Installing an SSL certificate on IBM-Lotus Domino Go 4.6.2.6+

Part one: Download and save certificates

1. Open the email we sent you, that contains the certificate for your domain name.

2. Copy the certificate, including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.

3. Paste the certificate into a blank document in a text editor. Use an editor that will not add characters, such as TextPad.

4. Save the document. We recommend that you name it YourDomainName.crt and save it in your Web server's default directory for SSL certificates.

   We recommend that you also back up your certificate on another computer or storage device.

5. Confirm which certificate you purchased, and determine which set of Root and Intermediate certificates to download.

   To confirm which certificate you purchased, review your order confirmation.

   • If you purchased SBS Instant, download set A below.

   • If you purchased SBS Secure or Secure Plus, download set B below.

   A -- SBS Instant

   • Instant Validation SBS Intermediate 2 CA
   • Instant Validation AddTrust Intermediate 1 CA
   • Instant Validation UTN Global Root CA

   -OR-

   B -- SBS Secure and Secure Plus with a "Valid from" date Nov 9, 2006 or later

   • Full Validation AddTrust Root CA
   • Full Validation Intermediate CA

6. Download the Root-Intermediate set for your domain name certificate. To download, right-click each certificate file name and select Save Target As.

   Save the Root and Intermediate certificates to the same directory where you saved the certificate for your domain name.

Part two: Install the Root and Intermediate Certificates

1. From the directory where your certificates are stored, start the MKKF utility by typing mkkf and clicking Enter.
2. Select O to open an existing key ring file. Type the name of the file (usually keyfile.kyr). You will be prompted for the password.

3. Select R to Receive a certificate into the Key Ring File.

   You will be prompted for the file name. Enter one of the following:

   • For SBS Instant, enter InstantValidationUTN-USERFirst-HardwareGlobalRoot.crt.

   • For SBS Secure or Secure Plus, enter FullValidationAddTrustRootRoot1.crt.

4. Enter the file name of this certificate to label it for future maintenance.
5. Press Enter to continue.
6. Select W to work with Keys and Certificates.
7. Select L to List/Select the key to work with.
8. Find your Root certificate and select S to select this menu.
9. Select T to identify this as a Trusted Root.
10. Select Y - Yes, to confirm this request.
11. Press Enter to return to the previous menu.
12. Select X to exit the menu.

13. If you purchased SBS Instant, repeat this procedure two more times, first with InstantValidationAddTrustUTNServerIntermediate1CA.crt and then with InstantValidationSBSIntermediate2CA.crt.

    -OR-

    If you purchased SBS Secure or Secure Plus, repeat this procedure one more time, with FullValidationAddTrustRootIntermediate3.crt.

Part three: Install the certificate for your domain name

1. From the main menu of the mkkf utility, select R to Receive a certificate into a Key Ring File.
2. Enter the file name of your certificate (for example, YourDomainName.crt).
3. Select W to Work with keys and certificates.
4. Select L to List/Select the key to work with. Select N until you find the required file.
5. Select S to Select this certificate.
6. Select F to mark this key as the selected default key.
7. Select X to exit this menu.

8. Important: Select C to Create a 'stash file' for the key ring.

9. Select X to exit the menu.
10. Select Y - Yes, to save all changes to the key file and confirm the update.

Part four: Enable SSL on your Domino Go Web Server

1. Access the web server via your browser. Select Configuration and Administration Forms.
2. Scroll down to security. Select Security Configuration.
3. Select Allow SSL connections using port 443.
4. Confirm that the correct Key Ring file is listed.
5. Apply the changes.
6. Restart your Web server.