Move SSL Cert from one server to another

HCL Domino Domino Forum
1

We created an SSL Certificate with Server1 and got it working. The database is now being moving to Server2 and the SSL Certificate needs to move too.

I’m assuming that I can’t just replicate the certsvr.nsf and create an appropriate site document for the server?

I’ve spoken to someone at Verisign and they’ve hinted that I need to export the SSL Cert from Server1 and then Import it into Serve2, but I can’t find any details on how to do that and there don’t seem to be any such options in the certsvr.nsf.

Can anyone offer me a few pointers?

Thanks

2

Subject: The KeyFiles …

…are the most important elements. You have to copy the files (you can take it name in the tab security in the site Document) in the new server (default names is keyfile.kyr and keyfile.sth), and modify the new site document to have the same keyfile name.

I can’t test it now, but i think it works.

3

Subject: certsvr.nsf

But what about the entries in the certsvr.nsf? Don’t theses need to go across somehow too or are they just a method to creating the key files?

So if I just copy the 2 key files and create the appropriate site document on server2 it should all work? I’ll give it a try.

Thanks

4

Subject: I think certsrv is a “tool”

It has the method to create a new Key file and to edit a existent key file (you can edit the key file copied from another server), but all the information (private key, public key, AC public key) are stored in the keyfile.kyr.

5

Subject: Thanks it worked