HCL Notes and Domino 9.0 Social Edition Forum - Third Party CA Compatibility

Feb 8, 2017, 3:47 PM

20 Posts

Hi Mike,

Domino/Traveler doesn't really care about who is the certificate authority. The question really is does the device and browser recognize the Certificate Authority as a third party CA, this isn't something Domino/Traveler Support can answer but should be answered by the device/browser/certificate support.

iOS list of available trusted root certificates:
https://support.apple.com/en-gb/HT203065

If you want to see trusted CA in Android take any device and go to Settings> Security>trusted credentials:
https://images2.wondershare.com/answer_step/2015/0507/680x420_20150507003304964208901.png

Put it simply if some particular device/OS does not trust some certificate authority Domino/Traveler Support cannot do much with that.

--------------------------------------

How to set up SSL using a third-party Certificate Authority (CA)

Question
You have decided to use a third-party certificate authority such as Verisign, Entrust, or Thawte for SSL setup on a Domino server. What steps do you take to do so:

How to set up SSL using a third-party Certificate Authority (CA)
http://www-01.ibm.com/support/docview.wss?uid=swg21268695

~Jennifer Nonresazenakol

Feb 9, 2017, 11:55 AM

12 Posts

This is noted.

I already inquired with Certificate Authorities and requested a trial certificate.

Now it works and able to determine which CA can be used.

I hope IBM can also update third-party CA or collaborate with each other. There are guides is no longer valid since Domino 9 versions are being used.

AFAIK, the built-in Certificate Request on Domino 9+ is no longer compatible with the creation of keyring and unsuccessfully integrate of 3rd party certificates with Domino.

But this is greatly appreciated, thank you!

~Vera Zekfoogengon

Feb 13, 2017, 11:43 PM

196 Posts

IBM support for 3rd party CA

I don't think there is any intention to go back to supporting Certsrv.nsf as the means of generating a keyring and merging an independently signed certificate into the keyring. kyrtool has taken the place of Certsrv.nsf.