Question on DoD PKI CAC

HCL Notes/Domino 8.5 Forum (includes Notes Traveler)

Subject:

Andy - Are you with D0D?

To implement CAC support, you need to have users register their CACs with their person document. You can have them do that by using a certificate publication database. See "Publishing third-party CA client certificates in a Person record" in Domino Administration help.

Then, to have your site accept CAC certificates, you need to enable it in the internet site document by setting the field "Client Certificate" to yes.

It is a little more involved than that, but that’s it in a nutshell.

Now, won't you need to present a banner that your users will have to click “accept” in order to continue?

Please contact me if you want to discuss this further at robert.przydzial.ctr@navy.mil. I could use some peers who run Domino systems within DoD, there are not very many. We may have some common issues to resolve...

Regards - Robert

Feedback response number WEBB7P5NLU created by ~Chloe Ekfoochek on 02/10/2009