname of your Kerio Connect server matches the name on your SSL certificate. 
  • All users in Kerio Connect have a full name assigned to their account (the full name must not be empty).
  • Your DNS hosting provider supports SRV (Service Record) configuration. 

Process

  1. Make sure you meet the above requirements before proceeding to the configuration.
  2. Add a Service Record (SRV) to your domain's DNS using the following parameters and values:
    Parameter
    Value
    Service
    _autodiscover
    Protocol
    _tcp
    Name (your email domain name)
    example.com
    Priority
    0
    Weight
    5
    Port
    443
    Target (your Kerio Connect server's Internet hostname)
    mail.example.com


    Here is a sample configuration using
    the Cloudflare DNS manager:

    autodiscover-srv.png

  3. Add a CNAME to your domain's DNS using the following parameters and values:
    Parameter
    Value
    Name
    autodiscover
    Alias to:
    mail


    (TTL = 1800)
    Here is a sample configuration in dnsmadeeasy:

    mceclip3.png

Back to top

Additional Information

  • You can verify your Autodiscover configuration using the Microsoft Exchange ActiveSync testing tool.
  • You can also enable automatic configuration for instant messaging applications that use XMPP (Extensible Messaging and Presence Protocol).
  • Autodiscover uses several methods to locate the responsible server for an email address. Refer to the Microsoft Documentation for full details.
  • After locating the responsible server for an email address, the application opens a secure connection to the mail server to download an XML file containing the connection parameters for the mailbox account.

Summary

By adding a correct SRV record (plus optional CNAME), and ensuring your SSL and DNS setup is consistent, you allow mail clients to automatically discover and configure Kerio Connect account settings. This simplifies user experience and reduces configuration errors.

FAQ

Q1: What if my DNS provider doesn’t support SRV records?
Then Autodiscover may not work reliably. Some clients may fall back to trying autodiscover.domain.com or user interaction, but full automation may not succeed. Consider using a DNS provider that supports SRV records.

Q2: Can I skip the CNAME and rely only on SRV?
The CNAME is required in order to make sure that the autodiscover.domain.com resolves to the correct domain/server.

Q3: Can I pass in just my username when logging into a ActiveSync client against a mailserver with Autodiscover?

No, you need to insert your full email address for the Autodiscover feature to work; this is necessary in both single and multi-domain servers.

Back to top

Choose files or drag and drop files
Was this article helpful?
Yes
No
  1. Priyanka Bhotika

  2. Posted
  3. Updated

Comments