--- title: How do I enable and configure SSL & TLS for SMTP, POP3, and IMAP in MDaemon description: This article details how to enable SSL/TLS for the SMTP, POP3, and IMAP protocols in MDaemon. --- [Skip to content](https://knowledge.mdaemon.com/how-to-enable-configure-ssl-tls-for-smtp-pop3-imap-in-mdaemon#main-content) [![](https://knowledge.mdaemon.com/hs-fs/hubfs/MDaemon-Technologies_logo.png?width=200&height=150&name=MDaemon-Technologies_logo.png)](https://mdaemon.com/) - [Knowledge Base Home](https://knowledge.mdaemon.com/) - [Go to www.mdaemon.com](https://mdaemon.com/) Open main navigation Close main navigation - [Knowledge Base Home](https://knowledge.mdaemon.com/) - [Go to www.mdaemon.com](https://mdaemon.com/) - [Contact Us](https://mdaemon.com/pages/contact-us) [Contact Us](https://mdaemon.com/pages/contact-us) Knowledge Base - There are no suggestions because the search field is empty. 1. [Knowledge Base Home](https://knowledge.mdaemon.com/?hsLang=en) 2. [MDaemon Email Server](https://knowledge.mdaemon.com/mdaemon-email-server?hsLang=en) # How do I enable and configure SSL & TLS for SMTP, POP3, and IMAP in MDaemon ## This article details how to enable SSL/TLS for the SMTP, POP3, and IMAP protocols in MDaemon. Please Note: - MDaemon features the ability to generate and install valid certificates from Let's Encrypt at no cost. [How do I get a free SSL certificate from Let's Encrypt?](https://knowledge.mdaemon.com/how-to-generate-a-free-ssl-certificate-using-lets-encrypt?hsLang=en) - MDaemon does not handle the generation or installation of third-party SSL certificates.  See the link below for information on using the Windows Certreq command to generate certificate signing requests and installing them in the Windows server once generated. [How do I create a CSR and import a third-party SSL certificate for MDaemon using Certreq?](https://knowledge.mdaemon.com/how-to-create-a-csr-and-import-a-third-party-ssl-certificate-for-mdaemon-using-certreq?hsLang=en) - MDaemon can generate a self signed certificate to be used (See below).  Self signed certificates are untrusted and will generate security warnings from clients connecting over SSL.   This article will assume there is not a SSL certificate installed on the Windows server, and will be using a self-signed certificate. In the MDaemon console:  1. Click the **Security** menu 2. Click **Security Manager/Settings** 3. Click **SSL & TLS** 4. Select **MDaemon** ![enable and configure SSL & TLS for SMTP, POP3, and IMAP in MDaemon email server](https://knowledge.mdaemon.com/hs-fs/hubfs/KB%20Screenshots/ssl-tls_mdaemon.png?width=688&name=ssl-tls_mdaemon.png) 5. Click **Enable SSL, STARTTLS, and STLS** 6. Click **Enable the dedicated SSL ports for SMTP, IMAP, POP3 servers**  This will enable the dedicated ports specified in the Server Setting menu. This will not affect clients using STARTTLS and STLS on the default mail ports. 7. Click **SMTP server sends mail using STARTTLS when possible** This will enable MDaemon to use the STARTTLS extension for every SMTP message it sends if the server supports STARTTLS. 8. Click **SMTP server requires STARTTLS on MSA port** Enable this option if you wish to require STARTTLS for connections to the server made on the MSA port. 9. Click **DomainPOP/MultiPOP servers use STLS whenever possible**  If the DomainPOP and/or MultiPOP protocols are being used.  This will enable the STLS extension whenever possible for DomainPOP/MultiPOP connections. To generate a self-signed certificate in MDaemon: 1. Select **Create Certificate** ![ssl self signed certificate creation window in mdaemon email server software](https://knowledge.mdaemon.com/hs-fs/hubfs/KB%20Screenshots/webmail_ssl-https_create.png?width=434&name=webmail_ssl-https_create.png) 2. Type your Fully Qualified Domain Name (FQDN) within the **Host name field** 3. Type your **Organization/Company Name**  If you have alternate host names, type them within the Alternative host names field separated by a comma 4. Select the **Encryption key length **(default is 2048) 5. Select the **Country/Region** your server resides in 6. Click **Create certificate** 7. Click** OK. ** This will restart the SMTP, POP, and IMAP services. Note: If you are using a third party certificate, follow the instructions given by the provider to install it using the Microsoft Management Console (MMC) or other means. Once installed, you may omit the steps listed to generate a self signed certificate. Instead, single click the certificate you wish to use and click Ok.  Note: The request and installation of third party SSL certificates is NOT supported by MDaemon Technologies Technical Support staff, and those who choose to use a third party certificate should be aware of all security issues related to installing and using SSL certificates with their Operating System. If you have questions or issues regarding your third party SSL certificate, please contact the vendor from whom you purchased the certificate.   - [MDaemon Email Server](https://knowledge.mdaemon.com/mdaemon-email-server?hsLang=en#main-content) - [Mobile Device Management](https://knowledge.mdaemon.com/mdaemon-email-server?hsLang=en#mobile-device-management) - [MDaemon AntiVirus (SecurityPlus)](https://knowledge.mdaemon.com/mdaemon-antivirus-securityplus?hsLang=en) - [ActiveSync for MDaemon](https://knowledge.mdaemon.com/activesync-for-mdaemon?hsLang=en) - [MDaemon Connector for Outlook (Outlook Connector)](https://knowledge.mdaemon.com/mdaemon-connector-for-outlook-outlook-connector?hsLang=en) - [SecurityGateway for Email Servers](https://knowledge.mdaemon.com/securitygateway-for-email-servers?hsLang=en) - [RelayFax Network Software](https://knowledge.mdaemon.com/relayfax-network-software?hsLang=en) [![Chill listening crop-3](https://knowledge.mdaemon.com/hs-fs/hubfs/belch.io/template-assets/MDaemon-Technologies_logo.png?width=199&height=41&name=MDaemon-Technologies_logo.png "Chill listening crop-3")](https://www.mdaemon.com) [Knowledge Base Home](https://knowledge.mdaemon.com?hsLang=en) Copyright © 2025, MDaemon Technologies