9.1 Configuring Email Servers

After you ensure each event destination computer in your Change Guardian environment hosts an email server, you can add each email server to Change Guardian.

9.1.1 Configure Email Servers to Change Guardian in FIPS Mode

To configure email servers to Change Guardian running in FIPS mode, perform the following steps.

To add email server to Change Guardian:

  1. Export the certificate from the respective SMTP server site.

  2. Browse to the Sentinel bin directory. The default location is /opt/novell/sentinel/bin.

  3. Import the certificate using the following command: convert_to_fips -i <certificate_path>.

  4. Restart the Change Guardian server using the following command: rcsentinel restart.

  5. Add new email configuration with STARTTLS protocol using Policy Editor.

  6. Create routing rules in Administration Console.

9.1.2 Configure Email Servers to Change Guardian in Non-FIPS Mode

To configure Email servers to Change Guardian running in non-FIPS mode, perform the following steps.

To add email server to Change Guardian:

  1. Export the certificate from the respective SMTP server site.

  2. Import the certificate using the following command: /opt/novell/sentinel/jre/bin/keytool -import -alias <appropriate_alias> -keystore /etc/opt/novell/sentinel/config/.activemqkeystore.jks -file <certificate_file_path> -storepass password.

    NOTE:If you have used a custom path for installation, modify the command accordingly.

  3. Restart the Change Guardian server using the following command: rcsentinel restart.

  4. Add new email configuration with STARTTLS protocol using Policy Editor.

  5. Create routing rules in Administration Console.

9.1.3 Adding Email Servers to Change Guardian

To add an email server to Change Guardian, perform the following steps.

To add the email server:

  1. In the Policy Editor, select Settings > Email Configuration.

  2. Under Email Servers, click Add.

  3. Specify the name and description of the email server you want to add.

  4. Specify values for the following fields:

      • SMTP Host. The fully qualified domain name of the email server computer.

      • SMTP Port. The remote SMTP port to use when communicating with the email server computer.

      • Secure. Specifies whether the connection to the SMTP computer must be a secure connection. If Yes, specify the protocol type.

        If you select No, the SMTP Port will be set to 25 by default.

        If you select Yes, the Protocol attribute is displayed.

      • From The return email address appearing on each email alert for this email server.

      • Authentication Required Specifies whether the email server requires SMTP authentication to send email. If Yes, specify the following:

        • User Name The user name to use when connecting to the SMTP server.

        • Password The password corresponding to the specified SMTP user name.

      • Protocol Specifies which protocol can be used for the email communication. You can select SSL or STARTTLS.

        NOTE:If you select SSL, the SMTP Port value must be set to 465.

        If you select STARTTLS, the SMTP Port value must be set to 587.