Firstly when your issuance email arrives you will have two certificates in the email - your server certificate and a chained root certificate.
Copy the chained root certificate into a text editor such as notepad and save as chain.txt .
Copy your web server certificate into a text editor such as notepad and save as yourdomain.txt .
Copy the Root CA certificate found at the bottom of this page into a text editor such as notepad and save it as root.txt .
Installing the Root Certificate |
| 1. |
Start the MKKF utility by typing mkkf
|
| 2. |
Select "O" to Open an existing key ring file. Type the name of the file (usually keyfile.kyr). You will be prompted for the password.
*Note: If you start the "mkkf" utility from the directory that contains your certificates you will not need to include the path. |
| 3. |
Select "R" to receive a certificate into the Key Ring File. |
| 4. |
You will be prompted for the file name. Enter root.txt .
|
| 5. |
Enter Chained SSL Root CA for the label . |
| 6. |
Press <Enter> to continue |
| 7. |
Select "W" to work with Keys and Certificates. |
| 8. |
Select "L" to List/Select the key to work with. |
| 9. |
Find the "Chained SSL Root CA" and select "S" to Select this menu. |
| 10. |
Select "T" to mark this as a Trusted root. |
| 11. |
Select "Y" - Yes - to confirm this request. |
| 12. |
Press <Enter> to return to the pervious menu . |
| 13. |
Select "X" to exit the menu. |
| Installing the Intermediate Certificate |
| 1. |
Select "R" to receive a certificate into the Key Ring File. |
| 2. |
You will be prompted for the file name. Enter chain.txt. |
| 3. |
Enter Chained CA for the label |
| 4. |
Press <Enter> to continue. |
| 5. |
Select "W" to work with Keys and Certificates. |
| 6. |
Select "L" to List/Select the key to work with. |
| 7. |
Find the "Chained CA" and select "S" to Select this menu |
| 8. |
Select "T" to mark this as a Trusted root |
| 9. |
Select "Y" - Yes - to confirm this request. |
| 10. |
Press <Enter> to return to the pervious menu. |
| 11. |
lect "X" to exit the menu. |
Installing your Web Server Certificate |
| 1. |
From the main menu of the mkkf utility, select "R" to Receive a certificate into a Key Ring File |
| 2. |
Enter the server certificate file name (eg. " yourdomain.txt "). |
| 3. |
Select "W" to Work with keys and certificates |
| 4. |
Select "L" to List/Select the key to work with. Select "N" until you find the yourdomain.key file. |
| 5. |
Select "S" to Select this certificate |
| 6. |
Select "F" to mark this key as the selected deFault key. |
| 7. |
Select "X" to exit this menu. |
| 8. |
Select "C" to Create a "stash file" for the key ring.
Note: This is an important step, which is often overlooked! |
| 9. |
Select "X" to exit the menu. |
| 10. |
Select "Y" - Yes - to save all changes to the key file and confirm the update. |
Enabling SSL on your Domino Go Web Server |
| 1. |
Access the web server via your browser. Select "Configuration and Administration Forms. |
| 2. |
Scroll down to security. Select Security Configuration |
| 3. |
Ensure that "Allow SSL connections using port 443" is selected. |
| 4. |
Ensure that the correct Key Ring file is listed. |
| 5. |
Apply the changes. |
Restarting your Web Server |
| You will need to stop and start your web server with the following commands: stopsrc -s httpd startsrc -s httpd Test your certificate by using a browser to connect to your server. Use the https protocol directive (e.g. https://your server/) to indicate you wish to use secure HTTP. The padlock icon on your browser will be displayed in the locked position if your certificates are installed correctly and the server is properly configured for SSL. |
| Troubleshooting If you receive a "Cannot find certificate issuer among trusted roots" error message when importing the root certificate, please try converting it to a binary format certificate from a base 64 format certificate.
|
| |
