TEL Module Configuration Guide

This document will guide you through TelNIC EPP-DRS Module configuration.

Make sure that you were certified by TelNIC and have the following:

• Trusted SSL certificate. See “Appendix C: Certificate Authorities” in TelNIC Registrar reference guide.
• SSL private key passphrase (optional).
• TelNIC CA pem file.
• Login and password for EPP access.

You may want to check yor connection and certificate. Do the following in command line:

openssl s_client -connect telnic-epp-server:port -cert path_to_cert -key path_to_private_key -CAfile path_to_telnic_ca 

You should see EPP greeting. Something like:

<?xml version="1.0" encoding="UTF-8"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="urn:ietf:params:xml:ns:epp-1.0 epp-1.0.xsd">
<greeting>
<svID>NeuLevel EPP Server</svID>
<svDate>2008-12-13T14:12:19.0Z</svDate>
<svcMenu>
<version>1.0</version>
<lang>en-US</lang>
<objURI>urn:ietf:params:xml:ns:svcsub</objURI>
<objURI>urn:ietf:params:xml:ns:xriAU</objURI>
<objURI>urn:ietf:params:xml:ns:xriINU</objURI>
<objURI>urn:ietf:params:xml:ns:xriINA</objURI>
<objURI>urn:ietf:params:xml:ns:xriISV</objURI>
<svcExtension>
<extURI>urn:ietf:params:xml:ns:neulevel</extURI>
</svcExtension>
</svcMenu>
<dcp><access><all/></access><statement><purpose><admin/><prov/></purpose><recipient><ours/><public/></recipient><retention><stated/></retention></statement></dcp>
</greeting>
</epp>

EPP-DRS uses the certchain file in PEM format. It is simple text file containing private key, certificate and CA certificate.

Certchain file may be generated by following commands:

cat path_to_key > certchain.pem
cat path_to_cert >> certchain.pem
cat path_to_cacert >> certchain.pem

You can now configure EPP-DRS module.

• Log in to admin area, enable the module.
• Go to Configure and fill the form:

Registrar ID: Your registrar id,
Login: EPP login,
Password: EPP password,
Server host: EPP server host (Use srs.nic.tel for production access and ote.srs.nic.tel for OT&E)
Server port: EPP TCP port (Use 700) Port must be opened in your firewall.
Path to SSL certificate: Full path to your certchain file.
SSL private key password: If your private key protected with a password, enter it here.
Sunrise mode: Use it during sinrise period.

TelNIC requires all registrars to pass certification test before they are allowed to go in production. EPP-DRS can perform these tests for you. Contact TelNIC to schedule your test, then just use the Run certification test option. Once the test is completed, you will be presented with the log that should be sent to TelNIC.