Contenido

CSR Support

Lotus Domino 4.6 and higher

Creating a Certificate Signing Request

Open Notes Workspace and choose the database you set up for your web server to enter the Server Certificate Administration application.

Select Create Key Ring.

Type your key ring file name

Type your key ring password

Confirm password by retyping it.

Warning: If you lose the key ring password, you must purchase a new certificate.

3. When creating a CSR you must follow these conventions.

Enter the Distinguished Name Field information.

The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.

Distinguished Name Field	Explanation	Example
Key Size	Bit length - determines key length	1024
Common Name (Server Host Name)	The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.	If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com
Organization Name	The exact legal name of your organization. Do not abbreviate	IPS S.L.
Organizational Unit	Optional for additional organization information	Marketing
City or Locality	The city where your organization is located.	Atlanta
State or Province Name	The state or province where your organization is located. Can not be abbreviated.	Georgia
Country Name	The two-letter ISO abbreviation for your country	US = United States

Click OK in the Key Ring Created dialog box.

Select Create Certificate Request.

Type your key ring file name

Type your password

Click Create Certificate Request

Note: Remember to back up your key pair file.

Submit your CSR to IPSCA.

CSR installation

Installing a Server Certificate on a Lotus Notes or Domino Server

This document introduces installing a Server Certificate, and answers questions you might have.

Installing a Server Certificate

Installing the certificates on Lotus Domino Server requires the certificates to be merged into the Key Ring file.

This process must be completed for both root certificates provided.

In Notes, from the administration panel, click System Databases and choose Open Domino Server Certificate Administration (CERTSRV.NSF) on the local machine.
Click Install trusted root Certificate into Key Ring (option 3).
Enter the file name for the Key Ring that will store this certificate. The Key Ring file was created when you created the server Certificate Signing Request.
Select the correct certificate file from our web page (root CA and intermediate ipsCACLASEA1).
Select File in the "Certificate Source" field. Enter the file name in the file name field.

You will need to import the certificates in the below order

ipsCA Root Certificate
Intermediate ipsCACLASE A1 Certificate

Click "Merge Certificate into Key Ring."
Enter the password for the server key ring file and click OK to approve the merge.

Once all of the root certificates are installed you will need to install the site certificate following the below instructions

From your e-mail program, save the Server Certificate PRIVACY-ENHANCED message to a file, such as cert.txt. You do not need to save the entire e-mail message body, only the "PRIVACY-ENHANCED MESSAGE" section.
Open the SSL Administration interface.
Choose merge certificate into key ring.
Specify the Global Server Certificate file name. This is the file name you specified when you saved your Global Server Certificate in Step 1. You must enter the full path to the specified file, for example c:\notes\data\cert.txt.
Specify the key ring file name, keyfile.kyr. This is the file name you specified when you created your key ring. You must enter the full path to the specified file, for example c:\notes\data\keyfile.kyr.
Enter your key ring password. This is the password you entered when you created the key ring.

For additional information, please refer to your server documentation.

return to the top

© 1996 - 2007 ipsCA, IPS Certification Authority, S.L. all Rights reserved.
Our CPS summarized or complete, CRLs, Root Certificates and legal documents
can be found in our repository
Read our Privacy Policy and Terms of Use

Explanation