Broadcom - Symantec SMG TLS Configurtion step by step

 Download the OpenSSL tool and Install it on your client (Windows laptop)

Create a folder called c:\cert on your laptop.

Share the folder c:\cert with everyone

Login to Exchange ECP and export the certificate to the location \\laptop\cert\smg.pfx format and type the password 12345 for export.

Now a file with smg.pfx will be available on your laptop location c:\cert

Open the OpenSSL command prompt on your laptop

And type as “openssl pkcs12 -in c:\cert\smg.pfx -out c:\cert\smg.pem –nodes”

Type the password 12345

You will get “MAC Verified OK” message which confirms that smg.pem was successfully converted.

Now your prompt will be on C:, then type the below command

11. “openssl rsa -in c:\cert\smg.pem -out c:\cert\key-nopass.pem”

12. A new file will be created as key-nopass.pem

13. Open the file key-nopass.pem in notepad and select all the contents from it and copy the content to clipboard

14. Now open the SMG.PEM in a new notepad, scroll to the end of the content and Paste the content from the clipboard to this file (smg.pem) and save it.

15. Open the SMG console and import this new certificate and configure the TLS.