Fortanix Data Security Manager - Sysadmin Settings - Email

1.0 Introduction

This article describes the cluster-level Email settings that are configured by the Fortanix-Data-Security-Manager (DSM) system administrator.

The settings configured here are applicable to every object of the entire cluster.

2.0 Email Settings

To allow Fortanix DSM to send email notifications, click System Administration → Settings → EMAIL tab and enable the toggle for Email to receive emails for the following operations:

• Inviting a new user

• Forgot password or password reset

• Account and group Quorum approval requests

Fortanix DSM supports the following email servers:

• Simple Mail Transfer Protocol (SMTP)

• Amazon Simple Email Service (SES)

2.1 SMTP

Perform the following steps to configure a generic SMTP server:

1. Select SMTP SERVER as the email server type.

2. Enter the Host name or an IP address and Port number for the SMTP server.

3. Click SAVE CHANGES to apply the configuration.

2.1.1 Enable Transport Layer Security (TLS)

Perform the following steps to enable TLS for secure email communication with the SMTP server:

1. Select the Enable TLS check box.

2. If you are using a certificate signed by a well-known public CA, select Global Root CAs.

3. If your organization uses a self-signed certificate issued by an internal Certificate Authority (CA), select Custom CA Certificate.

   1. Click UPLOAD A FILE to upload your CA certificate.

   2. When Fortanix DSM, acting as a client, connects to the SMTP server and receives the server’s certificate, it validates the certificate using the uploaded custom CA certificate.

4. Click SAVE CHANGES to apply the configuration.

NOTE

When TLS is enabled, Fortanix DSM also validates the SMTP server hostname against the certificate. To disable this, clear the Validate host check box.

2.2 Amazon SES

Perform the following steps to configure an Amazon SES:

1. Select AMAZON SES as the email server type.

2. Select the AWS region you chose when signing up for Amazon SES in the Select region drop down.

3. Enter the Access Key and Secret Key.

4. Click SAVE CHANGES to apply the configuration.