Enabling Encryption

You should enable encryption if

• You want to receive encrypted data.
• You want to replicate discussion groups with remote servers running in secure connection mode.
• You require user certificate authentication to your server.

With encryption enabled, all communications between your server and SSL-enabled browsers are private and server-authenticated.

The encryption setting affects your incoming connections only. If you enable encryption, your server will receive encrypted data only. Newsreaders without SSL support cannot connect to your News Server.

Before using encryption, you must have a CA and Key Material Object (KMO) in NDS. If you accepted the default Novell Certificate Server 2.0 settings during the NetWare 5.1 install, the CA and KMO were automatically created for you. If you did not accept the default settings, you must create a CA and KMO using client ConsoleOne^TM. For more information on creating these components, refer to ConsoleOne help.

To enable NetWare News Server encryption:

1. Enable encryption for the NetWare Web Manager in the Encryption On/Off form (from the General Administration page, click Admin Preferences > Turn On/Off SSL).

2. Down the NetWare Web Manager.

3. Restart the NetWare Web Manager at the server console by typing

   nvxadmup

4. From the General Administration page, click the News Server server name button > Encryption > Activate Connection Security.

   If you can't access the General Administration page, be sure that you have specified https in your address, for example, https://123.456.789.

5. Select Encryption On.

6. In the Port Number field, type a port number for incoming connections.

   The standard port number for secure servers is 563.

7. Select an alias for the key pair file and certificate file.

   The alias is the NDS^TM object name you specified when creating the CA and KMO during the NetWare 5.1 install.

8. Click OK.

9. Down the News Server.

10. Restart the News Server at the server console by typing

    nsnewup