SSL 247 are authorised strategic resellers of Verisign,GlobalSign, Geotrust and RapidSSL products

IBM - Lotus Domino Go 4.6.2.6+

Installing your SSL Certificate / Web Server Certificate / Secure Server Certificate from ssl247.co.uk

Firstly when your issuance email arrives you will have two certificates in the email - your server certificate and a UTN chained certificate.

Copy the UTN chained certificate into a text editor such as notepad and save as chain.txt.
Copy your web server certificate into a text editor such as notepad and save as yourdomain.txt.
Copy the Root CA certificate found at the bottom of this page into a text editor such as notepad and save it as root.txt.

Installing the Root Certificate

1. Strt the MKKF utility by typing mkkf
2. Select "O" to Open an existing key ring file. Type the name of the file (usually keyfile.kyr). You will be prompted for the password.
   *Note: If you start the "mkkf" utility from the directory that contains your certificates you will not need to include the path.
3. Select "R" to receive a certificate into the Key Ring File.
4. You will be prompted for the file name. Enter root.txt.
5. Enter Chained SSL Root CA for the label.
6. Press <Enter> to continue.
7. Select "W" to work with Keys and Certificates.
8. Select "L" to List/Select the key to work with.
9. Find the "Chained SSL Root CA" and select "S" to Select this menu.
10. Select "T" to mark this as a Trusted root.
11. Select "Y" - Yes - to confirm this request.
12. Press <Enter> to return to the pervious menu.
13. Select "X" to exit the menu.

Installing the Intermediate Certificate

1. Select "R" to receive a certificate into the Key Ring File.
2. You will be prompted for the file name. Enter chain.txt.
3. Enter UTN Chained CA for the label.
4. Press <Enter> to continue.
5. Select "W" to work with Keys and Certificates.
6. Select "L" to List/Select the key to work with.
7. Find the "UTN Chained CA" and select "S" to Select this menu.
8. Select "T" to mark this as a Trusted root.
9. Select "Y" - Yes - to confirm this request.
10. Press <Enter> to return to the pervious menu.
11. Select "X" to exit the menu.

Installing your Web Server Certificate

1. From the main menu of the mkkf utility, select "R" to Receive a certificate into a Key Ring File
2. Enter the server certificate file name (eg. "yourdomain.txt").
3. Select "W" to Work with keys and certificates..
4. Select "L" to List/Select the key to work with. Select "N" until you find the yourdomain.key file.
5. Select "S" to Select this certificate.
6. Select "F" to mark this key as the selected deFault key.
7. Select "X" to exit this menu..
8. Select "C" to Create a "stash file" for the key ring.
   Note: This is an important step, which is often overlooked!
9. Select "X" to exit the menu.
10. Select "Y" - Yes - to save all changes to the key file and confirm the update.

Enabling SSL on your Domino Go Web Server

1. Access the web server via your browser. Select "Configuration and Administration Forms."
2. Scroll down to security. Select Security Configuration.
3. Ensure that "Allow SSL connections using port 443" is selected.
4. Ensure that the correct Key Ring file is listed.
5. Apply the changes.

Restarting your Web Server

You will need to stop and start your web server with the following commands: stopsrc -s httpd startsrc -s httpd

Test your certificate by using a browser to connect to your server. Use the https protocol directive (e.g. https://your server/) to indicate you wish to use secure HTTP.

The padlock icon on your browser will be displayed in the locked position if your certificates are installed correctly and the server is properly configured for SSL.

---

Root CA Certificate

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----