New template signing ID uses 2048-bit keys

A new template signing ID, CN=Domino Template Development/O=Domino, provides stronger encryption using 2048-bit keys. Templates that ship with Notes and Domino 12 will be signed with the new ID.

As of this Early Access drop, the following templates have been signed with the new ID:
  • pubnames.ntf
  • certstore.ntf
  • pernames.ntf
  • discussion12.ntf
  • teamrm12.ntf
  • websecuritystore.ntf
  • domadmin.ntf
  • dct.ntf
  • idvault.ntf
  • dominoblog.ntf
Notes 11.0.1 clients provisioned with default ECL settings include the new ID in the ECL so don't show ECL alerts when opening databases signed with the new ID.

Pre-11.0.1 Notes clients or Notes 11.0.1 clients with ECLs set by administrators see ECL alerts when opening databases and templates signed by CN=Domino Template Development/O=Domino. To avoid the alerts, Domino administrators can update administrator ECL's in the Domino directory to include the new signing ID with proper permissions. For instructions, see Editing administration ECLs in the Domino documentation.