Configuring SMTP Server settings

You can set up an SMTP server to enable alerts for EMS and endpoint events. When an alert is triggered, EMS sends an email notification to the configured email address(es).

To configure SMTP server settings:

1. Go to System Settings > SMTP Server.
2. Set the following options:

   Field		Value
   Server		Enter the SMTP server IP address or fully qualified domain name.
   Port		Enter the port number.
   Security		Select None, STARTTLS, or SMTPS for the security type, or select Auto Detect to automatically select the security type. If you select STARTTLS or SMTPS, the Username and Password fields become available.
   	Username	Enter the username.
   	Password	Enter the password.
   Email Size		EMS detects the maximum email size from the configured SMTP server and sets it as the default value. Otherwise, EMS sets the default value to 10 MB. You can optionally configure a custom email size in MB. If you configure a size larger than the maximum and default value, EMS displays a warning as such.
   From		Enter the email address to send the alerts from.
   Reply-to		Enter the email address to send the replies to.
   Subject		Sent e-mail alert's subject.
   Recipients		Enter email address(es) to send alerts to. Press Enter to add more email addresses.
   Test subject		Test email's subject.
   Test message		Test email's message.
   Test recipient		Email address to send the test email to.
   Send Test Email		Click the button to test the configured email settings.

3. Click Save.

To confirm that the EMS server can verify the SMTP server certificate:

When using STARTTLS or SMTPS, the SMTP server presents a certificate to prove its identity. If the server hosting EMS does not have the corresponding CA in its certificate store, EMS cannot trust the SMTP server certificate and the connection fails to establish.

You can verify this using tools on the server hosting EMS to establish a secure connection to the SMTP server. Using openssl as an example, you can run the following from the Windows command line:

openssl s_client -starttls smtp -crlf -connect <smtp_url:port>

The following is an example of an SMTP URL and port: smtp.office365.com:587

The command output displays the certificate that the mail server offers in the first few lines, accompanied by unable to get local issuer certificate. This indicates that Windows cannot verify the certificate.