Unable to send mail using SMTP on SSL/TLS encryption

Anvay Singh 41 Reputation points
2022-02-15T05:30:05.167+00:00

I'm trying to understand SMTP/POP3 server connection. I have leveraged an Exchange server 2016 as a POP3/SMTP server. I've made all the required changes and have been able to login and send mails using POP3/SMTP from my local machine to exchange server users.

I'm only able to send a mail when I select STARTTLS as encrypted connection type on port 587. If I change it to SSL/TLS. I receive an error:

174274-image.png

What changes do I have to make on the server so that I'm able to send mail using SSL/TLS on port 587?

Exchange | Exchange Server | Management
Exchange | Exchange Server | Management
The administration and maintenance of Microsoft Exchange Server to ensure secure, reliable, and efficient email and collaboration services across an organization.
0 comments No comments
{count} votes

Answer accepted by question author
  1. Aaron Xue-MSFT 2,596 Reputation points Moderator
    2022-02-16T02:24:38.897+00:00

    Hi @Anvay Singh ,

    Secure Sockets Layer (SSL) is being replaced by Transport Layer Security (TLS) as the protocol that's used to encrypt data sent between computer systems.

    You could follow below steps to use the Exchange Management Shell to specify the certificate that's used to encrypt authenticated SMTP client connections

    1.Run Get-ExchangeCertificate |FL to check which certificate has SMTP service.
    174695-1.png
    2.To specify the certificate that's used for authenticated SMTP client connections, use the following syntax:

    $TLSCert = Get-ExchangeCertificate -Thumbprint <ThumbprintValue>  
    $TLSCertName = "<I>$($TLSCert.Issuer)<S>$($TLSCert.Subject)"  
    Get-ReceiveConnector -Identity "Client Frontend*" | Set-ReceiveConnector -TlsCertificateName $TLSCertName  
    

    174696-2.png

    After the TLS has been set, you could go to owa to verify the correct SMTP settings are displayed.
    174742-4.png

    You also could get more details about the TLS from this document
    https://learn.microsoft.com/en-us/exchange/clients/pop3-and-imap4/configure-authenticated-smtp?view=exchserver-2019#step-2-use-the-exchange-management-shell-to-specify-the-certificate-thats-used-to-encrypt-authenticated-smtp-client-connections


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.