25.06.2013 Views

Lotus Domino Administrator 7 Help - Lotus documentation

Lotus Domino Administrator 7 Help - Lotus documentation

Lotus Domino Administrator 7 Help - Lotus documentation

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

3. Enter the old password, and then click OK.<br />

4. Enter a new password, and then click OK.<br />

Configuring the <strong>Domino</strong> Certificate Authority application profile<br />

The <strong>Domino</strong> Certificate Authority application profile identifies the CA’s key ring file and specifies the<br />

name of the CA server. <strong>Domino</strong> adds a link to the CA server when you send a message to clients and<br />

server administrators who request certificates. The clients and server administrators use this information<br />

to determine where to pick up certificates.<br />

1. Make sure you created a CA key ring file and certificate.<br />

2. From the <strong>Domino</strong> <strong>Administrator</strong>, click Files, and open the <strong>Domino</strong> Certificate Authority application.<br />

3. Click Configure Certificate Authority Profile.<br />

4. If necessary, enter the CA key ring path and file name in the CA Key File field. By default, Notes<br />

looks for the key ring file on the local hard drive. You can also specify a network drive accessible to<br />

other administrators.<br />

5. Enter the TCP/IP DNS name of the server that runs the CA application in the Certificate Server DNS<br />

name field. <strong>Domino</strong> uses this name to indicate where to pick up signed certificates in the messages<br />

sent to administrators and clients.<br />

Field Action<br />

Use SSL for certificate<br />

transactions?<br />

Certificate Server port<br />

number<br />

Mail confirmation of<br />

signed certificate to<br />

requester?<br />

Submit signed certificates<br />

to AdminP for addition to<br />

the Directory?<br />

Choose one:<br />

v Yes (default) to specify whether the e-mail message generated during the security<br />

request process includes a reference to the SSL port for secure certificate pick-up.<br />

v No to specify SSL will not be used.<br />

Enter the number of the TCP/IP port for the server. <strong>Domino</strong> uses this port when<br />

sending an e-mail notification to clients to pick up certificates. The default is 80.<br />

Choose one:<br />

v Yes to generate an e-mail confirmation for a signed certificate request.<br />

v No (default) to not send the confirmation.<br />

Choose one:<br />

v Yes (default) to submit the signed certificate request to the Administration Process,<br />

which then stores this certificate in the <strong>Domino</strong> Directory.<br />

v No to not submit the certificate.<br />

Default validity period Specify the period, in years, for which the signed certificate is valid. Default is 2 years.<br />

6. Click Save & Close.<br />

7. Set up SSL on the CA server.<br />

Setting up SSL on the CA server<br />

Because server administrators and clients use browsers to access the CA server to request and pick up<br />

certificates, use SSL to protect the CA server. When you set up the CA server for SSL, you create the<br />

server key ring file and request a server certificate. <strong>Domino</strong> automatically approves the server certificate<br />

and merges the CA certificate as a trusted root.<br />

1. Make sure you configured the <strong>Domino</strong> Certificate Authority application profile.<br />

2. From the <strong>Domino</strong> <strong>Administrator</strong>, click the Files tab, and open the <strong>Domino</strong> Certificate Authority<br />

application.<br />

3. Click Create Server Key Ring & Certificate.<br />

Appendix J Setting Up a <strong>Domino</strong> 5 Certificate Authority 1833

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!