# TLS Not Enabled by Default?

**URL:** <https://community.ciphermail.com/t/tls-not-enabled-by-default/569>\
**Category:** Gateway\
**Created:** [August 5, 2017, 10:00pm UTC](https://community.ciphermail.com/t/tls-not-enabled-by-default/569 "2017-08-05T22:00:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paul\_Bronson](https://avatars.discourse-cdn.com/v4/letter/p/8e8cbc/32.png) [@Paul\_Bronson](https://community.ciphermail.com/u/Paul_Bronson)\
**Post date:** [August 5, 2017, 10:00pm UTC](https://community.ciphermail.com/t/tls-not-enabled-by-default/569/1 "2017-08-05T22:00:13Z")

</div>

I noticed that the TLS option is commented out.. and I noticed the  
ciphermail system doesn't use TLS? Why is this?

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [August 6, 2017, 4:10pm UTC](https://community.ciphermail.com/t/tls-not-enabled-by-default/569/2 "2017-08-06T16:10:59Z")

</div>

Nothing stops you from enabling TLS. If you want the SMTP server to  
accept TLS, you need to configure a SSL/TLS certificate with private key  
(with the enterprise and SME edition, there is functionality to upload a  
key/cert, with the free edition you need to install this on the command  
line but that is easy). For client side TLS (i.e., use TLS when  
CipherMail connects to another SMTP server) a cert is not required. You  
can enable the following settings in the MTA config file (Admin -\> MTA  
-\> MTA config file)

smtp\_tls\_CApath = /etc/ssl/certs  
smtp\_tls\_security\_level = may  
smtp\_tls\_loglevel = 1

Kind regards,

Martijn Brinkers

> **···**
>
> On 08/06/2017 12:00 AM, Paul Bronson via Users wrote:
> 
> > I noticed that the TLS option is commented out.. and I noticed the  
> > ciphermail system doesn't use TLS? Why is this?
> 
> --  
> CipherMail email encryption
> 
> Email encryption with support for S/MIME, OpenPGP, PDF encryption and  
> secure webmail pull.
> 
> > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)**
> >
> > Easy to use server-side email encryption for automatic encryption and digital signing of email.
> 
> Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail)