× SSL247 joins forces with Sectigo CA - Find Out More...
Our accreditations and awards:
Cookies
0 items Total $0

Knowledge Base

  

Problem

You want to apply the SSL certificate to your IIS servers and to your Domino web server as well.

Resolution 

  1. Create an export pfx file from IIS
  2. Go to a domino server and from a prompt, find the directory : \domino\jvm\bin directory. Run the file "ikeyman" within it
  3. Create a new Key DB file by browsing to the IIS exported pfx file and importing it as PKCS
  4. Examine the imported certificated and note the certificate settings such as Organisation, OU, L…
  5. Close ikeyman
  6. Create a new key ring file using the Secure Certificate Admin db on Domino
  7. Give it the same settings as the original IIS certificate noted down in step 4.
  8. Install the trusted root certificate into the key ring file.
  9. Copy the .kyr and .sth files to the server where ikeyman runs and where the PKCS file generated in step 3 was located.
  10. Download the gsk version of ikeyman to handle Domino key ring files from here : ftp://ftp.software.ibm.com/software/lotus/tools/Domino/gsk5-ikeyman.zip
  11. Extracted zip file to folder ‘gsk’ on server (folder can be called anything but no spaces)
  12. Run ‘gskregmod.bat Add’ from command prompt within extracted folder
  13. Launched the ikeyman from dos prompt in the newly extracted folder by typing ‘”runikeyman.bat”
  14. Choose Key Database File – Open and select the kyr file that was copied to the server in step 9.
  15. Go to Personal Certificates and click ‘Import’ then choose ‘PKCS’ and import the file generated in step 3. 
Was this information Useful?
Comments

Privacy Policy