====== TEL Module Configuration Guide =====

This document will guide you through TelNIC EPP-DRS Module configuration.

===== Checklist =====
Make sure that you were certified by TelNIC and have the following:
  * Trusted SSL certificate. See "Appendix C: Certificate Authorities" in TelNIC Registrar reference guide.
  * SSL private key passphrase (optional).
  * TelNIC CA pem file.
  * Login and password for EPP access.

You may want to check yor connection and certificate. Do the following in command line:
<code bash>openssl s_client -connect telnic-epp-server:port -cert path_to_cert -key path_to_private_key -CAfile path_to_telnic_ca </code>

You should see EPP greeting. Something like:
<code xml>
<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<greeting>
<svID>NeuLevel EPP Server</svID>
<svDate>2008-12-13T14:12:19.0Z</svDate>
<svcMenu>
<version>1.0</version>
<lang>en-US</lang>
<objURI>urn:ietf:params:xml:ns:svcsub</objURI>
<objURI>urn:ietf:params:xml:ns:xriAU</objURI>
<objURI>urn:ietf:params:xml:ns:xriINU</objURI>
<objURI>urn:ietf:params:xml:ns:xriINA</objURI>
<objURI>urn:ietf:params:xml:ns:xriISV</objURI>
<svcExtension>
<extURI>urn:ietf:params:xml:ns:neulevel</extURI>
</svcExtension>
</svcMenu>
<dcp><access><all/></access><statement><purpose><admin/><prov/></purpose><recipient><ours/><public/></recipient><retention><stated/></retention></statement></dcp>
</greeting>
</epp>
</code>

===== SSL certchain =====

EPP-DRS uses the certchain file in PEM format. It is simple text file containing private key, certificate and CA certificate.

Certchain file may be generated by following commands:
<code bash>
cat path_to_key > certchain.pem
cat path_to_cert >> certchain.pem
cat path_to_cacert >> certchain.pem
</code>

===== Module configuration =====
You can now configure EPP-DRS module.

  * Log in to admin area, enable the module.
  * Go to ''Configure'' and fill the form:

''Registrar ID'': Your registrar id,\\
''Login'': EPP login,\\
''Password'': EPP password,\\
''Server host'': EPP server host (Use ''srs.nic.tel'' for production access and ''ote.srs.nic.tel'' for OT&E)\\
''Server port'': EPP TCP port (Use 700) :!: Port must be opened in your firewall.\\
''Path to SSL certificate'': Full path to your certchain file.\\
''SSL private key password'': If your private key protected with a password, enter it here.\\
''Sunrise mode'': Use it during sinrise period.\\


===== Passing TelNIC certification test =====
TelNIC requires all registrars to pass certification test before they are allowed to go in production. 
EPP-DRS can perform these tests for you. Contact TelNIC to schedule your test, then just use the ''Run certification test'' option. Once the test is completed, you will be presented with the log that should be sent to TelNIC.