Re: Certificate Authority and IDBxxxxx.DTF files?

[Arjen ter Horst <a.terhorst@xxxxxxxxx>]

I can only post from my experience in setting up SSL. A few comments...

IDB*.DTF files are temporary files, but as far as I know, these aren't 
related to certificate issues.
Don't delete them, unless your Domino server is down.

About keyrings:
You need a server keyring on each mail server.
These keyrings are created with the server certificate admin, not the CA 
admin.
The correct steps to follow are mentioned in the adminhelp, but can be 
very confusing:
- Open the CA admin and follow steps 1-3 of the configuration.
- Open the server cert admin and follow steps 1 and 2 for each server.
- The cert.req's should be posted to the CA admin database (you can use a 
web browser to do this, if you have http running)
- Open the CA admin again and approve the requests (menu: Server Cert 
Reqs)
- Get each server's certificate from the CA admin db
- In the server cert admin, use step 4 to insert the signed certificate.

I only know the error 'document not found', it is a known issue, and has 
to do with the used form. 
Closing the CA admin and reopening certsrv in your Notes client should 
help.

One question: Are you sure your Outlook accepts your Domino CA?

Best regards,

Arjen ter Horst

Domino / AS400 engineer
InformatiseringsCentrum
Saxion Hogescholen Enschede - Deventer
W: www.saxion.nl