Service URL

Specifies the URL via which the MPKI is accessed.

QuoVadis Trustlink communicates the URL with the access data. As a rule, the URL is "https://tlconnector.quovadisglobal.com/<YourCompany>/<YourOrganisation>".

Static subject part

This part appears in the certificate of the corresponding user as an extension of the "Applicant" field and can be freely defined in the framework of a distinguished name - for example /C=[two-character country code]/OU=[organisation detail]/O=[organisation] - whereby the indication of the country code is mandatory.
 

Domain:

Specifies the email domains for which the following two parameters should be valid.

Only domains which were also named when the application was submitted to the certification body, or which were later validated separately, may be entered. Different domain names may result in certificates not being issued.

URL:

A service URLwhich may differ from the default parameter is provided by QuoVadis Trustlink with the access data.

Static subject part

See Section Default parameters Static subject part
 

PKCS12 identity file

Certificate for authentication vis-à-vis the certification authority (QuoVadis Trustlink).

This file is provided by QuoVadis and is provided with a password (see parameter PKCS12 password)

If the access to the certification authority is successful, the following message appears at this point:

an operator certificate with valid password has been found.

PKCS12 password

Password to activate the "private keys" contained in the PKCS12 identity file.

This is also provided by QuoVadis Trustlink.

SSL chain certificates

To ensure that the SEPPmail Secure E-Mail Gateway is able to supplement the certificate chain to the root certification authority (QuoVadis Trustlink) when signing emails, it must be made known. To do this, the certificate chain must be uploaded via a corresponding certificate file.
The display field below shows the uploaded intermediate certificates in text format.

QuoVadis Trustlink usually provides the certificate chain via a PEM file with the name "SSL_tlconnector_quovadisglobal_com_<jjjjmmdd>.pem"

.

Automatically renew expiring certificates if validity days left less than

This option is inactive by default and pre-set to 30.

Initiates the automatic renewal of certificates of active users (Users) if the remaining validity period is the set value. One pre-condition in this respect is that the corresponding user sends an email within the set overlap time. This prevents certificates from being obtained for "corpses" in the Users menu, including certificates subject to a fee, if applicable. The thus initiated process runs overnight (!).

Automatically create certificates for active users without certificates

By default, this option is inactive.

This function obtains a certificate for all existing active Users, who are not in possession of a valid (!) certificate, automatically overnight (!).

Active Users are users who have sent an email in the last 30 days and do not have the State inactive.

Chain certificates (needed to sign emails)

By clicking on Add or update..., the intermediate certificates under X.509 Root Certificates required for supplementing the certificate chain when signing are added/updated.