Configuring the Certstore database for TLS
Specify TLS communication settings in the Certstore database (certstore.nsf).
Before you begin
- You will need to perform the following steps on the Certmgr server and then replicate the Certstore database to Domino IQ servers.
- The Certmgr server needs to run Domino 14.5 and the design of certstore.nsf must be upgraded to the latest template.
Procedure
- From the Domino Administrator client, open certstore.nsf.
- Go to the TLS Credentials By Hostname view, and click the Add TLS Credentials button.
- In the Hostname field, enter localhost.
- In the Servers with access field, select the Domino IQ servers that have the Use TLS option enabled.
- In the Certificate Provider field, select MicroCA. In the Certificate Authority field, select DominoMicroCA.
- Click on the Create Exportable keys button. Provide the password for the exportable keys.
- Click the Submit Request button.
- Refresh the view and ensure that the Certmgr server processes the localhost TLS Credentials document successfully.
-
Now, go to the Configurations\Certificate Authorities view in the Certstore
database. Open the DominoMicroCA document and click the Create
Trusted Root button.
The localhost certificate under the DominoMicroCA Trusted root certifier is ready for use on Domino IQ servers.
- For faster access, replicate the Certstore database to the Domino IQ servers.