Link to home
Start Free TrialLog in
Avatar of ausadmin
ausadmin

asked on

Setting up a Notes Certificate Authority

Hi All

I've been trying to setup a certificate authority.  The help was reasonable but had one serious ommission under the step:
     Requesting an SSL server certificate
                           From a Domino CA using a Web browser - step 8 it
                                    tells you (kind of) to go to the root certificate
                                    authority website but doesn't give u the address.

It's https://<servername>/certca.nsf?OpenDatabase

But when I go there paste my certificate in and go 'request server certificate' - it tells me the request has been submitted but I get nothing in my email.

How to troubleshoot a non-action?
Avatar of qwaletee
qwaletee

Heh, you are he first perso I recall who has tried to set up Domino as an SSL cert auth.

Which version of Domino are you using?
Avatar of ausadmin

ASKER

6.5.3 - any decent instructions on it anywhere.  The stuff on the lotus website is very short on detail.

I think you need to approve that request in the CA DB. If you open CA DB, go to certificate registration, you should be able to approve the request from there. This will submit an AdminP request, so you can follow it through that as well. At the end of that is when you should receive the email

GL :)


Just checked my email & found something you may find useful.

It's a couple of weeks away, but SearchDomino.com have a webcast on CA ...

WEBCASTS:  Live Webcast: Certificate authorities -- a primer
SPEAKER: Dave Hatter, Libertas Technologies
DATE/TIME: Nov. 23, noon EDT (16:00, GMT)
In this webcast you will learn how to use certificate authorities in a Domino environment: what they are, how they work, why you need them, and pros & cons of trusted certificates vs. self-generated certificates.

Might be an opportunity to ask some experts focussed on CA any questions you have at that time ...

GL :)

Avatar of Sjef Bosman
I recall I did it myself once: setting up a Domino CA, on R5.something, just to get basic SSL working. I followed the description at least twice, removing everything in between, but then it worked. Read very carefully the things you have to do, and it will work.
ASKER CERTIFIED SOLUTION
Avatar of madheeswar
madheeswar
Flag of Singapore image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial