Install an SSL Certificate on IBM-Lotus Domino Go 4.6.2.6

Installing your Web Server Certificate

Your certificate will be sent to you by email. The email message includes the web server certificate that you purchased in the body of the email message. Copy the certificate from the body of the email and paste it into a text editor (such as notepad) to create text files. Name this file “Server.txt”.

Installing the Root and Intermediate Certificates

Create a text file. The file should be the Root Certificate. Name this file “rootca.txt”.

Note: Be sure to include the —–BEGIN CERTIFICATE—– line and the ——END CERTIFICATE—– line.
Note: If you start the ‘mkkf’ utility from the directory that contains your certificates you will not need to include the path.

1. Select R to receive a certificate into the Key Ring File
2. You will be prompted for the file name. Enter rootca.txt
3. Enter SSL Root CA for the label
4. Press ‘Enter’ to continue
5. Select W to work with Keys and Certificates
6. Select L to List/Select the key to work with
7. Find the SSL Root CA and select S to select this menu
8. Select T to mark this as a ‘Trusted’ root
9. Select Y – Yes, to confirm this request
10. Press ‘Enter’ to return to the pervious menu
11. Select X to exit the menu

Installing your Web Server Certificate

1. From the main menu of the mkkf utility, select R to Receive a certificate into a Key Ring File
2. Enter the server certificate file name (eg. “server.txt”)
3. Select W to Work with keys and certificates
4. Select L to List/Select the key to work with. Select N until you find the required file
5. Select S to Select this certificate
6. Select F to mark this key as the selected default key
7. Select X to exit this menu
8. Select C to Create a ‘stash file’ for the key ring

Note: This is an important step, which is often overlooked

9. Select X to exit the menu
10. Select Y – Yes, to save all changes to the key file and confirm the update
11. Enabling SSL on your Domino Go Web Server
12. Access the web server via your browser. Select ‘Configuration and Administration Forms’
13. Scroll down to security. Select Security Configuration
14. Ensure ‘Allow SSL connections using port 443’ is selected
15. Ensure that the correct Key Ring file is listed
16. Apply the changes
17. You will then need to restart your Web Server