The Domino server that runs the Exchange Busytime Connector task must contain a credential store, as well as a certificate store configured properly for free time lookups in Microsoft 365.

Procedure

1. If you don't have a credential store on the server that runs ExConn, create one according to the procedure that applies to your environment in Using a credential store to store credentials.

2. If you don't have a certificate store on that server, create one as follows:

a. Create a certificate store on the server using the load certmgr console command. This starts the Certificate Manager task, which will create the certstore.nsf database.

b. Open certstore.nsf.

c. In the navigation pane, click Certificate Authorities in the list of configurations, Then clickAdd Account to add a new certificate authority.

d. In the Status field selectEnabled, enter any name, and in theType field selectMicroCA.






e. Click Save & Close.

• (Recommended) If you have administrative access to the console on the CertMgr server, you can use the CertMgr console command to import Digicert Global Root CA and Digicert Global Root G2 (which exist in the Domino directory) into certstore.nsf as follows:
  
  a. Run the following commands:
  
  load certmgr -ImportRootFromUrl https://login.microsoft.comload certmgr -ImportRootFromUrl https://graph.microsoft.com

  CertMgr adds the trusted root documents in certstore.nsf,

  
  b. Skip to step 5c.
• Alternatively, you can manually copy the pem encoded certificates for the trusted roots and paste them into certstore.nsf on the CertMgr server as follows:
  
  a. Locate "Digicert Global Root CA" and "Digicert Global Root G2" in the cacert.pem file in the Domino data directory.

  b. Proceed to step 4.

a. In the navigation pane of certstore.nsf, click Trusted Roots and then click Add Trusted Root.

b. From step 3, copy the first certificate from the BEGIN CERTIFICATE line to the END CERTIFICATE line, and then click Paste Certificate.






c. Click Submit.

d. Repeat for the second certificate.

a. In the navigation pane, click By HostName in the list of TLS credentials, and then click Add TLS Credentials.

b. On the Main tab, fill in the following fields as shown:





For Host names enter the DNS name or names.
For Servers with access enter the DNS name or names.
For Certificate provider enterMicroCA.
For Certificate authority enter the certificate authority added in step 2.
For Keyring file enter the server's keyring file, for example keyfile.kyr orServerName_keyfile.kyr.
c. On the Security/Keys tab in theTrusted Roots section, enter the names of the DigiCert Global Root certificates added in step 3.

Note: If you used the CertMgr console commands to add the certificates, you can just select the certificates and mark them as validated/trusted.

d. Click Submit Request.

What to do next

Do the steps in Adding an application in Microsoft Azure AD

Parent topic: Setting up free time lookups for Microsoft 365

Help on Help

All Help Contents

Help on Help