I agree, documentation doesn’t explain well about TLS. But it’s supported, “Transport Layer Security”, page 174 in Administrator’s Guide. That’s different from HTTP and IMAP, that you can configure from Console. TLS is configured from SMTP Channels. If you want your SMTP channel only work with TLS you must specify “musttls” word. I think it use the same certificate that you install for HTTP and IMAP.