04/10/23 07:46 PM 5864_ER_FED 1

Importing Certificates intoLotus Notes R6

04/10/23 07:46 PM 5864_ER_FED 2

Steps to Import Certificates into Lotus Notes

• Export the digital ID from Internet Explorer

• Import the digital ID to your Notes ID file

• Make sure this certificate will be used for Internet mail from Notes

• Use the digital ID as you send and receive e-mail from Notes

• Do this process for the encryption and authentication certificates

04/10/23 07:46 PM 5864_ER_FED 3

Exporting your Certificates to a File – Step 1

• In Internet Explorer click on Tools > Internet Options. Click on Content tab then the Certificates… button

04/10/23 07:46 PM 5864_ER_FED 4

Exporting your Certificates to a File – Step 2

• You will need to export both certificates you just downloaded to files

• Select the first IECA certificate listed and click on the Export…. button

04/10/23 07:46 PM 5864_ER_FED 5

Exporting your Certificates to a File – Step 3

• Click Next

04/10/23 07:46 PM 5864_ER_FED 6

Exporting your Certificates to a File – Step 4

• Select “Yes, export the private key”

• Click Next >

1

2

04/10/23 07:46 PM 5864_ER_FED 7

Exporting your Certificates to a File – Step 5

• Select “Personal Information Exchange”

• Click “Include all certificates…” and “Enable strong protections”

• Click Next >

123

4

04/10/23 07:46 PM 5864_ER_FED 8

Exporting your Certificates to a File – Step 6

• Enter a Password and confirm the password

• Chose a strong password since the export file will contain your private key

• This will be used when you import the certificate into Lotus Notes

• Click Next >

04/10/23 07:46 PM 5864_ER_FED 9

Exporting your Certificates to a File – Step 7

• Enter a unique name for this certificate

• When you export your second certificate you will need to enter a different file name or the first certificate file will be overwritten

• The system will automatically add the extension .pfx

• Click Next >

04/10/23 07:46 PM 5864_ER_FED 10

Exporting your Certificates to a File – Step 8

• Click Finish

04/10/23 07:46 PM 5864_ER_FED 11

Exporting your Certificates to a File – Step 9

• Click OK

• Then OK again on “The export was successful” message

• Go back to Step 2 and select the other certificate to export

• Close the Window once you have exported your second certificate

04/10/23 07:46 PM 5864_ER_FED 12

Import the Digital ID to Notes R6 ID File – Step 1

• In Lotus Notes, choose File > Security > User Security

• Expand Your Identity

• Click on the Your Certificates

• Click on the Get Certificates button and select Import Internet Certificates... from the popup menu

04/10/23 07:46 PM 5864_ER_FED 13

Import the Digital ID to Notes R6 ID File – Step 2

• Browse to where you saved your certificates and select one of them

• Click Open

• Click Continue

• Enter the password you chose above when you exported your certificate and click OK

04/10/23 07:46 PM 5864_ER_FED 14

Import the Digital ID to Notes R6 ID File – Step 3

• You will see a list of several certificates that are contained in the exported digital ID file.

• Click Accept All

• Click OK after noting the information on the screen

• Repeat Steps 1 through 3 for your second certificate

04/10/23 07:46 PM 5864_ER_FED 15

Import the Digital ID to Notes R6 ID File – Step 4

• Click the expand arrow next to Your Notes Certificates and select Your Internet Certificates from the drop down list

04/10/23 07:46 PM 5864_ER_FED 16

Import the Digital ID to Notes R6 ID File – Step 5

• Verify that both certificates have been imported into Lotus Notes

04/10/23 07:46 PM 5864_ER_FED 17

Edit your Location Document

• Click on File > Mobile > Edit Current Location…

• Click on the Mail tab

• In the “Format for messages…” line select MIME Format using the drop-down arrow

• Click Save and Close

04/10/23 07:46 PM 5864_ER_FED 18

Exchanging Public Keys

• Before you can send someone an encrypted message you must first exchange public keys

– Send the individual a message signed with your digital certificate• Click on Delivery Options in the menu and check the box next to Sign

under Security Options

– Request the individual send you a signed email

– When you open the signed message, you may be prompted to cross certify. Click Yes.

– Confirmation that the message was signed will appear in the status bar

– Then choose Tools > Add Sender to Address Book from the menu

04/10/23 07:46 PM 5864_ER_FED 19

Exchanging Public Keys

• Ensure the default action (on the Advanced tab) has "Include x.509 certificates when encountered“ checked

• When a Contact document is added to your personal address book, the sender's public key will be available to you and you will be able to encrypt messages to him or her

• If you would like a person to be able to encrypted mail to you, simply reverse the process

04/10/23 07:46 PM 5864_ER_FED 20

Use your Digital ID with Notes

• When composing an e-mail message, click the Delivery Options button to open the Delivery Options dialog box

• On the Basic tab, select Sign (to authenticate the message) or Encrypt (to make the message secret), or both