Domino


Generating a Certificate Signing Request (CSR) using Lotus Domino Server 4.6x and 5.0x

Please note, as of January 2011, all CSR’s must be generated with a key length of 2048

For version 4.6x:

  1. From the administration panel, click “System Databases” and choose “Open Domino Server Certificate Administration (CERTSRV.NSF)” on the local machine. Click “Create Key Ring”.
  2. Enter a name for the key ring file in the “Key Ring File Name” field.
  3. Enter a password for the server key ring file in the “Key Ring Password” field. Note: The password is case sensitive.
  4. Select a key size. This is the size Domino uses when creating the public and private key pairs. Note: If you are using the international version of Domino, only the 512 bit key size will work for you unless you have Release R5.04.
  5. Specify the components of your server’s distinguished name.
  6. Click “Create Key Ring”. Click “OK”.
  7. Click “Create Certificate Request”.

Note: You must select all the text in the second dialog box, including Begin Certificate and End Certificate when the CSR is requested.

For version 5.0x:

  1. Launch the Domino Administration client.
  2. Select “File-Open Serve”r and select the Domino server you wish to administer, Click the “File” tab, double click on the “Server Certificate Administration” database (certsrv.nsf).
  3. From the administration panel, click “System Databases” and choose “Open Domino Server Certificate Administration (CERTSRV.NSF)” on the local machine.
  4. Click “Create Key Ring”.
  5. Enter a name for the key ring file in the “Key Ring File Name” field.
  6. Enter a password for the server key ring file in the “Key Ring Password” field. Note: The password is case sensitive.
  7. Select a key size. Note: If you are using the international version of Domino, only the 512 bit key size will work for you unless you have Release R5.04.
  8. Specify the components of your server’s distinguished name.
  9. Click “Create Key Ring”. Click “OK”.
  10. Click “Create Certificate Request”.

Note: You must select all the text in the second dialog box, including Begin Certificate and End Certificate when the CSR is requested.