Domino Consulting - HCL Domino Administrator 11.0.1 Help

SECURING

Importing and cross-certifying the IdP Internet certificate

When SSL is used between an IdP and Domino, import the IdP SSL certificate into the Domino directory and cross-certify it.

Procedure

1. Connect to the IdP using the Firefox browser.

2. Click the certificates lock icon in the address bar and view the certificates.

3. Click the Details tab and select the Certificates KeyUsage field.

4. Verify that the Certificates KeyUsage field contains values forCertificate Signer and CRL Signer. In the following example, the values are missing:Certificate fields without Certificate Signer and CRL Signer

If the

Certificates KeyUsage

field does not include these values, select the certificate one level up in the certificate hierarchy and confirm that you see the values.

5. Export the selected certificate and save it as a Base 64 encoded X.509 Certificate (.cer) file. In ADFS, use the following steps:

Select the Certificate Authority (issuer). It should show the

Certificate Signer

and

CRL Signer

values.

b. Start the Certificate Export Wizard:

Click

Server Manager

Tools

Certification Authority

ii. Select the certificate, right-click, and select Properties.

iii. On the General tab click View Certificate.

iv. On Details tab click Copy To File.

Export the file as type

Base-64 encoded X.509 (.CER)

Base-64 encloded X.509 (.CER) shown as export file format.

Example of page that shows when you complete the Certificate Export Wizard.

6. Import the certificate into the Domino directory used by the ID vault and web servers and then cross-certify it:

Open the directory in Domino Administrator.

b. Select People & Groups -> Certificates -> .

c. Select Actions -> Import Internet certificate.

d. Open the certificate in the Certificates view.

e. Select Actions -> Create cross certificate .

Note:

In the Issue Cross Certificate dialog box, click

Certifier

and switch to the root Domino domain certifier, for example /Renovations.

Cross-certify the certificate with the root Domino domain certificate.

g. The cross-certificate is added to the Certificates view under the category Not Categorized.

Parent topic: Preparing for SAML authentication
Previous topic: Completing Domino prerequisites for SAML
Next topic: Creating and replicating the IdP Catalog

Help on Help

All Help Contents

Help on Help

All Help Contents