Dear all,

  I have setup an all-in-one exchange server without edge server role. However, it is needed to have TLS mail communication setup with HSBC. May I know what exactly configuration do I need? Do I need to implement an edge server with public cert?

  Can I enable TLS without edge server and with self-signed cert?

Thanks a lot

Best Regards,

Elroy

have u solve this problem. Please advise if you can solve

Hi,

it's not possibile to connect on TLS with HSBC without a public CA certificate. Not selfsigned is permitted.

No edge server it's mandatory.

Import certificate on Exchange computer store and set it to use with SMTP service:

Enable-ExchangeCertificate
-Thumbprint CERTTHUMBPRINT -Services SMTP

You need to create a custom send connector, complete domain scope with all HSBC domain and set bridgehead Exchange server. After the send connector creation set the Enforce TLS:

Set-SendConnector CONNECTORNAME -RequireTLS $true

Be careful to default internet receive connector that accept TLS connection.

This is a good site for testing: https://www.checktls.com/

Bye bye.

Raffa!

• Edited by Raffaele Colavecchi 13 hours 33 minutes ago