Use the SSL Settings page to define the server certificate used by the WebAccess Agent for Secure Socket Layer (SSL) connections.
Certificate File
Select the server certificate file for the Internet Agent to use. The certificate
file must be in Base64/PEM or PFX format. If you enter the filename rather than
using the Browse button to select it, use the full path if the file is not in
the same directory as the WebAccess Agent program.
GroupWise® includes the GroupWise Certificate Signing Request utility (GWCSRGEN) that lets you generate a certificate signing request (CSR) file and a key file. After you have the CSR file, you can submit it to a Certificate Authority to receive a server certificate file. On NetWare® and Windows*, the utility is located in the admin/utility/gwcsrgen directory on the GroupWise DVD or in the GroupWise software distribution directory. On Linux*, the utility is located in the /opt/novell/groupwise/agents/bin directory after you install the agents.
SSL Key File
Select the key file associated with the certificate. If the private key is included
in the certificate file rather than in a separate key file, leave this field
blank. If you enter the filename rather than using the Browse button to select
it, use the full path if the file is not in the same directory as the WebAccess
Agent program.
Set Password
Click Set Password to specify the password for the key. If the key does not
require a password, do not use this option.
Enable SSL For
The Internet Agent can be configured to use SSL for the following connections:
HTTP
Select this option to enable the WebAccess Agent to use a secure connection for the WebAccess Agent Web console. The Web browser must also be enabled to use SSL; if it is not, a non-secure connection will be used.Client/Server
Select this option to enable the WebAccess Agent to use a secure connection to post offices. This also requires the following:
- The WebAccess Agent must be configured to use a client/server connection to the post office (Post Office Links tab > Settings page).
- The post office must be configured to support client/server connections (Post Office object > GroupWise tab > Post Office Settings page > Access Mode setting).
- The post office's Post Office Agent (POA) must be enabled for SSL (POA object > GroupWise tab > SSL Settings).
If the WebAccess Agent cannot establish a secure connection, it uses a non-secure connection.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For more information, see Legal Notices.