Secure PMG Web Administration
Protect HTTPS access to the PMG Web Admin and API interface with a trusted certificate.
Secure Your Mail Gateway Infrastructure
SSL Certificate
SSL Certificate
for Proxmox
Mail Gateway
Secure your Proxmox Mail Gateway (PMG) with a trusted Domain Validated SSL certificate. Protect Web Administration and API access with HTTPS, and support encrypted SMTP communication with TLS. Professional installation and certificate maintenance included.
Domain Validation
(DV)
(DV)
Free Installation
& Deployment
& Deployment
Free Reissue
& Redeployment
& Redeployment
Remote Technical
Support
Support
SMTP STARTTLS Protection
Support encrypted SMTP connections through properly configured TLS and mail routing settings.
Free Installation & Reissue
Certificate installation, reissue, and redeployment during your active subscription period.
Professional Support
Remote technical assistance for certificate deployment and Proxmox Mail Gateway SSL/TLS configuration.
Simple & Transparent Pricing
SSL Certificate for Proxmox Mail Gateway
Choose the right Domain Validated (DV) SSL certificate for your Proxmox Mail Gateway infrastructure. Every package includes professional remote installation, certificate reissue, and redeployment.
Single Domain (DV)
1 DOMAINFor one selected domain or hostname, such as pmg.example.com. Suitable for a PMG server using one primary public hostname.
ORDER SINGLE DOMAIN- Domain Validation (DV)
- One Covered Hostname
- Trusted SSL Certificate
- HTTPS / TLS Support
- Free Initial Installation
- Free Certificate Reissue
- Free Redeployment
- Remote Technical Support
Select your certificate and subscription period in the quotation form.
Multi-Domain (DV)
3 DOMAINSFor up to three selected domain names or hostnames in one SSL certificate using Subject Alternative Names (SAN).
ORDER MULTI-DOMAIN- Domain Validation (DV)
- Up to 3 Covered Names
- Subject Alternative Names
- Trusted SSL Certificate
- HTTPS / TLS Support
- Free Initial Installation
- Free Certificate Reissue
- Free Redeployment
- Remote Technical Support
Select your certificate and subscription period in the quotation form.
Wildcard (DV)
WILDCARDFor multiple first-level subdomains under one parent domain, such as *.example.com. Suitable for environments using several gateway hostnames.
ORDER WILDCARD- Domain Validation (DV)
- Wildcard Hostname Coverage
- First-Level Subdomains
- Trusted SSL Certificate
- HTTPS / TLS Support
- Free Initial Installation
- Free Certificate Reissue
- Free Redeployment
- Remote Technical Support
Select your certificate and subscription period in the quotation form.
All SSL Proxmox Mail Gateway Packages Include
Domain Validated SSL Certificate
Professional Remote Installation
Free Certificate Reissue
Free Certificate Redeployment
PMG HTTPS / SMTP TLS Deployment Support
Remote Technical Assistance
Important: SSL Subscription Period
The 1-year and 2-year options are subscription periods, not the validity period of a single issued SSL certificate. Publicly trusted TLS certificates have shorter validity periods and may require multiple reissues throughout the subscription. Required certificate reissue and redeployment are included at no additional service charge during the active subscription, subject to Certificate Authority requirements, successful domain validation, and agreed server access.
Need help selecting the right SSL certificate for your PMG server? Complete the SSL quotation form and mention Proxmox Mail Gateway in your requirements.
Choose the Right Coverage
Which SSL Certificate Does Your Proxmox Mail Gateway Need?
Certificate selection depends on the hostnames used for PMG administration, SMTP communication, and multi-server gateway environments.
Single Domain SSL
Suitable when the gateway uses a single hostname for its certificate-enabled external services.
Example
pmg.example.com
Multi-Domain SSL
Appropriate when different gateway services or PMG nodes use multiple public hostnames within one certificate.
Example
pmg.example.com
mx1.example.net
mx2.example.org
mx1.example.net
mx2.example.org
Wildcard SSL
Useful for multiple first-level gateway subdomains under one parent domain. Root domain coverage requires a separate SAN when needed.
Example
*.example.com
pmg.example.com
mx1.example.com
pmg.example.com
mx1.example.com
Secure Gateway Connections
SSL/TLS Protection for Proxmox Mail Gateway
Proxmox Mail Gateway uses separate certificate configurations for the management interface and SMTP TLS connections. Deployment is tailored to the services enabled on each gateway.
