Optimum SSL

Certificate Installation

IBM-Lotus Domino Go 4.6.2.6+ Certificate Installation

Your certificate will be sent to you by email. The email message includes the web server certificate that you purchased in the body of the email message. Copy the certificate from the body of the email and paste it into a text editor (such as notepad) to create text files. Name this file "Server.txt".

Installing the Root and Intermediate Certificates

Create 3 text files. The first file should be the Root Certificate. Name this file "addtrust.txt" from the AddTrustExternalCARoot.crt file. The second file should be the UTNAddTrustServerCA.crt intermediate Name this file "UTN.txt". The third file should be the OptimumSSLCA.crt Intermediate Name this file "OptimumSSL.txt"

Note: Be sure to include the -----BEGIN CERTIFICATE----- line and the ------END CERTIFICATE----- line.

Note: If you start the 'mkkf' utility from the directory that contains your certificates you will not need to include the path.

Select R to receive a certificate into the Key Ring File

You will be prompted for the file name. Enter addtrust.txt

Enter AddTrustExternalCARoot for the label

Press 'Enter' to continue

Select W to work with Keys and Certificates

Select L to List/Select the key to work with

Find the AddTrustExternalCARoot and select S to select this menu

Select T to mark this as a 'Trusted' root

Select Y - Yes, to confirm this request

Press 'Enter' to return to the pervious menu

Select X to exit the menu

Repeat from 'Select R' using the UTNAddTrustServerCA.crt and OptimumSSLCA.crt intermediate certificates.

Substitute GTE.txt with addtrust.txt for the OptimumSSL.txt

Substitute GTE Root CA with AddTrustExternalCARoot and OptimumSSLCA for the Intermediate certificates

Installing your Web Server Certificate

From the main menu of the mkkf utility, select R to Receive a certificate into a Key Ring File

Enter the server certificate file name (eg. "server.txt")

Select W to Work with keys and certificates

Select L to List/Select the key to work with. Select N until you find the required file

Select S to Select this certificate

Select F to mark this key as the selected default key

Select X to exit this menu

Select C to Create a 'stash file' for the key ring

Note: This is an important step, which is often overlooked

Select X to exit the menu

Select Y - Yes, to save all changes to the key file and confirm the update

Enabling SSL on your Domino Go Web Server

Access the web server via your browser. Select 'Configuration and Administration Forms'

Scroll down to security. Select Security Configuration

Ensure 'Allow SSL connections using port 443' is selected

Ensure that the correct Key Ring file is listed

Apply the changes

You will then need to restart your Web Server