IBM Notes and Domino wiki: Lotus Notes: Steps to obtain and Import SSL certificate for encrypted mail

Steps to obtain and Import SSL certificate for encrypted mail

Added by Jeffrey Alberts | Edited by IBM contributor

Michael A Willard on June 11, 2009 | Version 22

Abstract

No abstract provided.

Tags: 7.x, 8.x, certificate, encryption, lotus notes, mail, Notes, security, s/mime

Technote # 1383011

VeriSign® Digital IDs for Secure Email allow you to digitally sign and encrypt your digital communications using a Class 1 Digital ID, bound to your validated email address. Recipients of your email will know that the content came from your email address and has remained private during transmission.

Steps to Obtain and Add x.509 SSL Certificate from VeriSign into ID File

VeriSign help https://knowledge.verisign.com/support/digital-id-support/index.html

1. Go to http://www.verisign.com/ and look for Digital IDs for Secure Email and purchase or request a 60 day free trial.

2. Choose your current browser as the certificate will be imported into your web browser.

3. Complete the enrollment form. Make sure that the email address you fill in is the actual address you intend to send encrypted/signed mail from. Once you obtain the certificate, the email address listed will appear as the digital signature when signing and encrypting messages.

4. After completing the enrollment form, you will be sent an email which will include a pickup ID and URL link.

5. After clicking the link sent through email, you will be prompted to accept the certificate into your web browser.
Image:Steps to obtain and Import SSL certificate for encrypted mail

6. Once the certificate is in the browser, you can access it from Tools > Internet Options.

7. Here you can access and export any certificates which are part of the web browser.

8. Now you can select the newly imported VeriSign Class 1 Digital certificate and export.
Image:Steps to obtain and Import SSL certificate for encrypted mail

9. Once the certificate is actually a physical file, you can then import this into your Notes ID file from File > Security > User Security.

10. Once the certificate is part of the ID file, you must send a signed message to the recipient you intend to start sending encrypted mail between.

11. Once the user receives the signed message, they will be prompted to cross certify.

12. After the user successfully cross certifies, they will send you a signed message as well and you will need to cross certify.

13. To verify the Internet certificate has been imported into your address book, you can check the contact record.
Image:Steps to obtain and Import SSL certificate for encrypted mail
14. Lastly, you will be able to send and receive encrypted messages to and from this particular user.

For related information, see "Exporting and importing Internet certificates" in the Lotus Domino Information Center.