Web Admin HTTPS
Protect the Proxmox Mail Gateway web administration interface with HTTPS, typically on TCP 8006.
SMTP STARTTLS
Configure a trusted TLS certificate for applicable SMTP connections, including mail traffic on port 25.
Certificate Management
Install the certificate and required chain for PMG API and SMTP services as applicable.
Multi-Node Deployment
Plan certificate deployment and hostname coverage for applicable nodes in a multi-server Proxmox Mail Gateway environment.
PMG Certificate Architecture
Proxmox Mail Gateway manages
its HTTPS API certificate
separately from its
SMTP TLS certificate.
The API uses
/etc/pmg/pmg-api.pem,
while SMTP TLS uses
/etc/pmg/pmg-tls.pem.
Appropriate certificates
and private keys are deployed
according to the gateway
configuration.
SSL/TLS certificates support authenticated encryption when the connecting systems negotiate and validate TLS correctly. SMTP TLS does not automatically guarantee encryption for every email delivery. Access to the PMG administration interface should also remain restricted to authorized networks.
Professional Deployment
SSL Installation Process for PMG
A structured installation process covering certificate selection, domain validation, remote deployment, and SSL/TLS verification.
Certificate Order
Choose Single Domain, Multi-Domain, or Wildcard SSL and select the subscription period.
Domain Validation
Complete domain control verification using the supported Certificate Authority validation method.
SSL Deployment
Install the certificate and chain for the applicable PMG HTTPS and SMTP TLS configurations.
Activation & Testing
Verify certificate trust, hostname coverage, chain validity, and relevant TLS service connections.
Remote Installation Included:
Initial installation and
required certificate redeployment
are included during the
active subscription.
The implementation scope
is reviewed for standalone
and multi-node Proxmox
Mail Gateway environments.
Frequently Asked Questions
SSL Certificate Proxmox Mail Gateway FAQ
Answers to common questions about PMG certificates, HTTPS administration, SMTP TLS, pricing, installation, and renewal.
Why does Proxmox Mail Gateway need an SSL certificate?
SSL/TLS certificates help
secure management connections
and support encrypted SMTP
communication.
A publicly trusted certificate
can also reduce warnings
caused by untrusted
self-signed certificates.
What SSL certificate types are available?
SaadWebId offers
Single Domain DV,
Multi-Domain DV with
three covered names,
and Wildcard DV
certificates.
Are all SSL certificates Domain Validated?
Yes. All SSL certificates
in these PMG packages
use Domain Validation (DV).
DV verifies control
over a domain name,
not the legal identity
of the organization.
Is SSL installation included in the price?
Yes. Initial remote
certificate installation
and deployment for the
agreed PMG environment
are included
in the package price.
Are HTTPS and SMTP TLS certificates separate in PMG?
Yes. PMG uses separate
certificate configurations
for its HTTPS
Web Admin/API interface
and SMTP TLS services.
The same certificate
material may be suitable
for both if the required
hostnames are covered,
but the deployment
configurations are separate.
Does a 2-year package mean the SSL certificate lasts for two years?
No. Two years represents
the commercial subscription
period. Individual publicly
trusted TLS certificates
have shorter validity
periods and must
be replaced as required.
Are reissue and redeployment free?
Yes. Certificate reissue
and redeployment are
included during the
active subscription,
subject to Certificate
Authority policies,
successful domain validation,
and agreed technical access.
Does Wildcard SSL cover all subdomain levels?
No. A wildcard name
such as *.example.com
generally covers
first-level subdomains,
such as pmg.example.com.
It does not automatically
cover a.b.example.com
or the root example.com.
Can SSL be deployed on a multi-node PMG cluster?
Yes. Certificates can
be deployed to applicable
PMG nodes according
to the cluster
architecture and hostname
requirements. Each node's
endpoint configuration
should be verified.
Does SSL guarantee that every SMTP connection is encrypted?
No. SMTP encryption
depends on TLS negotiation,
peer capabilities,
and the configured
mail transport policies.
A valid certificate
alone does not guarantee
that every SMTP connection
will use encryption.
How do I order an SSL Certificate for PMG?
Choose the certificate
type and subscription period,
then complete the
SSL quotation form.
Include "Proxmox Mail Gateway"
and the relevant
server hostnames in
the special instructions.
Secure Your Proxmox Mail Gateway Today
Protect PMG administration and support secure SMTP communication with a trusted DV SSL certificate. Get professional installation, free certificate reissue, redeployment, and remote technical assistance throughout your subscription.
