Purpose: SSL/TLS certificate installation guide
For Lotus Domino

NOTE:
As of November 12, 2024, Entrust introduced a new TLS certificate hierarchy as part of the deployment. The TLS certificate delivery now includes two certificate chains. The delivery of these certificate chains can be in the form of:

• Individual files. Intermediate 1 (filename: intermediate1.crt ) and Intermediate 2 (filename: intermediate2.crt ) or
• Concatenate PEM file (filename: CertificateBundle1.pem/CertificateBundle2.pem ) or
• P7B format file (filename: Certificatebundle.p7b )

Both intermediate/chain certificates must be installed in your environment.


Skip to Installation.

Before you begin...

• Never share private key files.

• If you plan on using the same certificate on multiple servers always transfer the private key using a secure method ( e-mail is not considered a secure method of transfer ).

• Make sure you run the SSL Server Test at the end of the installation process to check your certificate configuration against SSL/TLS Best Practices.

• For more information on SSL/TLS Best Practices, click here .

Installing your Entrust SSL/TLS Certificate on a Lotus Domino Server

1. Click the Download button in the pickup wizard to download your certificate files. Clicking the download button will produce a zip file that includes your Server Certificate, the Entrust intermediate certificate and the Entrust Root certificate. Extract the files from the zip file.

You must install these certificates in such a way that the certificate chain is built starting from the root level. You must install the certificates in this exact order:

Root.crt
Intermediate.crt
ServerCertificate.crt

2. Open the Server Certificate Administration utility on the server.

3. Select Install Trusted Root into Key Ring .

4.  In the Key Ring File Name field, enter the name of the Key Ring file that you generated when you created your Certificate Signing Request. Under Certificate Source , select the File radio button and browse to the Root.crt file. If you get a message saying that this root is already installed, proceed to the next step.

5. For a second time, select Install Trusted Root into Key Ring and import the Intermediate.crt file into the same key ring.
NOTE: As of November 12, 2024, the intermediate certificate came with two files: intermediate1.crt and intermediate2.crt. These intermediate/chain certificates must be imported into your server/appliance.


6. Select Install Certificate into Key Ring .

8. In the Key Ring File Name field, enter the name of the Key Ring file that you generated when you created your Certificate Signing Request. Under Certificate Source , select the File radio button and browse to the ServerCertificate.crt file to complete the installation process.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.