You can create a cross-certificate in the IBM® Domino® Directory
for an Internet certificate. After completing this step, you can push
the cross-certificate to IBM Notes® clients to
establish trust of the certifier on the clients.
Procedure
- From the Domino Administrator, click the People &
Groups tab and the Certificates view.
- Open the document for the Internet or Notes certifier that
you want to cross-certify.
- Click .
- Select the certifier to cross-certify and click OK.
- In the Issue Cross Certificate dialog
box click Certifier. (Do not click Cross
certify yet.)
- Use the Choose a Certifier dialog
box to select a server in the Domino domain and a certifier to issue
the cross-certificate:
- Use the default server or click Server to
specify a server.
Then select one of these options:
- Supply a certifier ID and password.
- Click Certifier ID if you want to use an
ID other that which is displayed.
- Otherwise, click OK, enter the password for the selected certifier
ID, and click OK.
- Use the CA Process. If you have
configured the Domino server-based
CA, select a CA configured certifier from the list and click OK.
- In the Issue Cross Certificate box,
click Cross certify.
- Click and verify that the Domino certifier issued the cross-certificate.
What to do next
Supply the cross-certificate to Notes clients through
install media or Security policy settings.