Thank you for choosing Infomaniak to secure your sites with an SSL certificate EV or DV from Sectigo.

An SSL certificate secures all exchanges between your server and your visitors, displays a padlock and adds the https to your site.

Which SSL certificate to choose?

• What are the requirements for an EV SSL certificate?
• What are the differences between an EV and DV certificate?
• Can I order an SSL certificate from Infomaniak if my site is hosted elsewhere?
• What does the warranty of a Sectigo SSL certificate exactly cover?

What would you like to do?

• Fix any potential errors after activating an SSL certificate
• Install a free Let's Encrypt SSL certificate on a site
• Install a wildcard certificate
• Uninstall a Let's Encrypt certificate
• Update a Let's Encrypt certificate (e.g. after adding/removing aliases)
• Familiarize yourself with all the FAQs about SSL
• Contact Infomaniak support

This guide helps you identify and correct errors encountered when attempting to use your email software/client such as Microsoft Outlook, Mozilla Thunderbird, Apple Mail, etc.

Refer to this other guide if you are looking for information about errors of type "mailer daemon" or "delivery failure" after sending an email.

Always use…

• the single server name: mail.infomaniak.com (for incoming IMAP and outgoing SMTP servers)
• the correct incoming/outgoing port numbers
• Authentication in the settings when it is offered, and if necessary, enter the username (your full email address) and password in the fields related to mandatory authentication
• the correct email password which is usually different from the username used to log in to Infomaniak (click here to check that you are using the correct password and if necessary, change the password of your email address)
• an existing email address that must have been actually created (or set as an alias)
• one protocol at a time (never check an email box with devices configured in POP3 for some and in IMAP for others because these two protocols do not work well together)

You must try to...

• compare the recommended settings for the email software/client used, especially if you have recently changed the password on the Infomaniak side
• check your emails using a different network (WiFi, mobile hotspot from 4G/5G, or any other internet connection)
• temporarily disable your security applications (antivirus, firewall, VPN...); if you can then retrieve your emails normally, contact the publisher of the security application(s) you are using
• type your password in plain text in a word processor; depending on your keyboard configuration, the key A may correspond to the letter Z and the key Q may refer to the letter A...
• Restart and try sending/receiving again: some applications require validating the configuration parameters window several times or need to be restarted to apply their new settings
• compose a new message after modifying your settings: a message in the process of being drafted that would be saved in the Drafts folder may not take into account any configuration changes

The types of errors

• 0x800... - refer to this other guide
• Certificate error (SSL or other): refer to this other guide
• 550 5.7.1 relaying denied or Proper authentication required - refer to this other guide
• 535 5.7.0 authentication failed - refer to this other guide

also:

• "573 Antispam: Authentication not possible. Please use port 587 instead of port 25."
  or "An operation on the server timed out. The server may be down, overloaded, or there may be too much net traffic."
  or "The time limit has expired" with an error number following (421, or 573 for example).
  Most ISPs (Internet Service Providers) have blocked the SMTP sending port n°25 for many years now. Therefore you should never specify port 25 as the SMTP port. To still be able to send emails, use the recommended ports.

This guide explains how to replace the main domain name associated with a Website hosted on Infomaniak in case you want to, for example, change the name of your activity or modify the spelling.

Preamble

• It is not possible to simply change the spelling of the domain name in question.
• You must own the new domain name and install it in place of the current one by performing a swap (read below).
• You can also rename your Web Hosting product in the Infomaniak Manager but changing the name of a hosting service has strictly no impact on the URLs of the sites.
• You need to act on the domain name and, if necessary, adapt the content of the site.

Change the website's domain name

Prerequisites

• Prepare the new domain name (if necessary you need to buy it).
• If the change you are looking for is more of a "subdomain" to "main domain" type (dev.domain.xyz → domain.xyz for example) then refer to this other guide.

To replace the domain name assigned to the site with another domain name:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the concerned product:
   
3. Then click on the chevron ‍ to expand the Domains section of this site:
   
4. Refer to this other guide to link the new domain name to your site (read the prerequisites carefully):
   • It is this new linked domain that will replace the current primary domain name after the inversion you will perform below.
5. Once the new domain name is linked to your site, click on the action menu ⋮ to the right of it.
6. Choose Set as primary domain:
   
7. If necessary, delete the old domain name and its variants that have become alias domains alias (and no longer primary domains).

If you are using a SSL certificate, you will need to update it to include the added aliases.

If you are using the dedicated IP option, you will need to uninstall and reinstall it after performing the swap.

Adapt the site content to the new name

In some cases, the web application used to develop the site needs to be adjusted to work with the new domain name. Click on the link corresponding to the development of your site to adapt the content:

• WordPress
• Joomla
• Prestashop
• application offered in WordPress & Apps

This guide explains how to order, link or remove a dedicated IP from a website.

Manage dedicated IPs on a hosting plan

Order one or several first dedicated IP addresses

To do this:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the relevant product.
3. Click on Web in the left sidebar.
4. Click on Dedicated IPs in the left sidebar.
5. Click on the button to order one or more IP addresses:
   

Order one or several additional dedicated IP addresses

To do this:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the relevant product.
3. Click on Web in the left sidebar.
4. Click on Dedicated IPs in the left sidebar.
5. Click on Order :
   

Associate a dedicated IP address with a website on a hosting plan

Once the IP has been ordered and paid for, familiarize yourself with the prerequisites below, as switching to a dedicated IP address for a website may cause a temporary interruption, especially in the presence of a certificat SSL Let’s Encrypt. To limit the impact:

• Start by reducing the TTL of the DNS records A and AAAA (for @ and www) to 5 minutes.
• Wait for the previous TTL duration before making any changes.
• The change below should be made during a period of low traffic to limit the inconvenience caused by the inevitable interruption.
• At the end of the procedure, you will need to wait for the new TTL to propagate the new configuration and for the SSL certificate to be regenerated, then check the accessibility of the site in HTTPS to ensure that everything is working correctly.

