How Do I Obtain and Import the Email OTP Certificates?

Question

Multi-factor authentication is controlled by the Email OTP certificates. Users must obtain the Email OTP CA client and server certificates, and import the client CA certificate to the storage system and the server certificate to the SMTP server. How do I obtain and import the Email OTP certificates?

Answer

1. Obtain the client CA certificate and server certificate using either of the following methods:
   • Download the client CA certificate from the third-party CA center. After it is signed, export the server certificate.
   • Obtain the CA certificates using the certificate management software. The following uses OpenSSL as an example. For details on how to use OpenSSL, refer to its documentation.
     1. Run the openssl command to generate the self-signed client CA certificate.
     2. Run the openssl command to generate the server certificate using the client CA.

2. Import the self-signed root CA certificate of the client to the storage system.
   1. Log in to DeviceManager.
   2. Choose Settings > Certificate Management.
   3. Select Email OTP certificate and click Import Certificate.
   4. Import the CA certificate file and click OK.

3. Import the server certificate to the SMTP server.

   The following uses the hMailServer as an example.

   1. Log in to the hMailServer.
   2. Choose Settings > Advanced > SSL certificates.
   3. Click Add and import the certificate.
   4. Click Save.

   5. Choose Settings > Advanced > TCP/IP ports.
   6. Select the port of the mail server, set Connection security to SSL/TLS, and select the imported certificate in SSL Certificate.

   7. Click Save.