SSL/TLS Email: Test e-mail failed; SMTP configuration error

[SheldonDsouza]

We are trying to configure 2 types of APC UPS in our environment:

Smart-UPS RT 6000 RM XL

Model Number:	AP9631
Serial Number:	5A1142T00064
Hardware Revision:	05

Name:	aos
Version:	v5.1.3

SMTP Server is set with Authentication (Username and Password), but there is no advanced option for TLS

Smart-UPS 3000

Model Number:	Smart-UPS 3000
Serial Number:	AS2037164231
SKU:	SMT3000RMI2UC

Firmware Revision:

UPS 03.7 (ID1015)

Name:	aos
Version:	v6.5.6

SMTP Server is set with Authentication (Username and Password), and we have tested out SSL/TLS (Port 587) (Always, If Supported and Implicitly) but all three gives the error 

Test e-mail failed; SMTP configuration error.

Last Server Response

220 2.0.0 Ready to start TLS

There is no CA Root Certificate Set. Also both the UPS Firmware are not updated. 

Could someone assist on how to solve the issue. (We have checked and tested out the credentials and they are working fine on other devices that require SMTP TLS.)

Also if Firmware needs to be updated, could someone guide on the exact firmware that needs to be downloaded for these models.

Both UPS are having: UPS Network Management Card 2.

Note: If we use SMTP Port 25 Authentication (Username and Password) with not TLS , it works perfectly and we receive the Test Mail. But we require to use SSL/TLS in our environment.

Thanks!

[BillP]

@SheldonDsouza 

The cards are running very old firmware. You should update to the latest.

Here is a link: 

https://www.apc.com/us/en/product/SFSUMX708/ups-network-management-card-v7-0-8-firmware-for-smartups...

[SheldonDsouza]

@BillP I have managed to update the Firmware for the UPS and they are now showing the latest version v7.0.8

However, when we perform the SMTP Test, it's the same issue. (Do we need to reboot the UPS?)

[BillP]

@SheldonDsouza 

You do not need to reboot. The NMC reboots when the firmware is updated.

What SMTP service are you using? Google, Outlook, etc.? I know that with Gmail there is a requirement for two-part authentication. 

[SheldonDsouza]

@BillP, its a custom SMTP Server (Exchange Server Relay) smtpmail.shj.ae

Initially, the Organization provided us with an Open Relay that worked with Port 25 (Authentication with Username and Password but not TLS), till they changed it to a secure relay with Port 587

As said earlier those credentials work perfectly on other Devices where we changed to TLS, but for some reason, it doesn't work with the APC UPS. I can't find a way to Telnet from the UPS device as no commands are present. DNS Server set on the UPS device is resolving the IP of the Exchange Relay (DNS Test)

Is there a log that I can get that shows what seems to be happening (Detailed Log)

[SheldonDsouza]

@BillP You have any update on what needs to be done?

I have also updated the Device Firmware to SMT1015UPS_04-6

[JohnB58]

@BillP I stumbled upon this as I was researching same error.  The updated firmware made sense to try, but when I attempted the update I received the following errors:

Unable to update device  with Boot Monitor, stopping all further processing of this device!
Firmware distribution does not match target device platform; this could be due to a corrupt distribution.

Are you aware of another solution I should try or a different firmware I may need? My setup is as follows:

Model: Smart-UPS 1000
SKU: SMT1000
Firmware Revision: UPS 09.3 (ID18)

Model Number: AP9630
Hardware Revision: 05

Application Module
Name: sumx
Version: v6.6.4

APC OS (AOS)
Name: aos
Version: v6.6.4

APC Boot Monitor
Name: bootmon
Version: v1.0.8

Thanks for any insight you can provide.