Situation

The connection to the e-mail server is to be protected using a certificate. Then, the router will only establish a connection to the mail server, if the server certificate has been generated by a CA whose certificate is stored in the router.

Solution

Downloading the CA certificate file

The CA certificate file for the mail server must be downloaded first. The following describes a download using the commonly used Firefox browser. Other browsers should be similar. It is prerequisite that your configuration PC has Internet access.

  1. Enter the server address in a browser and log in if required.

  2. Click on the lock icon () to display the security information.

  3. Click on the arrow behind the server address () and on More information in the bottom line.

  4. Click on View certificate in the Page info window and select the Details tab.

  5. Select the root CA certificate in the Certificate Hierarchy and click on Export to store the certificate on your computer. [1]

Router configuration

It is prerequisite that you have access to the web interface of the icom Data Suite. The Smart Device must have Internet access. The CA certificate is stored on your computer as described above.

  1. Open web interface of the router using a browser: 192.168.1.1 [2]

  2. In the Administration → Certificates menu, click on Browse…​.

  3. Select above downloaded CA certificate and click on Import certificates.

  4. In the Events → E-mail account menu, configure the e-mail account for dispatching the e-mail: [3]

    • E-mail address of sender: E-mail address as registered with the provider

    • Real name: INSYS Router [4]

    • SMTP server: The domain name or IP address of the SMTP server

    • SMTP port: The SMTP port, which is used for accepting e-mails [5]

    • User name: User name for logging in the router to the SMTP server for e-mail dispatch

    • Password: Password for authentication

    • Encryption: STARTTLS [6]

    • Verify server certificate: [7]

    • Verify host name of servers: [8]

  5. Click on Save settings.

  6. Activate the profile ().

Troubleshooting

  • If no mail is received when expected, check whether the following settings are correct.

    • E-mail address of recipient

    • E-mail account settings

  • It facilitates troubleshooting to have a look at the Netfilter and Events logs in the Status → Log view menu.

  • For testing purposes, message dispatch can also be triggered manually in the Help → Debugging menu. You need to add a contact and a message first for this.

  • If e-mail dispatch works after disabling the netfilters in the Netfilter → IP filter menu, a faulty net filter setting is the reason.

Back to the Configuration Guides for icom OS Smart Devices

Back to overview

1. The root certificate is the uppermost certificate in the hierarchy.
2. Login depending on configuration; default for past firmware versions: User name: insys, Password: icom
3. Access data can be obtained from the e-mail provider or network administrator of the company.
4. The real name will be displayed in the e-mail program of the recipient as sender
5. Usually port 587. Port 465 is often used when using TLS/SSL.
6. The connection will be established unencrypted, encryption will be negotiated upon connection establishment.
7. This ensures that it will be verified whether the certificate of the server corresponds to one of the CA certificates stored in the icom Data Suite. If the checkbox is not checked, all certificates of the server are accepted without verification.
8. This ensures that it will be verified whether the host name of the server corresponds to the Common Name in the certificate; otherwise, a connection to the server cannot be established. If the checkbox is not checked, no verification will be made.