Internet certificates for SSL and S/MIME
Before Internet and Notes® clients can use client authentication or send signed mail, they must have an Internet certificate. To send encrypted mail using S/MIME, they must have the recipient's Internet certificate.
About this task
You need to complete these steps for Internet and Notes clients who are creating new public and private keys for the Internet certificate. You do not need to complete these steps if you are using a Notes client and the CA issued certificates in the Person document of the Domino® Directory. Notes automatically adds Internet certificates stored in the Person document to the Notes ID file when the user authenticates with the server.
You can also set up Notes clients to use different certificates for signing and encryption. You designate one Internet certificate authentication and signing, and another for encryption.
To obtain an Internet certificate for a Notes client
About this task
The procedure that Notes clients follow to request an Internet certificate is the same whether a Domino CA or third-party CA issues the certificates.
Procedure
- Have users request an Internet certificate.
- The CA approves the request by signing the certificate, and Domino automatically adds the client's Internet certificate to the user's Person document.
- Have users merge the Internet certificate into their ID file.
Results
For information on how Notes users request and merge Internet certificates into their ID files, see the IBM® Notes 9.0.1 Social Edition Help.
You can also issue Internet certificates for Notes clients in Person documents so that users aren't required to submit Internet certificate requests .