Information Technology Services

E-mail service at NDSU and other campuses supported by HECN-South was changed on September 18, 2006, to improve the security of the universities' electronic information, specifically by encrypting login IDs and passwords.

All users of NDSU's e-mail service (Firstname.Lastname@ndsu.edu) are now required to send and receive mail through secure connections to the network. This requires setting up a secure connection for incoming and outgoing mail in your e-mail client (Thunderbird, Outlook, Eudora, etc.). GroupWise and Webmail are already secure, so users of those e-mail clients do not need to take action at this time.

Those who did not set up secure e-mail connections by September 18 will find they are unable to read or send mail with their preferred e-mail client. The Webmail service is available and is always an option to send and receive e-mail.

These changes comply with the recently updated and approved NDUS Procedure 1901.2: Computer and Network Usage. If you have questions about securing your e-mail on campus or at home, please contact the ITS Help Desk at 231-8685, Option 1.

The configuration directions that follow are for all campuses with e-mail supported by NDSU.
When you see imap.ndsu.nodak.edu or smtp.ndsu.nodak.edu and you are NOT from NDSU, you should substitute your campus information as provided in the following table.

NDSU	imap.ndsu.nodak.edu	smtp.ndsu.nodak.edu
DSU	imap.dsu.nodak.edu	smtp.dsu.nodak.edu
LRSC	imap.lrsc.nodak.edu	smtp.lrsc.nodak.edu
NDSCS	imap.ndscs.nodak.edu	smtp.ndscs.nodak.edu
NDUS	imap.ndus.nodak.edu	smtp.ndus.nodak.edu
WSC	imap.wcs.nodak.edu	smtp.wcs.nodak.edu

• Securing your e-mail
• Note for HECN campuses
• Definitions
• Securing Eudora v 7.0.1 (Windows)
• Securing Eudora v 6.2.3 (Macintosh)
• Securing Outlook 2003 SP2
• Securing Mac Mail v 2.7.1
• Securing Pegasus v 4.3
• Securing Netscape v 7.2
• Securing Thunderbird v 1.5
• Securing Mac Thunderbird v 1.5.0.7
• Secure Connections FAQ

SSL (Secure Socket Layer) and TLS (Transport Layer Security) are used to create secure connections. SSL affects incoming mail, and TLS affects outgoing mail.

IMAP refers to incoming mail, and SMTP refers to outgoing mail.

The following directions are for the latest versions of the most popular e-mail clients. If your client looks different, please contact the ITS Help Desk at 231-8685, Option 1.

In most e-mail clients, select Help->About to find out what version you are using. We recommend that you upgrade to the most current version. If you have questions about upgrading your e-mail client, please contact the Help Desk at 231-8685, option 1.

Home Users Note: Because some ISPs require certain settings, be sure to document your current settings before you make changes in case you have to revert back. If you have problems with sending or receiving e-mail from home, please use Webmail.

1. From the Tools menu, select Personalities
2. In the Personalities box (left pane), right-click Dominant, and select Properties
3. Select the Generic Properties tab
4. Change SMTP server to smtp.ndsu.nodak.edu
5. Check the box Authentication allowed
6. Check the box for Use submission port (587)
7. In the Secure Sockets when Sending drop-down menu, select Required, STARTTLS
   
   
8. Click the Incoming Mail tab
9. Change Server to imap.ndsu.nodak.edu
10. In the Secure Sockets when Receiving drop-down menu, select Required, Alternate Port
    
    
11. Click OK
12. Restart Eudora for these settings to take effect

Home Users Note: Because some ISPs require certain settings, be sure to document your current settings before you make changes in case you have to revert back. If you have problems with sending or receiving e-mail from home, please use Webmail.

1. From the Special menu, select Settings
2. In the Settings window on the left pane, scroll down and select SSL
3. In the SSL for SMTP drop-down menu, select Required (TLS)
4. In the SSL for IMAP drop-down menu, select Required (Alternate Port)
   
5. Select Sending Mail in the left pane
6. Set SMTP server to smtp.ndsu.nodak.edu
7. Check the box that says Use submission port (587)
   
8. Click OK
9. Restart Eudora for these settings to take effect

Home Users Note: Because some ISPs require certain settings, be sure to document your current settings before you make changes in case you have to revert back. If you have problems with sending or receiving e-mail from home, please use Webmail.

1. From the Tools menu, select E-mail Accounts....
2. Select View or change existing e-mail accounts and click Next.
3. Select your e-mail account and click Change.
4. In the lower right corner, click the More Settings... button.
5. Click the Outgoing Server tab.
6. Check the box My outgoing server (SMTP) requires authentication.
7. Select Use same settings as my incoming mail server.
   
8. Click the Advanced tab.
9. In the Incoming server (IMAP) area, check the box This server requires an encrypted connection (SSL). If the server port number is not 993, insert 993
10. In the Outgoing server area, check the box This server requires an encrypted connection (SSL). If the server port number is not 587, insert 587
    
11. Click OK.
12. Click Next.
13. Click Finish.
14. Restart Outlook for these changes to take effect.

Home Users Note: Because some ISPs require certain settings, be sure to document your current settings before you make changes in case you have to revert back. If you have problems with sending or receiving e-mail from home, please use Webmail.

