::SUPPORT :Certificate Installation

IBM-Lotus Domino Go 4.6.2.6+ Certificate Installation

Installing your Web Server Certificate

Your certificate will be sent to you by email. The email message includes the web server certificate that you purchased in the body of the email message. Copy the certificate from the body of the email and paste it into a text editor (such as notepad) to create text files. Name this file "Server.txt".

Installing the Root and Intermediate Certificates

Create 2 text files. The first file should be the Root Certificate. Name this file "GTE.txt". The second file should be the Comodo Intermediate Name this file "Comodo.txt".

Note: Be sure to include the -----BEGIN CERTIFICATE----- line and the ------END CERTIFICATE----- line.

Start the MKKF utility by typing mkkf Select O to open an existing key ring file. Type the name of the file (usually keyfile.kyr). You will be prompted for the password.

Note: If you start the 'mkkf' utility from the directory that contains your certificates you will not need to include the path.

Select R to receive a certificate into the Key Ring File
You will be prompted for the file name. Enter GTE.txt
Enter GTE Root CA for the label
Press 'Enter' to continue
Select W to work with Keys and Certificates
Select L to List/Select the key to work with
Find the GTE Root CA and select S to select this menu
Select T to mark this as a 'Trusted' root
Select Y - Yes, to confirm this request
Press 'Enter' to return to the pervious menu
Select X to exit the menu

Repeat from 'Select R' using the Comodo Intermediate certificate
Substitute GTE.txt with Comodo.txt
Substitute GTE Root CA with Comodo Intermediate

Installing your Web Server Certificate

From the main menu of the mkkf utility, select R to Receive a certificate into a Key Ring File
Enter the server certificate file name (eg. "server.txt")
Select W to Work with keys and certificates
Select L to List/Select the key to work with. Select N until you find the required file
Select S to Select this certificate
Select F to mark this key as the selected default key
Select X to exit this menu
Select C to Create a 'stash file' for the key ring
Note: This is an important step, which is often overlooked
Select X to exit the menu
Select Y - Yes, to save all changes to the key file and confirm the update

Enabling SSL on your Domino Go Web Server

Access the web server via your browser. Select 'Configuration and Administration Forms'
Scroll down to security. Select Security Configuration
Ensure 'Allow SSL connections using port 443' is selected
Ensure that the correct Key Ring file is listed
Apply the changes

You will then need to restart your Web Server