Before you can set **SMTP TLS**, you must first have either imported or requested a SSL Certificate in the **System -->** **System Certificates** section for the **Hostname** and **Primary Domain Name** you set in the **System -->** **Network Settings**.
- Set the **SMTP TLS Mode** drop-down to **Opportunistic TLS or** or **Mandatory TLS** as required. - The **SMTP TLS Certificate** field is pre-populated with the **system-self-signed** certificate. If you wish to use a SSL certificate you set in the **System Certificates** section above, simply delete the **system-self-signed** entry and start typing the friendly name of the certificate you setup previously that matches the **Hostname** and **Primary domain Name** you set in the **Network Settings**. The system will locate the certificate and display it in a drop-down list. Click on the certificate and the system will automatically populate all the rest of the Certificate fields such as the Subject, Issuer, Serial and Type (**Figure 1**): **Figure 1** [](https://docs.deeztek.com/uploads/images/gallery/2022-01/image-1642971499398.png) - Click the **Submit** button (**Figure 2**): **Figure 2** [](https://docs.deeztek.com/uploads/images/gallery/2022-01/image-1642971616360.png) #### Verify TLS Encryption and Certificate The easiest way to verify whether or not your Hermes SEG TLS encryption is working correcly as well as verify the certificates you installed, is to go to [https://www.checktls.com/TestReceiver](https://www.checktls.com/TestReceiver) and run the TestReceiver test. #### TLS Encryption Policies Hermes SEG allows you to create a policy to force TLS encryption when sending/receiving email from specific remote domains. TLS encryption along with S/MIME, PDF or PGP encryption will allow for the absolute best security. - Before attempting to force TLS encryption for a specific remote domain, you must first ensure that the remote domain's SMTP hosts are able to support TLS encryption. - Send a test email to a recipient on the remote domain. - Navigate to **System --> System Logs**. - In the **Simple Search** section, under the **Search Text** field, enter the email address of the recipient and press the **Go** button. - In the search results, look for a line similar to the one below where **smtp.remotedomain.tld** is the remote smtp server hostname: ``` 1872E41D60: to=**Any email destined for a virtual recipient are NOT checked by the spam filter.**
### Create Virtual Recipient(s) - Click on the **Create Recipient(s)** button (**Figure 1**). **Figure 1** [](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649069023132.png) - On the **Add Virtual Recipient(s)** page, under the **Local-Part(s)** field, enter as many local-part(s) as required each in its own line (part before the @symbol of an e-mail address). You can also leave the **Local-Part(s)** field empty if you wish to forward an entire domain. - Under the @**Domain** drop-down field, select the domain you wish to use. - Under the **Delivers to** field, start typing the e-mail address of an existing **Internal Recipient** and the system will show a drop-down listing of Internal Recipients matching the e-mail address you are typing or enter an external email address. - Click the **Submit** button (**Figure 2**). **Figure 2** [](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649070095512.png) ### Edit Virtual Recipient - On the **Virtual Recipients** page, locate the virtual recipient you wish to edit by typing any part of the e-mail address in the **Search:** field and then click the [ ](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649070479512.png)button next to the virtual recipient (**Figure 3**).[ ](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649070446201.png) **Figure 3** [](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649070420418.png) On the **Edit Virtual Recipient** page, make the necessary changes and click the **Submit** button (**Figure 4**). **Figure 4** [](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649070665136.png) ### Delete Virtual Recipient(s) - On the **Virtual Recipients** page, locate the virtual recipient(s) you wish to delete by typing any part of the e-mail address(es) in the **Search:** field, place a checkmark on the checkbox next to the virtual recipient and then click the **Delete** button on top of the page (**Figure 5**).[ ](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649070446201.png) **Figure 5** [](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649070920070.png) On the **Delete Recipient(s)** confirmation page, click the **Yes** button to delete the recipient or **No** to cancel (**Figure 6**) **Figure 6** [](https://docs.deeztek.com/uploads/images/gallery/2022-04/image-1649071064926.png)