Front cover - IBM Redbooks

Figure 6-3 The Notes certificate
As mentioned, certificates are stored in Notes ID files. They are also stored in
Person, Server, and Certifier documents in the Domino Directory.
Given the nature of the contents of Notes ID files, it is best to think of them as
being a kind of specialized database that stores Notes certificates and
private/public key pairs. This database is then encrypted with the user’s
password.
When servers and users are registered, Domino automatically creates a Notes
certificate for each server and user ID file. These Notes certificates have
expiration dates, which means that a Notes ID must be recertified when its
expiration date approaches.
In addition, if a user or server name changes, the corresponding Notes ID must
be recertified so that a new certificate can bind correctly the public key to the new
name.
Note: Changing a name on a user ID may also affect the Internet certificates
present in that Notes ID file. We cover Internet certificates a little bit later;
however, it’s worth mentioning that more than just the Notes certificate is tied
to the server or user name in the Notes ID file.
Types of certificates
There are three types of Notes certificates you can have in your user ID:
► Notes multi-purpose certificates are used to identify the user for most
Notes purposes, such as logging in to Notes and accessing Notes databases
on Domino servers. The Notes multi-purpose certificates allow for strong
Chapter 6. Public key infrastructures 195