Hello,
I generate a new Internet certificate for mail encryption, this should have 4096 bit encryption strength. I set this when creating the key. Then I assign the Internet certificate to the user who wants to send encrypted mails.
There the encryption strength appears in the person document in the directory but only with 1024 bit strength and is not accepted by the remote station because it does not fulfil the 4096 bit requirements.
What am I doing wrong?
I check the certificate in the user profile or in the Notes ID but it only says 1024 bit strength
Hello.
If the user document's [Certificates] - [Notes Certificate] - [Current Key Strength] is set to 1024 bit, first rollover the Notes Authentication public key to 4096 bit, since a 1024 bit Internet certificate will be issued.
However, if the previous 1024-bit key is stored in the InetPublicKey field, a 1024-bit key will still be issued after the rollover, so create the following agent and run it on the target user from the user view to delete the InetPublicKey fieldand delete the InetPublicKey field.
FIELD InetPublicKey := @DeleteField;
Regards,
Shigemitsu Tanaka
Hello
Thanks for the tip, I have now raised the cert.ID to 4096 bits, recertified all users and servers and set the maximum value in the security settings, but this is limited to 2048 bits. We are unable to set the key to over 2048 bit key strength in the user profile.
Screen from user profile
This are the settings in the security policy
Any idea what we should do or is this the limit ?
Thank you, best regards
Hello
It appears that certificates issued by the CA process will be 2048 bits or less.
As an alternative, how about issuing a 4096-bit client certificate with OpenSSL?
It would be possible to import the certificate into the Notes ID file.
Regards,
Shigemitsu Tanaka
