EPP-SE Module Configuration Guide

This document will guide you through IIS.SE registry module configuration.

Make sure that you were certified by IIS.SE and have the following:

• Trusted SSL certificate.
• SSL private key passphrase (optional).
• Login and password for EPP access.

You may want to check yor connection and certificate. Do the following in command line:

openssl s_client -connect epp.iis.se:700 -cert /path_to_cert -key path_to_private_key

You should see EPP greeting. Something like:

<epp xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd" xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <greeting>
        <svID>epp.iis.se</svID>
        <svDate>2011-06-15T12:56:39.0Z</svDate>
        <svcMenu>
            <version>1.0</version>
            <lang>en</lang>
            <objURI>urn:ietf:params:xml:ns:domain-1.0</objURI>
            <objURI>urn:ietf:params:xml:ns:contact-1.0</objURI>
            <objURI>urn:ietf:params:xml:ns:host-1.0</objURI>
            <svcExtension>
                <extURI>urn:ietf:params:xml:ns:secDNS-1.1</extURI>
                <extURI>urn:ietf:params:xml:ns:secDNS-1.0</extURI>
                <extURI>urn:se:iis:xml:epp:iis-1.2</extURI>
            </svcExtension>
        </svcMenu>
        <dcp>
            <access>
                <all />
            </access>
            <statement>
                <purpose>
                    <prov />
                </purpose>
                <recipient>
                    <ours />
                    <public />
                </recipient>
                <retention>
                    <stated />
                </retention>
            </statement>
        </dcp>
    </greeting>
</epp>

EPP-DRS uses the certchain file in PEM format. It is simple text file containing both certificate and private key. Private key should go on new line after a certificate.

Certchain file may be generated by following commands:

cat path_to_key > certchain.pem
cat path_to_cert >> certchain.pem
cat path_to_cacert >> certchain.pem

You can now configure EPP-DRS module.

• Log in to admin area, enable the module.
• Go to Configure and fill the form:

Login: EPP login,
Password: EPP password,
Server host: epp.iis.se
Server port: 700
Path to SSL certificate: Full path to your certchain certificate.
SSL private key password: If your private key protected with a password, enter it here.
Registrar clID: Your account EPP client IDpanel.

Save your settings and use “Test module” link on Settings » Registry modules » View all to test connection and operations.

IIS.SE requires all registrars to pass certification test before they are allowed to go in production. EPP-DRS will perform these tests for you. Just use the Run certification test option. Once the test is completed, you will be presented with the log that must be sent to IIS.SE