Proxmox Mail Gateway Certificate Renewal with Internal CA

Published 19/07/2026

Description

An expired Proxmox Mail Gateway (PMG) HTTPS certificate causes browser security warnings and can also create certificate fingerprint issues in a clustered PMG environment. Contents: 0:00 - Introduction 0:12 - Description 0:52 - The Problem 1:34 - The Solution 6:08 - Conclusion In this video, I show how I renew and replace an internal SSL/TLS certificate on my Proxmox Mail Gateway servers using an Active Directory Certificate Authority. I start with a renewed certificate exported as a password-protected PFX file, convert it into the required PEM-based files using OpenSSL, create the pmg-api.pem file, upload it to the PMG server, and restart the PMG proxy service. This is not necessarily a universal fix for every NVIDIA DGX Spark, ASUS GX10, Ubuntu image, or local LLM setup. However, if your DGX Spark freezes while loading models, cancelling a model load, or pushing unified memory limits, checking your swap configuration is a useful troubleshooting step. This tutorial is useful if you are using: Proxmox Mail Gateway with internal certificates Microsoft Active Directory Certificate Services / AD CS A Windows internal certification authority A Proxmox Mail Gateway cluster OpenSSL to convert PFX certificates to PEM files Long-lived internal certificates for homelab or business infrastructure Using an internal CA is a practical option for internal Proxmox Mail Gateway management interfaces, but certificates still expire. This workflow helps you replace them cleanly and restore trusted browser access without ignoring certificate warnings. #Proxmox #ProxmoxMailGateway #SSL Follow me on X: https://l.samayas.eu/jo3eaYEf3E?P=YT&V=146 Buy me a Coffee : https://l.samayas.eu/jX6xL7EWhd?P=YT&V=146 Studio Equipment Camera Sony Alpha ZV-E10 II: https://l.samayas.eu/k7y95TREl0?P=YT&V=146 Secondary Camera Obsbot Tail Air: https://l.samayas.eu/iFQu9WfmCw?P=YT&V=146 Elgato Prompter: https://l.samayas.eu/fHVrqqXtSc?P=YT&V=146 Microphon