To switch to a dedicated IP address:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the relevant product.
3. Click on Web in the left sidebar.
4. Click on Dedicated IPs in the left sidebar.
5. Click on the button to dedicate the IP to a site on your hosting:
   
6. Select the site to assign the new IP address to.
7. Check the box after reviewing the warnings.
8. Click on the Associate button:
   

Remove a dedicated IP address from a website

Once the IP is installed, to uninstall it:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the relevant product.
3. Click on Web in the left sidebar.
4. Click on Dedicated IPs in the left sidebar.
5. Click on the action menu ⋮ located to the right of the relevant item.
6. Choose Unbind:
   
7. Take note of the warnings and confirm the deletion to complete the IP uninstallation procedure.

Thank you for entrusting Infomaniak with the management of your storage server NAS Synology. This guide allows you to quickly use the essential functions of your new product.

Foreword

• In case of any issues, Infomaniak supportcan only answer questions regarding the hardware of Synology storage servers.
• For questions related to the use of the DSM (operating system) consult Synology help directly ; (find out more).

Manage the Synology

• What can you do with a NAS Synology?
• 10 methods to secure access to the NAS Synology
• Synology NAS data security
• Restart and reset a Synology NAS
• Perform a speed test on NAS Synology

Back up your data

• Install an SSL Let's Encrypt certificate on a Synology NAS
• Set up a Synology NAS with Time Machine

and also…

• Back up Synology with Cloud Sync on Swiss Backup (Swift)
• Back up Synology with Hyper Backup on Swiss Backup (Swift)

Extend the functionalities

• Link a domain name to Synology Infomaniak
• Create a custom MX (for Synology NAS for example)
• Set up DynDNS with a Synology NAS
• Create a private network between servers
• Synology NAS High Availability in a Swiss data center
   

and also…

• Connect a Synology NAS with a VPN
• Create a VPN in Switzerland with a Synology NAS

Click here to share a review or suggestion about an Infomaniak product.

This guide explains how to obtain a custom SSL certificate that you can use with Jelastic Cloud from Infomaniak.

SSL Documentation

Take note of these guides:

• It is quite possible to buy an SSL certificate from Infomaniak in order to install it on Jelastic Cloud afterwards.
• Integrated into Jelastic Cloud, you will also find a valid certificate but only for domains xxx.jcloud.ik-server.com.
• Let's Encrypt certificates can also be obtained for free and for any domain.
• It is possible to obtain a paid certificate, for any domain.
• For testing purposes, you can also set up a self-signed certificate.
   

This guide details the conditions and procedure for using a Sectigo Infomaniak certificate on a site hosted elsewhere, with a third-party host.

Preamble

• You have the possibility to benefit from the advantageous rates of Infomaniak for your SSL certificates while managing your sites with another host.

Install a Sectigo certificate

Due to the different service providers, the installation of your certificate will not be automatic:

1. Obtain the CSR

Export the CSR configuration file from your host and enter it when ordering your certificate at Infomaniak.

2. Confirm domain ownership

Validate the domains included in the certificate via one of the following methods:

• Enter a validation code received at one of the following email addresses (the complete email address must exist on the domain to be validated, for example “domain.xyz”):
  • admin@domain.xyz
  • administrator@domain.xyz
  • hostmaster@domain.xyz
  • postmaster@domain.xyz
  • webmaster@domain.xyz
• Creation of a unique CNAME record in the domain's DNS.
• Validation txt file to upload via FTP to your site.

This guide explains how to obtain an SSL certificate of type .p12 2048 bits , useful notably for SAP, Salesforce, etc. from the Infomaniak infrastructure.

Obtain a .p12 certificate

A p.12 certificate is a container that includes the certificate, the intermediate CAs and the key itself.

It is possible to create this type of certificate from what can be downloaded from the Infomaniak Manager:

• Order a certificate for the domain sap.domain.xyz by providing a CSR (which means having the private key with you, named for example server.key)
• Download the generated certificate from the Manager Infomaniak: sap.domain.xyz-15-03-2024.zip
• Unzip the archive

• Run

  openssl pkcs12 -export -out server.p12 -inkey server.key -in sap.domain.xyz.crt -certfile ca_bundle.crt

A server.p12 file will then be obtained.

If the certificate was generated without a CSR, it is the .key file present in the downloaded zip that will serve as the key.

This guide explains how to export an SSL certificate from the Infomaniak Manager.

Preamble

• Downloading the certificate generates a file in .zip format.
• The archive contains the .key and .crt files.
• It is recommended to store this certificate and its private key in a secure location, as the latter could allow access to your encrypted data:
  

Export an SSL certificate

To access the management of your certificates:

1. Click here to access the management of your product on the Manager Infomaniak (need help?).
2. Click directly on the name assigned to the relevant product.
3. Click on the action menu ⋮ to the right of the relevant item in the displayed table.
4. Select Export the certificate and follow the instructions to download the archive:
   

The warranty provided with an EV or DV SSL certificate protects your users against any unexpected issues related to a possible validation error by Sectigo, the certification authority that issues SSL certificates and validates your personal data.

The guarantee is therefore claimable if the certification authority does not correctly validate the information contained in the digital certificate and this failure causes the end user to lose money in the context of a fraudulent credit card transaction.