Service URL

URL under which the connection to the certification authority is established. The default is the URL with the Network Device Enrolment (NDES) name of the SEPPmail Secure E-Mail Gateway for Microsoft Enterprise CA:

http://localhost:10000/certsrv/mscep/mscep.dll

Challenge password

Password for transmitting a request to the external CA.

Encryption certificate

This function is used to integrate the certificate for signing the requests to the external certification authority (RA certificate). This RA certificate is usually issued explicitly by the external certification authority for the MPKI connection of the SEPPmail Secure E-Mail Gateway.

CA certificate

At this point, the root certificate of the certification authority to be externally connected is provided.

Automatically renew expiring certificates if validity days left less than

This option is inactive by default and pre-set to 30.

Initiates the automatic renewal of certificates of active users (Users) if the remaining validity period is the set value. One pre-condition in this respect is that the corresponding user sends an email within the set overlap time. This prevents certificates from being obtained for "corpses" in the Users menu, including certificates subject to a fee, if applicable. The thus initiated process runs overnight (!).

Automatically create certificates for active users without certificates

By default, this option is inactive.

This function obtains a certificate for all existing active Users, who are not in possession of a valid (!) certificate, automatically overnight (!).

Active Users are users who have sent an email in the last 30 days and do not have the State inactive.