Obtaining the SSL certificate directly from the Lotus Domino serverAdded by IBM on November 23, 2011 | Version 1 (Original)
|When configuring SSL for IBM® Sametime, you can import a copy of the SSL certificate directly from the IBM Lotus® Domino® server.
When configuring SSL for IBM
® Sametime, you can import a copy of the SSL certificate directly from the IBM Lotus
About this task
When the Lotus Domino
server was configured to use SSL, an SSL server certificate was received from a Certification Authority (CA) and merged into the Lotus Domino
Server Certificate Admin (certsrv.nsf) database. In this procedure, you export a copy of that certificate and save it as a file so that you can import it into Sametime in a later task.
Parent topic: Obtaining a copy of the SSL certificate used by Lotus Domino
- Open a browser and navigate to the Lotus Domino server where you enabled SSL.
The steps below use the Microsoft
® Internet Explorer browser; steps for your own browser may differ.
You can locate the Lotus Domino
server by navigating to the Sametime server that is hosted on the same computer, using an address similar to the following (replace Sametime.acme.com
with your fully qualified Internet host name):
- Install the SSL certificate in Microsoft Internet Explorer to ensure it is available for export:
- When prompted to "select the certificate to use when connecting," click OK.
- At the "Security Alert" dialog box, click View Certificate.
- At the "Certificate" dialog box, click Install Certificate.
- At the "Certificate Manager Import Wizard" screen, click Next.
- Click the Automatically select the certificate store based on the type of certificate option, and then click Next.
- Back at the "Certificate Manager Import Wizard" screen, click Finish.
- When the message indicating that the SSL server certificate was imported successfully appears, click OK repeatedly until you have closed all of the dialog boxes.
- Now export the SSL certificate from Internet Explorer and save it as a file.
- From the browser, click Tools -> Internet Options.
- Click the Contents tab.
- Click the Certificates button.
- Click the Other People tab.
- Scroll down the list of certificates and select the server certificate that you imported earlier in this procedure.
The certificate name should provide some indication that the certificate is associated with the Domino server from which it was imported. For example, if the certificate was imported from a server named Sametime®.acme.com, the certificate might be issued to "Sametime" or to "Example."
- Click the Export button.
- At the "Certificate Manager Export Wizard" screen, click Next.
- At the "Certificate Export File" screen, select Base64 encoded X.509 (.CER), and then click Next.
- At the "Export File Name" screen, provide a name for the file, select the Sametime server's data directory as the location where you want to store the file, and then click Next.
For example, on Windows®, you might enter SSLservercertificate.cer as the file name. and select C:\Lotus\Domino\data as the location.
Note: On IBM i, save the file directly to your server if you have mapped to the server drive. Otherwise, save the file on your client workstation and transfer it to your IBM i server later.
- When the message appears indicating the export was successful, click OK.