SECURING


Migrating a certifier to the CA process

To migrate an existing certifier to the CA process, you set up an Issued Certificate List (ICL) database and configure its certificate duration. In addition, for Internet certifiers, you configure CRL and key usage information for the certificate.

Procedure

1. From the Domino® Administrator, click the Configuration tab.

2. On the Tools pane, choose Certification -> Migrate Certifier.

3. In the Migrate Certifier dialog box, click Select.

4. In the Chose id/keyring file dialog box, select the cert.id of the certifier you want to migrate:

5. The certifier ID's path and filename now appear in the Migrate Certifier dialog box. Enter the password for the certifier ID or key ring file and click OK.

What to do next

Complete one of the next tasks, depending on whether you are migrating a Notes® certifier or an Internet certifier.

Parent topic: Domino server-based certification authority

To migrate a Notes certifier

Procedure

1. From the Domino Administrator, click the Configuration tab.

2. On the Basics tab, complete these fields:


3. For Encrypt Certifier ID with, choose one:
4. Optional: In the Administrators list, enter names of additional CAAs and RAs. The name of the administrator migrating the CA is automatically included in the list as both a CAA and an RA.

5. On the Certificates tab, complete these fields:


6. Click OK. A message appears saying that you have successfully migrated the certifier.

7. Add the certifier to the CA process.

What to do next

Complete the task Adding a certifier to the CA process

To migrate an Internet certifier

Procedure

1. Migrate the key ring file.

2. Complete the Migrate Certifier dialog as described in the section on creating an Internet certifier in the topic Creating a certifier for a server-based CA in the related links.

Related tasks
Creating a certifier for a server-based CA
Setting up a server-based Domino certification authority

Related reference
Certificate Authority process tell commands