Secure Email Server (SES) Admin Guide A S C E RT I A L TD J ANUARY 202 1 Document Version - 6.8 . 0 . 1 © Ascertia Limited. All rights reserved. This document contains commercial-in-confidence material. It must not be disclosed to any third party without the written authority of Ascertia Limited. Commercial-in-Confidence Secure Email Server (SES) – Admin Guide CONTENTS 1 INTRODUCTION .................................................................................................................................................... 4 1.1 SCOPE ............................................................................................................................................................. 4 1.2 INTENDED READERSHIP....................................................................................................................................... 4 1.3 CONVENTIONS .................................................................................................................................................. 4 1.4 TECHNICAL SUPPORT ......................................................................................................................................... 4 2 CONCEPTS & ARCHITECTURE ............................................................................................................................... 5 2.1 INTRODUCTION ................................................................................................................................................. 5 2.2 FEATURE & BENEFITS ......................................................................................................................................... 5 2.3 ARCHITECTURE ................................................................................................................................................. 6 2.4 DEPLOYMENT SCENARIOS ................................................................................................................................... 7 3 SYSTEM REQUIREMENTS .................................................................................................................................... 12 4 INSTALLATION .................................................................................................................................................... 13 4.1 INSTALLATION INSTRUCTIONS ............................................................................................................................ 13 4.2 UNINSTALL INSTRUCTIONS ................................................................................................................................ 13 5 APACHE JAMES CONFIGURATIONS .................................................................................................................... 14 5.1 DNS CONFIGURATION ..................................................................................................................................... 14 5.2 POP3 SERVER ................................................................................................................................................ 14 5.3 SMTP SERVER ............................................................................................................................................... 15 5.4 AUTHENTICATED SMTP (SMTP AUTH) .............................................................................................................. 15 5.5 SERVER WIDE CONFIGURATIONS ........................................................................................................................ 16 5.6 REMOTE MANAGER ......................................................................................................................................... 16 5.7 SETTING UP ADMINISTRATOR ACCOUNT .............................................................................................................. 17 5.8 CONFIGURING SES SERVER TO RELAY OUTGOING EMAILS ....................................................................................... 17 5.9 CONFIGURING SES SERVER TO RELAY INCOMING EMAILS ........................................................................................ 18 6 SECURE EMAIL SERVER CONFIGURATIONS........................................................................................................ 20 6.1 SAMPLE PROFILES ........................................................................................................................................... 20 6.2 RUNNING THE SAMPLE PROFILES ........................................................................................................................ 21 6.3 PROFILE CONFIGURATIONS ................................................................................................................................ 21 7 RUNNING SES OVER TLS USING CLIENT AUTHENTICATION .............................................................................. 30 8 UPGRADING SES ................................................................................................................................................. 31 © Ascertia Limited Commercial-in-Confidence Page 2 of 31 Secure Email Server (SES) – Admin Guide FIGURES FIGURE 1 - SES ARCHITECTURE ............................................................................................................................................. 7 FIGURE 2 - DEPLOYMENT SCENARIO ....................................................................................................................................... 8 FIGURE 3 - OUTGOING EMAIL & ATTACHMENT SIGNING ............................................................................................................ 9 FIGURE 4 - VERIFICATION OF INCOMING/OUTGOING SIGNED EMAILS/ATTACHMENTS .................................................................... 10 TABLES TABLE 1 - SYSTEM REQUIREMENTS ....................................................................................................................................... 12 TABLE 2 - GENERAL SETTINGS ............................................................................................................................................. 22 TABLE 3 - SIGNING SERVICE ADDRESS SETTINGS ...................................................................................................................... 22 TABLE 4 - VERIFICATION SERVICE ADDRESS SETTINGS............................................................................................................... 23 TABLE 5 - PROXY SETTINGS ................................................................................................................................................. 24 TABLE 6 - TLS SETTINGS .................................................................................................................................................... 24 TABLE 7 - SIGN WORKFLOW SETTINGS .................................................................................................................................. 28 TABLE 8 - VERIFY WORKFLOW SETTINGS ............................................................................................................................... 29 © Ascertia Limited Commercial-in-Confidence Page 3 of 31 Secure Email Server (SES) – Admin Guide 1 Introduction 1.1 Scope This manual describes how to install and configure the Ascertia Secure Email Server (SES) software. 1.2 Intended Readership This manual is intended for Secure Email Server Administrators responsible for its installation and configuration. It is assumed that the reader has a basic knowledge of standard email protocols, PKI and IT security. 1.3 Conventions The following typographical conventions are used in this guide to help locate and identify information: • Bold text identifies menu names, menu options, items you can click on the screen, file names, folder names, and keyboard keys. • Courier font identifies code and text that appears on the command line. • Bold courier identifies commands that you are required to type in. 1.4 Technical Support If Technical Support is required, Ascertia has a dedicated support team providing debugging assistance, integration assistance and general customer support. Ascertia Support can be accessed in the following ways: Website https://www.ascertia.com Email [email protected] Knowledge Base https://www.ascertia.com/products/knowledge-base/adss-server/ FAQs http://faqs.ascertia.com/display/ADSS/ADSS+Server+FAQs In addition to the free support service describe above, Ascertia provides formal support agreements with all product sales. Please contact [email protected] for more details. A Product Support Questionnaire should be completed to provide Ascertia Support with further information about your system environment. When requesting help it is always important to confirm: • System Platform details; • SES and ADSS Server version numbers and build date; • Details of the specific issue and the relevant steps taken to reproduce it; • ADSS Server Database version and patch level; • The product log files. © Ascertia Limited Commercial-in-Confidence Page 4 of 31 Secure Email Server (SES) – Admin Guide 2 Concepts & Architecture 2.1 Introduction Today email is one of the most popular applications on the Internet. This position has been earned because of its clear business benefits. However for several years, there has been a dramatic rise in email fraud and phishing, so much so that the "From:" field in an email message or the message content itself can no longer be trusted as a face value. It is easy to