1.0 Introduction
This article describes the cluster-level Email settings that are configured by the Fortanix Data Security Manager (DSM) system administrator.
The settings configured here are applicable to every object of the entire cluster.
2.0 Email Settings
To configure email functionality in Fortanix DSM, navigate to System Administration → Settings → EMAIL tab.
On the Email page, enable the Email enabled toggle to activate email configuration. When this toggle is disabled, all email-related settings on this page are unavailable and Fortanix DSM does not send email notifications.
After email is enabled, configure the following settings:
Emails for subscription updates notifications: Enter one or more email addresses for system administrators who should receive notifications when a Fortanix DSM SaaS account administrator submits a subscription change request from the DSM account Settings → SUBSCRIPTION → Change.
WARNING
If no email address is configured, submitting a subscription change request does not generate an email notification.
NOTE
The subscription change notification email setting is available for Fortanix DSM SaaS deployments only. This option is not visible in on-premises clusters.
“From” for outgoing emails: Specify the sender’s name and email address that appear in recipients’ inboxes for emails sent by Fortanix DSM for the following operations:
Inviting a new user
Forgot password or password reset
Account and group Quorum approval requests
Email server: Configure the email service used to send outgoing emails. Fortanix DSM supports the following email servers:
Simple Mail Transfer Protocol (SMTP)
Amazon Simple Email Service (SES)
Figure 1: Email tab
2.1 SMTP
Perform the following steps to configure a generic SMTP server:
Select SMTP SERVER as the email server type.
Enter the Host name or an IP address and Port number for the SMTP server.
Click SAVE CHANGES to apply the configuration.
2.1.1 Enable Transport Layer Security (TLS)
Perform the following steps to enable TLS for secure email communication with the SMTP server:
Select the Enable TLS check box.
In the Validate certificate section,
If you are using a certificate signed by a well-known public CA, select Global Root CAs.
If your organization uses a self-signed certificate issued by an internal Certificate Authority (CA), select Custom CA Certificate.
Click UPLOAD A FILE to upload your CA certificate.
When Fortanix DSM, acting as a client, connects to the SMTP server and receives the server’s certificate, it validates the certificate using the uploaded custom CA certificate.
NOTE
When TLS is enabled, Fortanix DSM also validates the SMTP server hostname against the certificate. To disable this, clear the Validate host check box.
Click SAVE CHANGES to save the configuration.
Figure 2: SMTP Server with TLS
NOTE
After saving any changes to the Email settings, a rolling restart of the backend containers must be performed for the configuration to take effect. Until the restart is complete, a warning indicator (⚠) appears next to the tab name in the Settings menu, indicating that there are pending changes.
Alternatively, you can revert the configuration change before the cluster restart begins, click CANCEL CHANGE in the Pending changes banner. In the Cancel changes dialog box, click DELETE to confirm and restore the previous configuration, or click CANCEL to return without making any changes.
2.2 Amazon SES
Perform the following steps to configure an Amazon SES:
Select AMAZON SES as the email server type.
Select the AWS region you chose when signing up for Amazon SES in the Select region drop down.
Enter the Access Key and Secret Key.
Click SAVE CHANGES to save the configuration.
Figure 3: Amazon SES
NOTE
After saving any changes to the Email settings, a rolling restart of the backend containers must be performed for the configuration to take effect. Until the restart is complete, a warning indicator (⚠) appears next to the tab name in the Settings menu, indicating that there are pending changes.
Alternatively, you can revert the configuration change before the cluster restart begins, click CANCEL CHANGE in the Pending changes banner. In the Cancel changes dialog box, click DELETE to confirm and restore the previous configuration, or click CANCEL to return without making any changes.