If you want to run OX using an imaps or pop3s server follow these steps as user "root". 1. Create the server's private key and certificate yourself using the following command: openssl req -new -x509 -nodes -out /usr/lib/cyrus/imap-server.pem -keyout /usr/lib/cyrus/imap-server.pem -days 365 2. Change permissions for the file so that the cyrus user can read the file: chown cyrus /usr/lib/cyrus/imap-server.pem 3. Edit the imapserver´s configfile to start the imaps and pop3s service: /etc/cyrus.conf AND uncomment the following entries: #imaps cmd="imapd -s" listen="imaps" prefork=0 #pop3s cmd="pop3d -s" listen="pop3s" prefork=0 4. Edit the imap daemon's config file to set the correct path to the ssl cert/key: /etc/imapd.conf AND change the lines: #tls_cert_file: /usr/ssl/certs/cert.pem #tls_key_file: /usr/ssl/certs/skey.pem to the following: tls_cert_file: /usr/lib/cyrus/imap-server.pem tls_key_file: /usr/lib/cyrus/imap-server.pem 5. Restart the imap server so that you can connect via imaps/pop3s. Note: This is just one quick way to generate an ssl cert/key. There are also other ways to create the necessary keys