SECURITY

Pushing trusted certificates to Lotus Notes clients
You can create cross-certificates in the Domino Directory for Internet certifiers and Lotus Notes certifiers and then push the cross-certificates to the Contacts application on Lotus Notes clients. The cross-certificates are used to establish client trust of a certifier when accessing servers, reading encrypted S/MIME mail, or installing signed Lotus Notes client plugins. When you push cross certificates, users are not required to create the cross-certificates or retrieve them from the Domino Directory.

You can also push Internet certifiers to clients and enable users to create cross-certificates themselves.

There are two ways to push certificates to clients' Contacts: through customization of the Lotus Notes client installation media or through security policy settings. The security policy settings approach provides more flexiblity because it allows you to more easily add, remove, or update certificates in clients' Contacts after installation. For example, when you use security policy settings, if a certificate expires and you replace it with a new one in the Domino Directory, you can cross-certify the new certificate and add the cross-certificate to the policy to automatically push it to clients. Or, if you revoke trust of a certificate by deleting its cross-certificate from the Domino Directory, the cross-certificate is automatically deleted from clients' Contacts.

Perform the following steps to push trusted certificates to clients:

1. If you want to push trust of an Internet certifier, first import the certifer into the Domino Directory.

2. Create cross-certificates in the Domino Directory for any Internet and Notes certifiers that you want clients to trust.

3. Use one of the following methods to push certificates to clients' Contacts:

Related topics