84.4 Accessing S/MIME Certificates in an LDAP Directory

Just as the POA can access user password information in an LDAP directory, the GroupWise Windows client can access recipients’ digital certificates in an LDAP directory. See Using LDAP to Search for Recipient Encryption Certificates in Email in the GroupWise 2012 Windows Client User Guide.

When a certificate is stored on an LDAP server, the GroupWise Windows client searches the LDAP server every time the certificate is used. Certificates from LDAP servers are not downloaded into the local certificate store on the user’s workstation.

To facilitate this process, the user must select a default LDAP directory in the LDAP address book (Windows client > Address Book > Novell LDAP Address Book > Directories > Set as Default) and enable searching (Windows client > Tools > Options > Security > Send Options > Advanced Options > Search for recipient encryption certificates in the default LDAP directory defined in LDAP Address Book).

An advantage to this is that recipients’ certificates are available no matter what workstation the GroupWise user sends the message from.