Setting up TLS on AUT servers

HCL Notes® clients connect to AUT servers over secure HTTPS connections. Before you configure AUT servers, complete this procedure to create an TLS certificate on AUT servers.

About this task

To create an TLS certificate on AUT servers, generate an TLS SHA-2 certificate in a keyring file, deploy the keyring file on the AUT servers, and import the certificate into the Domino directory of the AUT servers. .

Procedure

  1. Use OpenSSL (available on the Internet) and KYRTool (installed with Domino) to generate the keyring file for the AUT Servers to use. For instructions, see the article How to set up SSL using a third-party Certificate Authority (CA) on the HCL Software Support site.
  2. Copy the keyring file to the data directory of each AUT server.
  3. Import the certificate into the Domino directory:
    1. Copy the Internet certificate file to your Domino® Administrator client computer.
    2. From the Domino® Administrator, click the People & Groups tab and the Certificates view.
    3. Click Actions > Import Internet Certificates.
    4. Browse for and open the local certificate file.
    5. Verify that the certificate is selected in the Open Internet Certificates box and then click Accept All.
    6. Click View > Refresh and verify that the new certificate is now displayed in the Certificates view of the Domino® Directory.

What to do next

Next, create a Configuration document in the Domino directory for AUT servers.