The server registration user interface automatically removes leading spaces and trailing spaces from passwords. Passwords cannot begin or end with a space. This also applies to certifier registration and user registration.

Before you register servers, plan and understand your company's hierarchical name scheme. The name scheme defines which certifier ID to use when you register each new server. In addition, make sure that you have access to each certifier ID, know its password, and have created ID recovery information for it.

If you have decided to use the IBM® Lotus® Domino® server-based certification authority (CA), you can register servers without access to the certifier ID file and its password.

The registration server, which is the server that initially stores changes to documents in the Domino Directory until the Domino Directory replicates with other servers, must be up and running on the network. To register servers from your workstation, you must have access to the registration server and have at least Author access with the Server Creator and Group Modifier roles in the ACL of the Domino Directory.

When you register a server, Domino does the following:

• Creates a server ID for the new server and certifies it with the certifier ID
• Creates a Server document for the new server in the Domino Directory
• Encrypts and attaches the server ID to the Server document and saves the ID on a disk or in a file on the server
• Adds the server name to the LocalDomainServers group in the Domino Directory
• Creates an entry for the new server in the Certification Log (CERTLOG.NSF)

• The registration process creates a certificate request in the Administration Requests database (ADMIN4.NSF) to be processed by the server's Internet CA
• The registration process creates a "create SSL key ring" request in ADMIN4.NSF
• Once you set up and start the new server and the "create SSL keying" request has replicated to it, the "create SSL key ring" request creates the server key ring file and an "enable SSL ports" request for the administration server of the Domino Directory
• The "enable SSL ports" request enables all the SSL ports on the new server and creates a "monitor SSL status" request for the new server
• The "monitor SSL status" request restarts all of the Internet tasks currently running on the new server so that the tasks will accept SSL connections

Related topics

Installing and setting up Domino servers
Hierarchical naming for servers and users
Registering a server
Notes and Domino ID security
Creating an additional organization certifier ID
Setting up an Internet certificate authority
Recertifying a user ID
Recertifying a certifier ID or a user ID
Certificates
Domino server and Notes user IDs
The Administration Process

Glossary