Is there an easy way to auto-generate internet certs for non-Notes users?

HCL Domino Domino Forum
1

I want to convert a Domino app to only allow access via X.509 certs but I need to generate certs for the existing users. There’s several thousand users so I’m looking for a batch solution. I don’t really want to manually approve all those self-service certificate requests.

These are internet only users so they don’t have any Notes certs so the Actions–>Add Internet Cert to Selected People option in the NAB doesn’t work. I see an error in the Certlog that says “The note does not contain either a public key or a certificate” which makes sense.

So has anybody come up with a solution for this or is there a recommended 3rd party app that solves this? I remember RSA had a key management thing for Notes a few years ago but it assumed you had NOtes users. I thought about generating Notes IDs for all these people and resetting their HTTP passwords but have no clue what problem that would create from a licensing standpoint.

TIA

2

Subject: Is there an easy way to auto-generate internet certs for non-Notes users?

Ok, there is a way but it’s not exactly easy the first few times you do it. Now that I understand the process it’s clear as mud.

You have to create your own Domino internet CA and then you can add that cert to the existing IDs.