Specifications

Lotus Redbooks Wiki – IBM Lotus Notes and Domino V8.5 Deployment Guide

The other security feature contributing to lower the Total Cost of Ownership (TCO) is the Notes ID

Vault. The Notes ID Vault is a server-based application used for storing and managing protected

copies of ID files. Changes made in one copy of the ID file will resynchronize immediately with the

ID file in the vault. Notes clients check periodically to see if the ID in the vault is different from

their existing local ID. If it is, it resynchronizes it automatically and transparently to the user. If you

need to deploy Key Rollover to your users, the ID vault will automatically distribute it to all users

with no additional configuration required, with no confusing dialog boxes presented to the user.

Renames and organizational moves will be automatically performed directly in the vault by the

Notes 8.5 Administration client, with no additional configuration required.

The ID vault is secure. It provides protection against the use of an unauthorized vault with the

creation of a vault trust certificate from the certifier ID. It has mechanisms to protect it against

unauthorized downloads of IDs, unauthorized password resets, unauthorized access to vault

content and unauthorized access to data transmitted over the network.

Here are some benefits of implementing this feature:

• Simplify the provisioning of Notes ID credentials

• Streamline the process of resetting forgotten passwords

• Manage changes across multiple copies of Notes ID files (office workstation, laptop,

home workstation, etc)

• Make the use of ID files transparent to the end-user

Notes ID Vault has the following capabilities:

• Upload copies of local ID files automatically to the vault for existing users

• Register ID files automatically to the vault for newly created users

• Reset password when a user forgets it, either by the Help Desk or by a self-service

application

• Synchronize ID files across multiple workstations

• Auditor function available to gain access to encrypted data

• Mark ID files as "Inactive" through AdminP when deleting users or directly in the ID vault

XPages security

Control the execution of XPages on a server the same way in which you control execution of

agents.

Using gzip on the web

Gzip is a patent-free method used for compressing files. The RFC 1952 standard allows for 2

compression methods, 'deflate' and 'gzip'. With Domino 8.5, the Domino Web server will serve

files compressed by gzip (GNU zip) by default. This feature allows the Domino web server to

reduce the traffic sent to the client web browser when they access a web page. When you reduce

the traffic, you improve the speed of your web pages. Static html, CSS and JavaScript files can

be all compressed to gzip.

The Domino 8.5 web server will serves files compressed by gzip (GNU zip) under the following

conditions:

• Support is not disabled with the NOTES.INI setting:

HTTPDisablePreCompressedGzipFiles=1.