Hello,
you can activate it when creating a new mail domain or for an existing domain (check the "Secure connection (SSL)" box). You will see a list of available SSL-certificate. If they are not found, you will be able to generate a self-signed certificate.
Documentation