Setting up Notes clients to send encrypted messages

Lotus Notes clients need the following to send encrypted messages:

• The recipient's Internet certificate stored in Contacts, the IBM® Lotus® Domino®, Directory, or LDAP directory. If the Internet certificate is stored in a Lotus Domino Directory in another domain or in an LDAP directory, the directory needs to be accessible using directory assistance.
• A cross-certificate issued for either the recipient or the CA that issued the recipient's Internet certificate. This cross-certificate must be stored in the client's Personal Address Book.

  Note It is not necessary to have the cross-certificate prior to sending S/MIME encrypted mail. Users will be prompted to generate the cross-certificate when they try to send the message.

To decrypt sent messages and send signed messages, Lotus Notes clients need an Internet certificate stored in the Lotus Notes ID file.

Setting up Notes clients to verify signed messages

To verify the signature on a signed message, Lotus Notes clients need a cross-certificate issued for either the sender of the message or the CA that issued the sender's Internet certificate. This cross-certificate must be stored in the client's Personal Address Book.

Related topics

Mail encryption
Adding an Internet certificate and cross-certificate for encrypted S/MIME messages
Creating Internet certificates for Notes S/MIME clients
Creating an Internet cross-certificate for a CA
Using SSL when setting up directory assistance for LDAP directories
Creating a Directory Assistance document for a remote LDAP directory
Directory assistance
Setting up Notes and Internet clients for SSL authentication

Glossary