Lotus Notes 8.5

Installing RTE Historical CA certificate

RTE’s certificates will be installed by "Cross certification" when you received your first signed-encrypted email from the application (here).
Note:

The "Cross certification" is a process which makes a user able to install the certificate of another entity while he receives a message form that entity. Messages sent to that specific entity will be encrypted with that "Cross certification".

Installing your personal certificate

Creation of a PKCS#12 file readable by Notes

Lotus Notes can install a certificate and its associated private key only from a PKC #12 file that contains RTE Historical CA. This is not the case for the file "name_certificate.p12" you downloaded when you retrieved your certificate.

To generate a file accepted by Lotus Notes, install RTE Historical CA and your certificates in a browser and then export your personal certificate as a PKCS#12 file. Depending on the browser you are using, perform one of the procedures below.

• With Microsoft Internet Explorer:
• Install RTE Historical CA certificate, see here.
• Install your personal certificate making sure to check the case "Mark this key as exportable." here.
• Export your certificate in a PKCS#12 file making sure to check the case "Include all certificates in the certification path if possible", here.
• With Mozilla Firefox:
• Install RTE Historical CA certificate, see here.
• Install your personal certificate, see here.
• Export your certificate to a PKCS#12 file, see here (RTE Historical CA will automatically be included).

Installing the PKCS#12 file in Notes

Start Lotus Notes and access to "File > Security > User Security…": If requested, enter your Notes password: The following window appears: Click "Your Identity" then "Your Certificates": Select "Your Internet Certificates" in the drop-down list to display the Internet certificates already imported.

Click the "Get Certificates…" button and select "Import Internet Certificates…": A window appears asking you to select a PKCS#12 file (extension ".pfx" or ".p12"). Select the file you generated here containing your personal certificate, its private key and RTE Historical CA’s certificate: Click " Open ".

In the window below choose the format PKCS12: Click "Continue". The PKCS12 file’s password is requested: Click "OK".

the window below is displayed: Your personal certificate you want to import, and the RTE Historical CA’s certificate, are listed. If you click "Advanced Details…" the content of the selected certificate (yours) appears in the window: Click "Cancel" to go back to the previous window.

To see the content of RTE Historical CA’s certificate, you must select it: And click "Advanced Details…": To ensure that you have downloaded the real RTE Historical CA's certificate, check carefully that the "SHA1" hash displayed is identical to the one shown below. If this is not the case: click "Close" to go back to the precedent window and click "Cancel" then call RTE’s Hotline (here).

Click "Close" to go back to the main screen: Click "Accept All". Enter your Notes password and click "OK". Click "OK", the window below appears: The certificate, now visible here, has successfully been imported. Click "OK" to end the import.

Visualization of the certificate

To view your certificate, access the menu "File > Security > User Security…", then click the item "Your Identity" and "Your Certificates".
Select "Your Internet Certificates" in the drop-down list. Select your personal certificate and click the "Advanced Details…" button.

The certificate’s details are then presented in the window below: To view RTE Historical CA's certificate, access the menu "File > Security > User Security…", then click the item "Your Identity" and "Your Certificates".
Select "All Internet Certificates" in the drop-down list. To see the content of RTE Historical CA’s certificate, you must select it, and click "Advanced Details…": To ensure that you have downloaded the real RTE Historical CA's certificate, check carefully that the "SHA1" hash displayed is identical to the one shown below. If this is not the case: click "Close" to go back to the precedent window and click "Cancel" then call RTE’s Hotline (here).

Email account configuration

If you have multiple certificates used to sign your sent messages, you have to set by default the one that will serve for exchanges with RTE.

In Lotus Notes, open the menu "File > Security > User Security…", then click "Your Identity" and "Your Certificates": Select "Your Internet Certificates" in the drop-down list to display your Internet certificates that are already imported.

Select your certificate and click the "Advanced Details" button. If you only have one certificate, the case "Use this certificate as your default signing certificate" will be grey and checked. If not, check it, as above, and click "OK".

Installing RTE’s application certificate

When you select, for the first time, a signed and encrypted message you received a dialog box similar to the one below appears, allowing you to give your trust to the issuer: For this, you must click on the "Cross certify" button.

Then, when you display this signed received message, you will need to choose the "Add Sender to Contacts…" in the menu by right-clicking on the email, which will add the issuer and its certificate to your book Address. The following window appears: Only verify that the case "Include X.509 certificates when encountered" is checked and click "OK".

Whenever an encrypted email will be sent to this application, its installed certificate will now automatically be selected to perform the encryption.

Using the certificate: sending a signed-encrypted email

When composing a message, you can sign and encrypt it if you own your signature certificate (here) and that of your correspondent.

For that, when you write a new message, you must click the "Delivery Options" button. Check the "Sign" and "Encrypt" cases as shown below: Click " OK ".

The rest of the mailing process has no more particularity, Notes then automatically signs and encrypts your message transparently.