1. From Mail, go to Preferences, then to Accounts
2. Select your account, and click Account Information
3. On the Account Information tab, click the Server Settings button. (If you are using version 2.0.7, select Options)
4. Change the Server Port to 587
5. Check the Use Secure Sockets Layer (SSL) box
6. In the Authentication drop-down menu, choose Password
7. In the User Name field, enter your electronic ID (firstname.lastname). Note: For security purposes, we recommend that you do not enter your password in the password field. You will be prompted to enter your password when you open the application
   
8. Click the Advanced tab
9. Check the box that says Use SSL
10. Change the Port to 993
    
11. Click OK
12. Under the Mail menu, choose Quit Mail
13. Restart Mac Mail for these changes to take effect

Home Users Note: Because some ISPs require certain settings, be sure to document your current settings before you make changes in case you have to revert back. If you have problems with sending or receiving e-mail from home, please use Webmail.

1. From the Tools menu, select IMAP profiles
2. Select your imap profile
3. Click Edit
4. Change IMAP Server address to imap.ndsu.nodak.edu
5. Change the Server Port to 993
6. Insert your Login name (Firstname.Lastname). Note: For security purposes we recommend that you do not enter your password in the password field. You will be prompted to enter your password when you open the application
7. Click the Security tab
8. Select the Via direct SSL connect radio button
   
9. Select OK
10. Select Done
11. From the Tools menu, select Internet options
12. Click the Sending (SMTP) tab
13. Select your SMTP host, and click Edit
14. Change Server host name to smtp.ndsu.nodak.edu
15. Change Server TCP/IP port to 587
    
16. Select the Security tab
17. Check Via STARTTLS radio button
18. Under SMTP Authentication, check Login to the SMTP server using the following details
    • Insert your Username: (Firstname.Lastname) and
    • your Password:
19. There is no security risk with this authentication section because you will have entered your password when first starting this application.
20. Click OK
21. Then click OK again in the Internet Mail Options window
22. Restart Pegasus for these changes to take effect

Home Users Note: Because some ISPs require certain settings, be sure to document your current settings before you make changes in case you have to revert back. If you have problems with sending or receiving e-mail from home, please use Webmail.

1. From the Edit menu, select Mail & Newsgroups Account Settings
2. In the left pane, click Server Settings
3. For the Server Name, enter imap.ndsu.nodak.edu
4. In the Port field, insert 993
5. Check the boxes Use secure connection (SSL)
6. In the left pane, click Outgoing Server (SMTP)
7. In the Server Name field, enter smtp.ndsu.nodak.edu
8. In the Port field, insert 587
9. Under Use secure connection, choose TLS
   
10. Click OK
11. Restart Netscape for these changes to take effect

Home Users Note: Because some ISPs require certain settings, be sure to document your current settings before you make changes in case you have to revert back. If you have problems with sending or receiving e-mail from home, please use Webmail.

1. From the Tools menu, select Account Settings
2. In the left pane, click Server Settings
3. For the Server Name, enter imap.ndsu.nodak.edu
4. In the Security Settings, select the SSL button
   
5. In the left pane, click Outgoing Server (SMTP)
6. Select the server from the list, and select Edit. [It should be the first one and say (Default)]
   • **If there are no servers or yours is not listed, click the Add button
7. Change Server Name to smtp.ndsu.nodak.edu
8. Change the Port to 587
9. Check the Use name and password box
10. Enter your electronic ID (Firstname.Lastname) in the User Name field
11. Click the TLS button
    
12. Click OK to close the SMTP Server window
13. Click OK to close the Account Settings window
14. Restart Thunderbird for these changes to take effect

1. Go to Tools, and then Account settings.
2. In the Account Settings window, on the left side, click Server Settings.
3. In the Port box insert 993. Below that in the Security Settings panel, select the button for SSL.
4. Then go back to the list of options on the left side of the window, select Outgoing Server (SMTP). Select your account in the list that appears in the middle of the window, click edit.
5. In the Port box, insert 587. Below that check the box for "use name and password" and finally click on TLS under use secure connection.

Q. What changes are taking place?A. On September 15, 2006, all network communications for reading and sending e-mail must take place over encrypted connections, and access for reading or sending e-mail must be authenticated by the server. These changes comply with the recently updated and approved NDUS Policy 1901.2: Computer and Network Usage.

Q. Who will be affected by these changes?

A. All e-mail users will be required to use secure connections in their e-mail clients. These encrypt your connection so that information sent over the connection cannot be viewed and/or manipulated by a third party attempting to access the network. See instructions above for securing your e-mail client.

Q. I have configured my personal e-mail client to send work-related e-mail from home using my Internet Service Provider's mail server. How will these changes affect the e-mail I send from home?

A. You may suddenly find you are unable to send or recieve e-mail. You should configure your e-mail client to connect to NDSU's e-mail servers using SSL and TLS. See instructions for securing your e-mail client.

Q. What should I do if I am suddenly unable to read or send e-mail?

A. Call the ITS Help Desk at 231-8685, Option 1. The Webmail service is available and is always an option to send and receive e-mail securely.

Note: If you access other accounts with your e-mail client, such as Yahoo!, gmail, Hotmail, etc., the configurations of those accounts do not need to be changed. Only @ndsu.edu accounts and other NDSU work-related accounts need to be changed.