The server on which you issue Internet certificates must be set up for the Administration Process, and the users must have an Internet address specified in their Person documents. In addition, you must add Internet certificates that are created using a Lotus Domino certifier.

To issue an Internet certificate in a Person document

1. Make sure you have the Administration Process set up on the server.

2. From the Lotus Domino Administrator, click People & Groups.

3. Select the names of the users who need Internet certificates.

4. Choose Actions - Add Internet Cert to Selected People.

5. Check to make sure that the name of the correct registration server appears at the top of the dialog box next to the Server button. If it does not, click Server to choose the correct registration server.

6. Choose whether to supply the certifier key ring file and password, or to use the CA process.

• If you choose to supply the certifier key ring file and password, select the CA's key ring file, and when prompted, enter the password.
• If you choose to use the CA process, choose a certifier from the drop-down list.

8. Click Certify.

9. The certifier processes the request.

If you chose to provide a certifier ID, Lotus Domino creates a certificate for each selected user and stores it in an "Add Internet Certificate to Person Record" request in the Administration Request database.

If you chose to use the CA process, a certificate request is created in the Administration Request database for each selected user. When the CA processes the request, it creates the "Add Internet Certificate to Person Record" request.

1. When the Administration Request database replicates with the Lotus Domino Directory's administration server, the Administration Process places the certificate in the user's Person document.
2. After the Lotus Domino Directory replicates with the user's mail server and the user subsequently accesses the mail server, Lotus Notes recognizes there is a certificate in the Lotus Domino Directory that is not in the user's ID file. Lotus Notes automatically places the Internet certificate in the user's ID file.

Setting up Notes and Internet clients for SSL client authentication
Creating Internet certificates for Notes S/MIME clients
Publishing third-party CA client certificates in a Person record
Setting up the Administration Process
Recertifying or renaming user IDs by organization

Glossary