Start/notes.ini Parameters/CertMgr_AutoRequestCert

CertMgr_AutoRequestCert

Parameter: CertMgr_AutoRequestCert
Short description: Automatically detects the host name and generates a certificate request using the default configuration via the Certificate Manager (CertMgr).

Profile

Parameter
CertMgr_AutoRequestCert
Category
Security / TLS (Certificate Manager)
Available since
At least 12.0 (HCL documentation)
GUI equivalent
notes.ini only — command-line equivalent: -r for the load certmgr command
Possible values
0 (disabled) or 1 (enabled)
Default
0 (disabled)

Description

According to the HCL product documentation:
Default: 0 — Value: 1 — Command-line equivalent: -r — Description: Automatically detects the host name and generates a certificate request using the default configuration.
With CertMgr_AutoRequestCert=1, the Certificate Manager (CertMgr task) automatically detects the host name of the server and generates a certificate request using the default configuration. This is intended primarily for automated setups and One-Touch deployments — e.g. initial setup of a Domino server with a Let's Encrypt certificate, without an administrator having to manually create a TLS Credentials entry in certstore.nsf.
For interactive use, the command-line equivalent load certmgr -r is used instead — notes.ini is appropriate when the parameter should take effect persistently and automatically.

Example configuration

CertMgr_AutoRequestCert=1

Notes & pitfalls

  • CertMgr exists since HCL Domino 12 — on older versions (≤ 11.x) the parameter has no effect.
  • Prerequisite: the certmgr task is running, certstore.nsf is reachable (locally or via CertMgr_Server).
  • Command line (-r) overrides the notes.ini value.
  • For Let's Encrypt-based automatic certificates, CertMgr_ACCEPT_TOU=1 is additionally required (ACME Terms of Use acceptance).

Sources (HCL Product Documentation)