Renewing a Totemomail Certificate: 4096-Bit Key, PKCS#12 Import, and Restarting Each Node

Totemomail’s request dialog generates only 2048-bit keys without alternative names. However, many internal CAs now sign only 4096-bit keys. The key and request are therefore created with openssl, followed by ordering from the PKI team, PKCS#12 import, connector binding, and restarting each node.

October 6, 2026 Kiteworks / Totemomail 12 min read

Kiteworks: Vendor Recommends Shutdown on September 26 – What Is Known So Far

Kiteworks asked its customers to shut down all systems on Saturday, September 26, 2026, from 4:00 a.m. to 10:00 a.m. Final report: During the shutdown, the vendor found and closed a critical flaw without a CVE; on September 30, 125 advisories followed, including CVE-2026-54154 (CVSS 10.0) in the Email Protection Gateway. Totemomail is not affected.

September 25, 2026 Kiteworks / Totemomail 12 min read

When the log fills the disk: properly limiting log4j2 RollingFile, using totemomail as an example

A log volume filling up can bring down the entire gateway in the worst case. Why combining time- and size-based rotation without %i creates a single huge file, how strategy.max caps retention, the role of the log level, and where totemomail hides these values.

September 4, 2026 Kiteworks / Totemomail 9 min read

Essential Controls for TotemoMail Admins: Stop the Server, Check Queues, and Clean Up in a Controlled Manner

The key controls for operating a totemomail gateway: stop the service via systemd and the Tanuki control script, count queue contents per repository, inspect individual messages, clean up in a controlled manner, and restart the service.

August 28, 2026 Kiteworks / Totemomail 9 min read

Passwordless Linux Server Access: Set Up SSH Key Login with PuTTY, Pageant, and More

Admins who access Linux servers daily have to enter a username and password every time when using password login. An SSH key pair reduces this to a double-click: generate a key with PuTTYgen, store the public key on the server, and load Pageant. The same key works in WinSCP, MobaXterm, and OpenSSH, and if desired, takes you straight to a service account shell.

August 28, 2026 Kiteworks / Totemomail 9 min read

SMTP Load Testing with Apache JMeter in Practice: 10,000 Emails, Five Rule Paths, One HTML Report

A complete load test from A to Z: a test plan with a message mix along the ruleset paths of an encryption gateway, a portable setup without installation, 10,000 emails in a burst, and analysis using the JMeter HTML report—including the issues that actually occurred.

August 24, 2026 SMTP and Mail Flow 11 min read

Rebuilding Apache James Rule Sets in a Structured Way: Tools and Method

Mailet rule sets that have grown over the years contain dead paths that no one recognizes anymore. Learn how to analyze the rule set as a graph, reliably find unreachable code, and design the migration so that a single Mailet keeps the rollback path open.

August 11, 2026 Kiteworks / Totemomail 16 min read

Totemomail license limit reached: clean up orphaned users via LDAP

Disabled AD accounts remain in totemomail and continue to consume licenses. With a verified LDAPS connection and the Cleanup Agent, Active Directory becomes the authoritative source.

June 26, 2026 Kiteworks / Totemomail 9 min read

Understanding Mail Routing Between TotemoMail and Exchange Online

How TotemoMail stores and processes messages, how the underlying Apache James switches between processors, and what matters for a secure mail loop with Exchange Online.

June 17, 2026 Kiteworks / Totemomail 10 min read