SSL Certificate for email and PCI compliance

Discussion in 'Mail Server Support' started by snowflake, Mar 24, 2014.

  1. snowflake

    snowflake Valued Member

    Nov 18, 2013
    Likes Received:
    For my friends company they also have a PCI compliance they are trying to adapt to and most of the big issues right now are because the email (pop/imap/smtp) are all done with no SSL.

    We do have an SSL for but assuming I will need to buy one for whatever mail server settings like

    And I am not too sure how to install this but it seems like I just copy the cert to a file and reload the mail server.. so I will do it if I can.. If not can they hire you to do this?

    Lastly, will that cert cover all the email types (pop/imap/smtp) or do I need a separate cert for each one?

  2. popowich

    popowich EQ Forum Admin Staff Member

    Aug 12, 2008
    Likes Received:
    These are the requirements for PCI compliance:

    PCI for the Uninitiated - How to Accept Credit Card Payments Online « LuxSci FYI

    With a wildcard certificate for * you should be able to use the same certificate for all of your email and web services.

    Enabling SSL email ports depends on your mail server and infrastructure.

    Some control panels make it easy. Some load balancers make it easy.

    If I remember correctly you have a Plesk control panel, these directions might help.

Want to reply or ask your own question?

It only takes a minute to sign up (and it's free!). Click the orange sign up button to choose a username and then you can ask your own questions on the forum.