certificat-ssl.over-blog.com

Setting up the Server Certificate Admin application.

Domino automatically creates the Server Certificate Admin application during server setup.

If the Server Certificate Admin application is not available after you start the Domino server, use the Server Certificate Admin template (CSRV50.NTF) to create it.

Use the Server Certificate Admin application to:

ü  Request server certificates from either a Domino or third-party CA

ü  Add a CA certificate as a trusted root

ü  Manage server certificates in a key ring file

ü  Create a self-certified certificate for testing purposes

To set up the Server Certificate Admin application

1. Make sure you set up the server as a Domino Web server.

2. Edit the ACL of the Server Certificate Admin application, as follows:

•  
  •  
    • Add the names of server administrators who will need to obtain and manage server certificates. Assign Manager access.
    • Set -Default- access to No access to prevent others from using the database.

3. Create a server key ring file.

TipTo hide the Server Certificate Admin application when users choose File - Database - Open, deselect "Show in 'Open Database' dialog" in the Database Properties box.

http://www.ssl247.fr/

Advice:Before you begin, you should know the port which your server uses to listen for SSL connections.

1) Start the Certificate Request Generator. This is done by entering the following into your web browser:

à https://hostname:port/certificate

Where hostname is the name designated for your server, and port is the number of the port for SSL connections.

2) A form will be loaded into your web browser. Input the information at each prompt, then

Click the 'Generate Request' button. (If any required fields are left blank, you will be so prompted by the servlet.)

The Certificate Request Generator servlet will create three files:

yourdomain-key.der - the private key file
yourdomain-request.dem - the certificate request in binary format
yourdomain-request.pem - the certificate request in ASCII format

Advice:If you choose not to give a password, you will receive an unencyrpted RSA private key. If you do give a password, your private key will be PKCS-8 encrypted. With the latter, you must check the Use Encrypted Keys field on the SSL tab in the Server window of the Administration Console.

The last of the three files is the one to open and copy/ paste into the SSL247 web form (including the BEGIN and END tags).

ormal>`nlps>http://www.ssl247.com/ssl-certificate-signing-solutions/ssl-certificates/organization-validation.php

http://www.ssl247.fr/

You must create a SSL configuration file, before generating a CSR. This can be completed by running the following command:

# /usr/local/bin/genconf

When you run this command, the Big-IP will ask for your company information.

Country Name (2 letter code) [AU]:GB
State or Province Name (full name) [Some-State]:London
Locality Name (eg, city) []:London
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Global Sign
Organizational Unit Name (eg, section) []:IT
Common Name (eg, YOUR name) []:www.globalsign.net (Must be the Fully Qualifed Domain Name)
Email Address - Leave blank
Challenge Password - Leave blank
Retype Password - Leave blank

Run the following command to generate a new certificate request:

# /usr/local/bin/genkey www.yourdomain.com

Be sure to replace www.yourdomain.com with your Common name - FQDN (Fully Qualifed domain name). You will be prompted again for your company information during this step.

Country Name (2 letter code) [AU]:GB
State or Province Name (full name) [Some-State]:London
Locality Name (eg, city) []:London
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Global Sign
Organizational Unit Name (eg, section) []:IT
Common Name (eg, YOUR name) []:www.globalsign.net (Must be the FQDN - Fully Qualifed Domain Name)

http://www.ssl247.fr/

The CSR will be stored in the following: /config/bigconfig/ssl.crt/Fully Qualified Domain Name.crt

Copy the entire contents of the CSR, insuring to include

-----BEGIN CERTIFICATE REQUEST-----
and
-----END CERTIFICATE REQUEST-----