Select the "Use submission port (587)" checkbox.
Choose "Required, STARTTLS".
If, when sending mail, you get an error
message that says (in part)
Cert Chain not trusted, click the "Last SSL Info" button in the Sending
Mail settings (see image above) and repeat the steps for setting the
certificate detailed on the previous page.