(new in 15.0)
Harica-specific sections in MPKI (Harica replaces the German Research Network / DFN)
Sections on this page:
Depending on the contract, the necessary settings have to be made here. These are provided by https://www.harica.gr/.
Parameters |
Description |
||
|---|---|---|---|
Specifies the URL that is to be accessed via the MPKI. Harica options are Development, Staging, Server. |
|||
Provided by Harica. The entry is checked for validity. |
|||
Provided by Harica, The entry is checked for validity. |
|||
Select your product. Options are S/MIME email-only, S/MIME IV, S/MIME OV, S/MIME IV+OV, see the Harica documentation for details.
|
|||
A given name and surname must always be specified in the request or (permitted for certain products) the pseudonym attribute can be used. As SEPPmail Secure E-Mail Gateway does not store the first name and surname separately in the database, the full name has to be split by using a regular expression. By default, the assumed schema is "Given Name Surname", so that the default regex "(?<GN>.+) (?<SN>.+)" would split this into gn="Given Name" sn="Surname".
|
|||
Provided by Harica.
|
Section Domain specific parameters (optional)
If the SEPPmail Secure E-Mail Gateway manages several email domains (Managed Domains), this option can be used to specify specific parameters for creating user certificates for each domain.
After saving the domain specific option via Save entries, another input field appears in each case.
Parameters |
Description |
|||
|---|---|---|---|---|
Specifies the email domains for which the following parameters should be valid.
|
||||
For the other fields, see the description under Default parameters.
Settings for the automatic renewal of certificates.
|
The validity period of the certificates of the individual users can be found in the file user-stats.csv which comes with the Daily Report (see also Groups statisticsadmin). This is especially helpful if no automatic renewal of certificates has been set. |
Parameters |
Description |
|||
|---|---|---|---|---|
|
This option is inactive by default and pre-set to 30. Initiates the automatic renewal of certificates of active users (Users) if the remaining validity period is the set value. One pre-condition in this respect is that the corresponding user sends an email within the set overlap time. This prevents certificates from being obtained for "corpses" in the Users menu, including certificates subject to a fee, if applicable. The thus initiated process runs overnight (!).
|
|||
|
By default, this option is inactive. This function obtains a certificate for all existing active Users, who are not in possession of a valid (!) certificate, automatically overnight (!).
Active Users are users who have sent an email in the last 30 days and do not have the State inactive.
|
|||
By clicking on Add or update..., the intermediate certificates under X.509 Root Certificates required for supplementing the certificate chain when signing are added/updated.
|
||||
The changes made are saved via the Save button.
