SECURING

Backing up and recovering a certifier

Back up each certifier that you create, so that you can recover if there is a problem -- for example, if error messages are generated by the certifier when you issue a lo ca or tell ca refresh command.

Parent topic: Domino server-based certification authority

To back up a certifier

Procedure

1. When you create a new certifier, keep a local copy of the certifier ID file.

2. After you create the certifier, make a copy of the ICL database and keep it in a safe place. Back up the ICL periodically to incorporate any changes you make to the certifier.

3. Make copies of the following (if you use them) and keep in a safe place:

To recover a certifier

Procedure

1. From the HCL Domino Administrator client, click Configuration.

2. On the Tools pane, choose Certification -> Modify Certifier.

3. Select the CA server from the list, and click OK.

4. Select the server that hosts the CA you want to modify, if necessary.

5. Select the certifier to recover by doing one of the following:

6. You may be prompted for the certifier ID and password. Enter the path and filename for the local copy of the ID that you created when you first set up the certifier, and click OK.
7. In the Modify Certifier dialog box, confirm that the certifier information is correct. Click OK.

Results

If the certifier is still having problems -- for example, configuration documents are corrupted or missing -- replace the ICL database with the back up copy. The location of the ICL database is specified in the certifier document.

Related tasks
Creating a certifier for a server-based CA
Modifying a server-based CA