Transferring a signed SSL certificate from Internet Information Server into Kerio Connect

Transferring a signed SSL certificateSSL certificates are used to authenticate an identity on a server. from Internet Information Server into Kerio Connect

Export the private key from IIS

1. Open the Internet Information Services administration console located in the Control Panel > Administrative Tools.
2. Select the properties of your website.
3. Select the Directory Security tab
4. Select the button 'View Certificate'.
5. Select the Details tab.
6. Choose the 'Copy to file' button.
7. Choose 'Yes export the private key'.
8. The key will be generated using Personal Information Exchange PKCS#12(.pfx).
9. Specify and confirm a password.
10. Specify a name and save the file to the local disk. In this document we will use the example name example.pfx.

Export the certificate from IIS

1. Refer to the Internet Information Services administration console located in the Control Panel > Administrative tools.
2. Select the properties of your website.
3. Select the Directory Security tab.
4. Choose to 'View Certificate'.
5. Select the Details tab.
6. Choose the 'Copy to file' button.
7. Choose 'No, do not export the private key'.
8. Specify to export the certificate in base-64 encoded X.509 (.CER).
9. Specify a name and save the file to the local disk. In this document we will use the example name example.cer
10. Once the file is created, rename the extension to .crt (e.g. example.crt), as this is the extension format used by Kerio MailServer.

Change the key format from PKCS#12 to RSA

1. Download the SSL Certificate Utility.
2. Extract the zip file to some location on the local hard drive. There are four necessary files: ssleay32.dll, libeay32.dll, openssl.cfg and openssl.exe.
3. Move the two files exported from IIS (example.crt and example.pfx) into the folder containing the extracted files.
4. Execute the file openssl.exe.
5. Type the following command: pkcs12 -in example.pfx -nocerts -out example.pem.
6. You will need to supply the password used when you created the Personal Information Exchange file during the export from IIS.
7. After supplying the password, you will then be asked to create and verify a "PEM pass phrase". You will need to supply this pass phrase in order to convert the "PEM file" to a KEY file. This pass phrase will be used only once, and is not relevant after the key file has been created.
8. At this point you will have a new file in the same directory called example.pem.
9. Type the following command: rsa -in example.pem -out example.key.
10. After entering the "PEM pass phrase", the example.key file will be generated. You will no longer need the "PEM pass phrase".

Import the certificate and key files into Kerio MailServer

1. Locate the /sslcert directory. The default location for each supported Operating System is provided below.

• OS X: /usr/local/kerio/mailserver
• Windows: C:/program files/kerio/mailserver
• Linux: /opt/kerio/mailserver

2. Copy the example.crt and example.key files into this directory.
3. Restart Kerio MailServer
4. Connect to Kerio MailServer using the Administration console and go to the Configuration > SSLSecure Sockets Layer - A protocol that ensures integral and secure communication between networks. Certificates dialog.
5. Select the new certificate and choose the option 'Set as active'.
6. Restart Kerio MailServer and the certificate and key should now be used by Kerio MailServer.