Start/notes.ini Parameters/CertMgr_Server

CertMgr_Server

Parameter: CertMgr_Server
Short description: Defines the Domino server that hosts the Certificate Store database certstore.nsf. Default is the local server.

Profile

Parameter
CertMgr_Server
Category
Security / TLS (Certificate Manager)
Available since
At least 12.0 (HCL documentation)
GUI equivalent
notes.ini only — no command-line equivalent
Possible values
Server name (Notes notation, e.g. CN=Server1/O=Acme)
Default
Local server

Description

According to the HCL product documentation:
Default: Local server — Value: <server name> — Command-line equivalent: None — Description: Defines the server that has certstore.nsf
CertMgr_Server defines which Domino server hosts the master replica of the Certificate Store database certstore.nsf. On servers that do not have their own certstore.nsf (e.g. additional web servers in the domain), this points to the central CertMgr server. The CertMgr task on the local server then reads TLS credentials and configuration data remotely from the specified server.
If the parameter is not set, CertMgr assumes that certstore.nsf is local.

Example configuration

CertMgr_Server=CN=CertMgr/O=Acme

Notes & pitfalls

  • CertMgr exists since HCL Domino 12 — on older versions (≤ 11.x) the parameter has no effect.
  • The value is a server name in Notes notation (CN=.../O=...), not a DNS name.
  • Prerequisite: the specified server must be reachable via Notes NRPC and the ACL of certstore.nsf must allow the requesting server (read access).
  • No CLI equivalent — takes effect only via notes.ini.

Sources (HCL Product Documentation)