- Plesk for Windows
- Mail Server certificate for MailEnable cannot be installed under Plesk > Tools & Settings > SSL/TLS Certificates > Set a Mail certificate;
- Checking the certificate shows the following:
PLESK_INFO: # openssl s_client -connect example.com:587 -starttls smtp -showcerts
no peer certificate available
No client certificate CA names sent
SSL handshake has read 0 bytes and written 289 bytes
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
No ALPN negotiated
* Protocol : TLSv1.2
* Cipher : 0000
* Key-Arg : None
* Krb5 Principal: None
* PSK identity: None
* PSK identity hint: None
* Start Time: 1526502581
* Timeout : 300 (sec)
* Verify return code: 0 (ok)*
Insufficient permissions for IME_SYSTEM user on certificate private key file located in C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys directory.
This is Plesk bug with ID #PPPM-8616 and will be fixed in the future product updates.
As a workaround, set the correct permissions as described in MailEnable article http://www.mailenable.com/kb/content/view.asp?ID=ME020479
Install the SSL certificate manually under MailEnable Management > Servers > locahost > right click > SSL.