Home
IBM® Domino 10.0.1 Documentation
Welcome to the IBM® Domino 10.0.1 Administrator Help.
Securing
This section describes IBM® Domino® security features, including execution control lists, IDs, and SSL.
Domino® server and Notes® user IDs
Domino® uses ID files to identify users and to control access to servers. Every Domino server, Notes® certifier, and Notes user must have an ID.
Notes® ID vault
The ID vault is an optional, server-based database that holds protected copies of Notes® user IDs. An ID vault allows administrators and users to easily manage Notes user IDs. Users are assigned to a vault through policy configuration, and copies of user IDs are uploaded to a vault automatically once the policy has taken effect.
Planning an ID vault deployment
The topics in this section provide information to help you plan an ID vault deployment.
Security for server ID files and the vault ID file
The Notes® ID vault server's ID file is integral to the protection of the vault's contents. Because someone who gains access to a vault server ID file could potentially gain access to vault data, it is vital to restrict access to the server ID files of vault servers.

Security for server ID files and the vault ID file

The Notes® ID vault server's ID file is integral to the protection of the vault's contents. Because someone who gains access to a vault server ID file could potentially gain access to vault data, it is vital to restrict access to the server ID files of vault servers.

Protect each server ID file by keeping the server in a locked room and behind a firewall. Also use a password on the server ID file or use a Smartcard to secure the server console.

It is also important to make a backup copy of the vault ID file and to restrict access to the file. Access to the vault ID file is needed only by vault administrators who add or remove replicas of a vault or who delete a vault.