Expired Ssl Certificates; Switch From Https To Http; Cisco Tms Extension For Ibm Lotus Notes – Installation And Getting Started Guide - Cisco TELEPRESENCE MANAGEMENT SUITE EXTENSION - INSTALLATION GUIDE FOR IBM LOTUS NOTES 11.3.1 Installation And Getting Started Manual

1. Open Domino Administrator and go to the Configuration > Server-Connections view.
2. Check that the connection to your Domino Server is presented there, and if not, create it by
clicking the Add connection button.
3. Open the server connection (whether previously existing or created at step 2) and verify that the
Use the port(s) parameter is set to TCP/IP.

Expired SSL certificates

If you have enabled HTTPS communication as described in the Enable secure communication
(Optional) section of this document, and the SSL certificate has expired, users will receive decline
notices saying:
―Cannot establish SSL connection to TMS server. Underlying reason: Certificate expired. Please
contact your system administrator.‖
To install a new SSL certificate to IIS and Domino, follow the steps below. For information on how to
create SSL certificates, see the Enable secure communication (Optional) section.
1. Open IIS Manager.
2. Right click on the Cisco TMS site and select Properties.
3. Select Directory Security, and select the Server certificate in the Secure communications
section.
4. In the pop-up wizard, click Next, and Assign an existing certificate.
5. Select the appropriate certificate from the Available Certificates list, click Next to see information
about the certificate, and click Next again to complete the installation.
6. Click Windows Start > Run... and type certmgr.msc to run Certificates Manager.
7. Expand Trusted Root Certification Authorities, right click Certificates and choose All Tasks >
Import.
8. When the wizard displays, click Next, and then point to the new certificate's .cer file.
9. Click Next and verify that the certificate will be stored in Trusted Root Certification Authorities,
and click Next and Finish to complete the import.
10. Copy the file to the Domino server, for example c:\certificates\tmscertificate.cer.
11. Log in to the Domino server.
12. Open a command prompt on the Domino server.
13. Change directory to <Domino directory>\jvm\lib\security.
14. Import the certificate by using the following command
..\..\bin\keytool.exe -import -trustcacerts -keystore cacerts -alias
<myname> -file <location of certificate file>\tmscertificate.cer.
Give the certificate a proper alias (for example TMS_server_certificate). Default java keystore
password is changeit.
15. Restart the Domino server.

Switch from HTTPS to HTTP:

1. Open IIS Manager, right click on the site containing the Cisco TMS applications and select
Properties.
2. On the Web Site tab, set the field IP address to (All Unassigned).
3. Select the Directory Security tab, and click Edit in the Secure communications section.
4. Select the Require secure channel (SSL) checkbox and in the Client certificates section select
Ignore client certificates.
5. Click OK twice and restart IIS.
6. Open TMS Admin in Video Conference Resources Reservation database and set the HTTPS
radio button to No.
7. Click Save and Close.

Cisco TMS Extension for IBM Lotus Notes – Installation and getting started guide

Troubleshooting Cisco TMSXN
Page 39 of 45