SECURING
To migrate an existing certifier to the CA process, you set up an Issued Certificate List (ICL) database and configure its certificate duration. In addition, for Internet certifiers, you configure CRL and key usage information for the certificate.
Procedure
1. From the Domino® Administrator, click the Configuration tab.
2. On the Tools pane, choose Certification -> Migrate Certifier.
3. In the Migrate Certifier dialog box, click Select.
4. In the Chose id/keyring file dialog box, select the cert.id of the certifier you want to migrate:
What to do next
Complete one of the next tasks, depending on whether you are migrating a Notes® certifier or an Internet certifier.
Parent topic: Domino server-based certification authority
To migrate a Notes certifier
1. From the Domino Administrator, click the Configuration tab.
2. On the Basics tab, complete these fields:
Note: Although you can change the location of the ICL, it is recommended that you use the default directory and path.
Note: Encrypting a certifier ID with the password-protected Server ID protects only that certifier. If you use a lock ID, you have the option of using it with multiple certifiers. You then need to lock and unlock those certifiers simultaneously.
5. On the Certificates tab, complete these fields:
7. Add the certifier to the CA process.
Complete the task Adding a certifier to the CA process
To migrate an Internet certifier
1. Migrate the key ring file.
2. Complete the Migrate Certifier dialog as described in the section on creating an Internet certifier in the topic Creating a certifier for a server-based CA in the related links.
Related tasks Creating a certifier for a server-based CA Setting up a server-based Domino certification authority
Related reference Certificate Authority process tell commands