Installation guide

Using Secure Sockets Layer (SSL) with an Agent
86 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004
Installing the Root CA Certificate on Domino Web Server
The CA certificatethat youinstall on theDomino Webserver must be the sameone
that is installed on the web server that runs Identity Server services.
1. Go to the following directory:
Agent_Install_Dir\Agents\domino\utils
2. Add the same root CA certificate that is installed on the web server that runs
Identity Server services into the existing certificate database. At the command
line, enter the following command:
certutil -A -n cert-name -t "C,C,C" -d cert-dir -i cert-file
where:
❍ cert-name can be any name for this certificate.
❍ cert-dir isthe directory where the certificate and key stores are located. The
location is:
Agent_Install_Dir\Agents\domino\cert
❍ cert-file is the base-64 encoded certificate file.
For more information on the certutil utility, see the online help by entering
the following command:
certutil -H
3. To verify that the root CA certificate was installed properly in the certificate
database, enter the following command: