Rolling over cross-certificates

After you roll over a Notes® certifier, you must also roll over any cross-certificates that were signed with the issuing certifier's previous key.

Procedure

1. In the Domino® Administrator, click Configuration > Certification > Rollover Cross Certificates.
2. In the Select Cross Certificate list, select Rollover needed. This displays a list of cross certificates that were signed with the issuing certifier's previous key, and will need to be cross-certified with the new key.
3. Do one of the following:
   • Rollover all -- to roll over all of the cross certificates in the list.
   • Rollover selected -- to roll over individual cross certificates you selected by highlighting them in the list and .
4. You can get additional rollover status information. In the Select Cross Certificate list, select one of the following:
   • Rollover not needed -- to display a list of cross certificates that have been signed with the issuing certifier's new key. After you have rolled over cross certificates, you can verify that the roll over was successful, because the rolled-over cross certificates will appear in this list.
   • Rollover not possible -- to display a list of cross certificates that were not signed with rolled over certifier's previous or new key. These certificates cannot be rolled over.