Skip to content
cPFenceDocs

Generate mail SSL certificates

Use the Enhance main control panel server with a valid cPFence license and a Super admin API key. WebUI users need access to the selected websites and permission for this action.

Ensure each mail hostname, such as mail.example.com, points to the correct mail server before running the action.

From the WebUI

Section titled “From the WebUI”
  1. Open Tools & Utilities → ApiMachine Bulk Tools.
  2. Choose Cluster scope or Select servers, apply your filters, then check the intended website rows. Review the selection rules; filtering alone does not select websites.
  3. Open Choose action → SSL & HTTPS → Generate mail SSL.

SSL and HTTPS action menu showing Generate mail SSL.

Choose Generate mail SSL for the selected websites and review the intended mail hostnames. Select the image to enlarge it; use your browser's Back command to return.
  1. Review the selected websites and Confirm and run. Read Finished or Needs attention and the per-target output.

Inspect failed hostname validations and the issued certificate. Tell customers the intended mail hostname only after confirming issuance.

From the terminal

Section titled “From the terminal”

Use root on the main control panel server. Generate and edit the CLI site list first so that /var/log/cpfenceav/cluster-sites-list.txt contains only your intended targets.

Terminal window
cpfence --bulk-generate-mail-ssl-cluster

Read the target list and confirm the action when prompted.

For failures, read each target’s error and check its actual state before retrying. Keep the retry selection limited to the intended websites.