Front cover - IBM Redbooks

276 Lotus Security Handbook
3. The CA processes the request and returns instructions on how to pick up the
certificate via e-mail. The instructions provide a URL and pickup ID where the
signed client certificate can be picked up.
4. The user connects to the stated URL, enters the pickup ID and picks up the
signed client certificate.
5. The signed client certificate is installed into the S/MIME-capable messaging
client.
6. a. It is possible to go one step further and publish the user’s certificate by
sending it to one of the public directory providers. Often the CAs
themselves will have this facility available.
b. Alternatively, it is also possible to use the S/MIME-capable messaging
client to publish the client certificate to one of the public directory providers.
Obtaining a recipient’s certificate for S/MIME
In the current generation of S/MIME-capable messaging client, there are a
couple of methods for obtaining a recipient’s certificate.
The first method is to have the recipient send to the user a signed message.
When the user receives it, the S/MIME-capable messaging client will
automatically add the sender’s certificate to the list of stored certificates.
Similarly, if the user sends a signed e-mail to another e-mail user who uses an
S/MIME-capable messaging client, that person will obtain a copy of the user’s
certificate.
The second method is to provide access to LDAP to permit users to search
online directories (such as Four11, Bigfoot, Switchboard, and so forth). If the
required certificate is stored in one of these directories, the user will be able to
add it to the personal address list of the S/MIME-capable messaging client.
6.2.10 Using Lotus Notes 6 as an S/MIME client
Once there is a CA-based infrastructure in place for the benefit of the Lotus
Notes user community within the organization, it is as simple for the users to
send and receive S/MIME messages as it is for them to send and receive Notes
mail messages. In this section, we show how well integrated the Lotus Notes 6
client and the Domino Server 6 are with S/MIME.
How Notes R5.0 implements S/MIME
For traditional Notes users who understand Notes certificates and Notes ID files,
the concepts of encrypting and signing should be nothing new.