Follow these steps to enable SSL on a mail cluster using Xsan.
Note: These instructions supplement, but do not replace, the "Securing Mail Service with SSL" section of the Mail Service Administration guide.
- Configure mail server clustering using Xsan.
- Using Server Admin's Certificate Manager, import your SSL certificate on each server in the mail cluster.
When importing certificate files, verify that your user account can read each file that is imported.
- After the SSL certificate is installed on all servers in the mail cluster, you can enable SSL from any one of the servers in the cluster. Because the mail service configuration is shared between all members of the cluster, you only need to enable SSL once.
For more details, refer to the Mail Service Administration guide.
When importing a private key file, you may be prompted for a passphrase. If you do not know the passphrase, it may be possible to obtain it on the server where the certificate was first used. Open the Keychain Access utility, select the "System" keychain, double-click the "Mac OS X Server certificate management" password whose account name matches the hexadecimal number in your certificate's file name, then click "show password", and authenticate as the admin user.