Can anybody tell me, How to issue a certificate using Domino CA.
Thanks in advance,
Nagendar Gouru
Subject: Regarding Domino CA
Have you read from Lotus Administrator Help the section
Security
Domino Server-based certification authority
That explains all…
You probably forget to run the CA process on the domino server.
(Step 3 below)
But here is a brief:
-
Migrate any existing certifiers to the CA process.
-
Create new certifiers
-
Add certifiers to the CA process on the server.
At console on CA server:
load ca
tell adminp process all
tell ca refresh
tell ca stat
- For each Internet certifier, set up the Certificate Requests database.
Template name is Certificate Requests (R6) template (CERTREQ.NTF)
Name your db as whatever.
- Set up SSL on the server if need be.
Not need for using with encrypted email only.
SSL is used to connect to Lotus Notes or for website encryption.
- Fill out the About page in the certificate request db. Automatic still needs approval from admin process db (admin4.nsf). An adminstrator needs to edit doc in admin4.nsf and select approve or reject).
Clients log on to the website that means you also need have http running as a process.
i.e load http
the clients request from the request db on a website.
i.e
if you named the Certificate Request db as
CertificateRequest.nsf and your servers full domain name is
server.yourdomain.com then they log onto
http://server.yourdomain.com/CertificateRequest.nsf
They must use the same browser & computer to request and pickup certificates. After they they can export from the respective Certificate Manager (usually as pkcs#12 file)
Then you need to pull approvals from admin4.nsf (action on Certificate Request db).
An email is then automatically generated on the server and issue to the approved recipient.
They click a link and its imported into the respect client software i.e
outlook / outlook express use for an certificate manager the Internet Explorer (tools - Internet Options - Content (tag) - [Certificates]
netscape / mozilla the certicate manager is
Edit - Preferences - Privacy & Security - Certificates - [ Manage Certificates ]
Lotus stores the certificates in the user.id
to add…
File - Security - User Security - type password
then Your Identity - Your Certificates.
Certificate Manager’s all have the same format… just worded differently.
Tag 1 ( Your Certificate )
Tag 2 ( Other peoples certificates)
Tag 3 ( Websites)
Tag 4 ( CA’s that you trust)
you can’t add to Tag1 - Tag3 without a trust relationship with Tag 4.
i.e tag 2 might display
ibm CA
-
Joe Bloggs
-
John Doe
To be able to add Joe and John you must have logged onto ibmCA and accepted into your browser (trust certificate .cer).
I hope that helps…
P.S I also set my one up with websphere
I had a posting on this site if you are interested.