Installation guide

Using Secure Sockets Layer (SSL) with an Agent
Chapter 3 Policy Agents on Microsoft Windows 87
Agent_Install_Dir\bin\certutil -L -d cert-dir
You should see the root CA certificate added and listed in the output of the
command.
4. Restart Domino Web Server.
Installing the Root CA Certificate on Microsoft IIS 5.0
1. Go to the following directory:
Agent_Install_Dir\iis\cert
2. Add the same root CA certificate that is installed on the web server that runs
SunONE Identity Serverintotheexisting certificate database.Atthecommand
line, enter the following command:
\Agent_Install_Dir\bin\certutil -A -n cert-name -t "C,C,C" -d cert-dir -i cert-file
where:
❍ cert-name can be any name for this root CA certificate.
❍ cert-dir isthe directory where the certificate and key stores are located. The
location is:
Agent_Install_Dir\iis\cert
Table 3-3 Example of certutil -L Output
Certificate Name Trust Attrubutes
cert-name C,C,C
p Valid peer
P Trusted peer (implies c)
c Valid CA
T Trusted CA to issue client certs (implies c)
C Trusted CA to certs(only server certs for ssl) (implies c)
u User cert
w Send warning