Overview
If your Certification Authority (CA) provides additional files with a .crt extension, also known as intermediate certificates, you can install them into Kerio Connect separately from the main SSL certificate. The necessary .crt file can be inserted into sslca folder.
It might be useful to follow the instructions below if the current SSL certificate expired and the renewed one has an Intermediate type.
Solution
The intermediate certificate files may have been installed when the certificates were first purchased. Please check the location mentioned in step 2 to determine if the same files are already present.
- Stop the Kerio Connect server.
- Copy the intermediate certificate sent by the CA into the
sslca
folder. The default locations are:- Windows:
C:\Program files\Kerio\MailServer\sslca
- macOS:
/usr/local/kerio/mailserver/sslca
- Linux:
/opt/kerio/mailserver/sslca
- Windows:
- Start the Kerio Connect server.
- Examine the installed SSL Certificate to see if it is installed correctly.
- In a web browser, enter the URL for your domain:
https://mail.[your domain].com
- If you encounter any warning messages regarding the certificate, the certificate was not installed correctly. If the certificate cannot be installed, reach out to your CA.
- In a web browser, enter the URL for your domain:
Related Articles
Importing Renewed SSL Certificates in Kerio Connect
Creating Self-Signed Certificates for Kerio Connect