HCL Domino - Configuring Global Settings - Need a Domino Consultant? Call NotesMail +1 212-599-2048

HCLSoftware Business Partner Domino Consulting Services CRUCIAL Notes Tools +1 212-599-2048	Domino Consulting Services CRUCIAL Notes Tools Domino administration Notes development	Chat now
.

Need a Domino Consultant? Call NotesMail +1 212-599-2048 - HCLSoftware Business Partner

SECURING

Configuring Global Settings
Configure Global Settings to set default values to use for certificate management.

About this task

Global Settings provide default values that are applied to TLS Credential documents that you create to generate certificates. The default values can be modified when you create the TLS Credentials documents.

Procedure

1. Open certstore.nsf.

2. Click Edit Global Settings.

3. In the Admin server field, select the Domino server that will manage certificate processing for the domain.

4. In the Key algorithm field, select one of the following options:

RSA Then, select a Key Size. The default key size is4096.
ECDSA. Then, select a Curve Name. The default is curve name is NIST P-384. For more information on ECDSA, see ECDSA cryptography support for ACME accounts and for host keys.

5. In the Certificate provider field, select one of the following options:

ACME Select this option to use the Let's Encrypt CA.
Manual Select this option to use another third-party CA.

6. If you selected ACME as the certificate provider, in theACME account field, select one of the following options:

LetsEncryptStaging Select this option when testing.
LetsEncryptProduction Select this option for production use.

The staging environment is suitable for testing because it has a higher rate limit and uses an untrusted root certificate. The staging environment's root certificate is not included in any browser. You should manually install it for the duration of the testing and then immediately remove it.

The Let's Encrypt production environment has stricter rate limits and will fail temporarily if you exceed the limits.

For more information, see the Let's Encrypt documentation on https://letsencrypt.org/docs/rate-limits/.

Parent topic: Managing TLS certificates with Certificate Manager

Help on Help

All Help Contents

Help on Help

All Help Contents