Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring System Settings > Managing Transport Layer Security (TLS) certificates
Managing Transport Layer Security (TLS) certificates
Administrator Help | Forcepoint Email Security | Version 8.4.x
Transport Layer Security (TLS) is a protocol that provides an extra layer of security for email communications. Use of this protocol helps prevent devices such as non-trusted routers from allowing a third party to monitor or alter the communications between a server and client. The email security system can receive messages transferred over TLS and can also send messages via this protocol to particular domains.
A default TLS certificate is supplied with Forcepoint Email Security for incoming connections. The email system presents this certificate during TLS communications.
After email product installation, default TLS certificate information appears in the Settings > Inbound/Outbound > TLS Certificate page, in the TLS Certificate for Incoming Connection section. Details include the certificate version, serial number, issuer, and expiration date.
You can generate a new certificate when that default one expires. On the Settings > Inbound/Outbound > TLS Certificate page, click Generate to create the new certificate. You should note that generating a new certificate overwrites any certificate that currently exists.
Import and export capabilities for TLS certificates are available.
You can also manage trusted Certificate Authority (CA) certificates for outgoing connections. Forcepoint Email Security uses CA-issued root and intermediate certificates (along with the default CA certificate bundle) to verify a server certificate presented by a third-party mail server during TLS communications.
A table on the TLS Certificate page displays information about the certificate, including common name, issuer, and expiration date. An import function lets you browse to the location of a trusted certificate and add it to the Trusted CA Certificate for Outgoing Connection table. A search function allows you to perform a keyword search of all your trusted CA certificates.
See the following sections for details on importing and exporting TLS and CA certificates:
*
Importing a TLS certificate
*
Exporting a TLS certificate
*
Importing a trusted CA certificate

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Configuring System Settings > Managing Transport Layer Security (TLS) certificates
Copyright 2017 Forcepoint. All rights reserved.