PKI

Certificates

Tip

Certificates are used for protecting the relay messages sent from the CipherMail gateway to Webmail Messenger. This is only required if Webmail Messenger is configured in “add on” mode. If Webmail Messenger is configured in “stand alone” mode, the certificates store should not be used.

The “Intermediate and user certificates” stores all the end-user and intermediate certificates. Webmail Messenger only uses the “Intermediate and user certificates” store for storing the Webmail relay signing and encryption certificates.

Note

The Webmail Messenger setup wizards will generate self-signed certificates for the protected connection between the CipherMail gateway and Webmail Messenger. Do not delete these certificates unless you have a good reason to do so.

Roots

If the relay signing and encryption certificates should be issued by a root, and not self-signed, the root certificate should be stored in the Roots store.

Tip

The Webmail Messenger setup wizards will generate self-signed certificates for the protected connection between the CipherMail gateway and Webmail Messenger. In most setups it is therefore not needed to import certificates into the root store.

CRLs

The CRL store stores all the downloaded CRLs. In most setups self signed certificates are used. It is therefore not need to import any CRLs.