DownloadsClient Area
Administration

Email Notifications

Smart Mail · Operational Alerting

SSLNexus can send operational alerts through Google Workspace, Microsoft 365 or a traditional SMTP relay so certificate failures and approaching deadlines do not depend on someone watching the dashboard.

Choose A Mail Provider

  1. Sign in as an Administrator and open Notifications.
  2. Enable email notifications and choose a provider.
  3. Enter one or more comma-separated recipients.
  4. Complete the provider-specific settings, save the configuration and allow SSLNexus to restart.
  5. Return to Notifications and use Send test email.
ProviderUse
Google Workspace · OAuthGmail API with OAuth 2.0 service-account delegation.
Microsoft 365 · OAuthMicrosoft Graph with Entra application credentials and Mail.Send.
Google Gmail · SMTPPreconfigures smtp.gmail.com:587 with STARTTLS for an account using an App Password.
Microsoft 365 · SMTP AUTHPreconfigures smtp.office365.com:587 with STARTTLS where SMTP AUTH is still enabled.
Custom / internal SMTP relayExisting host, port, TLS and optional username/password workflow for organisation relays and other SMTP servers.

Google Workspace OAuth Setup

  1. Create a Google Cloud service account and enable the Gmail API.
  2. Enable domain-wide delegation for the service account.
  3. In Google Workspace Admin, authorize its client ID for https://www.googleapis.com/auth/gmail.send.
  4. Choose Google Workspace · OAuth in SSLNexus.
  5. Load the downloaded service-account JSON and enter the delegated sender mailbox.
  6. Save and send a test email.
SSLNexus stores the Google private key separately with restricted permissions and creates short-lived OAuth access tokens automatically. It does not require a manually managed refresh token.

Microsoft 365 OAuth Setup

  1. Register an application in Microsoft Entra ID.
  2. Add Microsoft Graph → Application → Mail.Send and grant administrator consent.
  3. Create a client secret.
  4. Choose Microsoft 365 · OAuth in SSLNexus and enter the Tenant ID, Client ID, Client Secret and sender mailbox.
  5. Save and send a test email.
Where appropriate, use Microsoft 365 application-access controls to restrict the Entra application to the intended sender mailbox.

SMTP And Custom Relay

Google SMTP uses an App Password rather than the normal account password. Microsoft SMTP only works where SMTP AUTH remains enabled for the mailbox or tenant. Custom SMTP keeps the existing STARTTLS, implicit TLS or trusted-relay options.

Notification Events

EventBehaviour
Certificate expiryWarnings at 30, 14, 7, 1 and 0 days before expiry.
Certificate operation failureIssuance, renewal, CSR preparation and deployment failures.
Target health failureRaised when a registered target changes to a failed SSH or WinRM management-channel health state.
Vendor operation failureRaised when vendor certificate issuance, renewal or certificate handoff requires administrator attention.
LicenceExpiry warnings and failures contacting the licensing authority.

De-Duplication

SSLNexus records notification delivery state so the same event is not emailed every scheduler cycle. A failed delivery is not marked as delivered and can be retried later. Changing the mail provider does not reset event delivery history.

Target-Health Monitoring

SSLNexus checks registered deployment targets every five minutes through their configured SSH or WinRM management channel. A notification is sent when a target changes into a failed health state. Certificate-operation failures continue to generate their own job-failure notifications.

Access Control

Only Administrators can view or change mail-provider and notification configuration. Operators and Read-only users do not receive access to provider credentials or notification settings.