Encrypting consolidated attachments

By default, the attachment files (.NLO files) created and stored by the Domino® Attachment and Object Service (DAOS) are encrypted. You can use a NOTES.INI setting to either disable or re-enable encryption for all .NLO files created thereafter in the repository.

To stop encrypting attachment files


  1. From the Domino® Administrator client, edit the NOTES.INI file on the Domino® server where DAOS is enabled.
  2. Do one of the following:
    • Delete the setting DAOS_ENCRYPT_NLO=1
    • Change the setting value to 0: DAOS_ENCRYPT_NLO=0

To encrypt new attachment files


Edit the NOTES.INI file to include this setting:


When this value is included in the NOTES.INI, all new .NLO files are encrypted as they are created.

Note: An .NLO file remains either encrypted or non-encrypted based on the encryption setting's value when the .NLO file was created. Turning off encryption cannot turn it off for any given file. The only way to change the encryption setting on an existing .NLO file is to delete it in every document that references it, so that it is deleted in the repository, change the encryption setting, and then recreate the file.