Mail Server

You can configure the mail server to send the information to the specified email address.

Prerequisites

When a mail server is configured, ensure that the SMTP/POP3 function is enabled for sender accounts registered on the server.

Context

The proxy server supports only the SOCKS 5 proxy when you configure the basic information for the mail server.

The SOCKS protocol enables the client/server application programs in the TCP and UDP domains to conveniently and securely use the network firewall. The proxy server that uses the SOCKS protocol is called the SOCKS server and is a universal proxy server. The SOCKS proxy is usually used in the email and is bound to port 1080 on the proxy server. If the SOCKS proxy service requires identity authentication, you need to apply to the network administrator for a user name and password.

Procedure

Configure the basic information for the mail server.

Choose System > Notification Server > Email Server.
In the Email Server area, click .

Configure the basic information for the mail server, as described in Table 1.

**Table 1** Mail server parameters
Parameter	Description	Recommended Value
SMTP server	IP address or domain name of the SMTP server that is responsible for sending the notification mail.	-
Server port	Port number of the SMTP server.	Default value (Plain Cipher): 465. Default value (Plain): 25.
Connection mode	Plain Cipher Plain	NOTE: You are advised to select the secure Plain Cipher connections. Otherwise, security risks are caused.
Sender email	Email address that sends the notification mail messages.	The email address can contain only 1 to 32 characters.
Test email	Email address used to verify that the communication between the ATIC Management center server and mail server is normal.	The email address can contain only 1 to 32 characters.
Username	User name that is used to access the SMTP server. This parameter is required only when SMTP server identity authentication is selected.	You can enter the user name registered on the SMTP mail server or obtained from the provider of the mail server.
Password	Password that is used to access the SMTP server. This parameter is required only when SMTP server identity authentication is selected.	The passwords must meet the minimum complexity requirement. That is, the passwords must contain at least three of the following, including upper-case letters (A to Z), lower-case letters (a to z), digits (0 to 9), and special characters (such as !, #, $, and %). You must change the passwords periodically.
Proxy server IP address	IP address of the proxy server. This parameter is required only when Proxy server is selected.	-
Proxy server port	Port number of the proxy server. This parameter is required only when Proxy server is selected.	Default value: 1080.
Email Signature	-	-
SMTP = Simple Mail Transfer Protocol

After the parameters are specified, you can click Test to check whether the testing email box can receive the testing message.

If yes, the communication between the ATIC Management center server and the mail server is normal.
If no, an error message will be displayed. Handle the exception according to the message.

Click OK.

Configure the encryption protocol certificate of the mail server.
If the mail server sends emails in Plain Cipher mode, you need to configure the encryption protocol certificate first.

This step uses the Winmail Server as an example to describe how to configure an encryption protocol certificate.

This step assumes that the Winmail Server (version 6.3 or later) has been set up.
1. After the Winmail Server is set up, check whether each service is running and view the detailed information about the SSL/TLS certificate.
2. Import the mail server certificate.
  - Select the certificate import operation based on the OS in use.
  - software-installation-path\Runtime\jre6.0.18\lib\security\cacerts is the file path of the certificate store jre_truststore in the Windows operating system.
  - software-installation-path/engineering/jre/lib/security/cacerts is the file path of the certificate store jre_truststore in the Linux operating system.
  - Admin@123 is the initial password of jre_truststore in the Windows operating system.
  - changeit is the initial password of jre_truststore in the Linux operating system.
  - In the Windows operating system, copy the certificate to the software-installation-path\Runtime\jre6.0.18\lib\security\ directory and run the keytool command in the software-installation-path\Runtime\jre6.0.18\bin directory.
```
software-installation-path\Runtime\jre6.0.18\bin>keytool -import -alias mailcert -file "software-installation-path\Runtime\jre6.0.18\lib\security\lfgp000110811.crt" -keystore "software-installation-path\Runtime\jre6.0.18\lib\security\cacerts" -storepass Admin@123
```
    When the message "Trust this certificate? [no]:" is displayed, enter y or yes. When "Certificate was added to keystore" is displayed, the certificate is imported successfully.
  - In the Linux operating system, copy the certificate to the software-installation-path/engineering/jre/lib/security/ directory and run the keytool command in the software-installation-path/engineering/jre/bin directory.
```
lfgp000210059:cd software-installation-path/engineering/jre/bin
lfgp000210059:software-installation-path/engineering/jre/bin # ./keytool -import -alias mailcert -file "software-installation-path/engineering/jre/lib/security/lfgp000110811.crt" -keystore "software-installation-path/engineering/jre/lib/security/cacerts" -storepass changeit
```
    If the message Certificate was added to keystore is displayed, the certificate is imported successfully.
3. Send an email for testing.
  1. Choose System > Notification Server > Email Server.
  2. Configure basic information about the mail server, set the connection mode to Plain Cipher, and click Test. If the message "Succeeded in sending the short message, please check it." is displayed, the email sending test is successful.