To sign a server certificate with a Domino 5 Certificate Authority

Before you begin, make sure that:

• The requesting server administrator has merged the Certificate Authority's certificate into the server key ring as a trusted root.
• You understand your organization's policy on signing certificates. Sign certificates only if the certificate requests comply with your organization's security policy.

2. Click Server Certificate Requests.

3. Open the request to sign.

4. Review the user information and distinguished name. Make sure that the information provided complies with your organization's security policy.

If you want to deny the request, complete Step 5. Otherwise, go to Step 6.

1. Enter a reason for the denied request.
2. If you do not want to notify the server administrator by e-mail, deselect "Send a notification email to the requester." Otherwise, Domino sends the server administrator an e-mail indicating that you denied the request and the reason why you denied the request.
3. Click Deny.

1. Enter a validity period. For short-term projects, 90 days is typical; for ongoing projects, you can enter several years.
2. If you do not want to notify the server administrator by e-mail to pick up the certificate, deselect "Send a notification email to the requester." Otherwise, Domino sends the server administrator an e-mail with a URL indicating the location to pick up the certificate.
3. Click Approve.
4. Enter the password for the CA's key ring file, and then click OK.

See also

Setting up SSL on a Domino server

Glossary