Server Certificates

The Server Certificates tab displays a list of the certificates used within IceWarp Server. The [Default] certificate, displayed as the first in list, is an integrated SSL certificate that is shipped with IceWarp Server. You cannot delete or edit this default certificate.

server_certificates

Button	Description
Add	Click the button to assign an SSL certificate to its specific IP address. The Certificates dialog opens.
Edit	Select a certificate and click the button to edit this certificate. The Certificates dialog opens.
Delete	Select a certificate and click the button to remove this certificate.
Set New Default Certificate	Click the button to browse for a new server certificate that will be set as the default one.
Create CSR / Server Certificate	Click the button to create an SSL certificate for your server. The certificate .pem file will be saved to the IceWarp Server config directory. The Digital Certificate dialog opens.

certificates_dialog

Field	Description
IP Address	Enter the IP address that is associated with your SSL certificate.
Certificate	Enter the fully qualified path to the .pem certificate file or use the '...' button to browse to its location.

create_csr_dialog

The certificate is designed to re-assure anyone connecting to your server that you are who you say you are, so the more accurate and complete the information in the certificate, the more comfortable your users will feel.

Field	Description
Bits	Required. Specify the number of bits to be used for the encryption of this certificate.
Certificate validity (Days):	Required. Specify the number of days this certificate is valid for.
Country	Optional. The two letter country code associated with your organization. EN – England US – USA CY – Cyprus etc.
State	Optional. Use this for the country or state associated with your organization.
City	Optional. The city associated with your organization.
Organization	Optional. Your company name.
Organization unit	Optional. Your company's office reference (useful if you have multiple servers).
Email	Optional. The email address associated with your organization.
Common name	Enter the fully qualified domain name here of the domain that you require a certificate for.
Create Certificate Signature Request (CSR)	Check this option to create a file that can be used to request a certificate from an issuing authority.

NOTE: If you are using the Certificate Signature Request option to create a file for an issuing authority, you should ONLY send your public key file to the CA.

Press the OK button to create the certificate, confirmation is displayed.