Posts Tagged: ‘HCL Domino’

Introducing Domino v12.0.1 and HTMO 3.0.3 Beta Program!

23. August 2021 Posted by Ketan Godhaniya

After the successful launch of HCL Domino v12.0 in June 2021, we are approaching the next milestone: We’re happy to announce two new beta programs at onceHCL Domino 12.0.1 and HTMO 3.0.3 have both launched a Beta Program today!

You are invited to join the beta program to test our latest release and provide feedback to development teams.  

We’re calling on our community to share open, effective, and thoughtful review and testing of our software product. Your input is essential to how we develop our products, and we will continue to listen to you every step along our roadmap. 

What you can expect from this first beta of Domino v12.0.1:

HCL Notes Client

Domino Online Meeting Integration

The Notes Client 12.0.1 is providing native integration of online meeting platforms like ZoomWebexGoToMeetingTeams and of course Sametime Meetings. So, from within the Notes calendar users can now more easily schedule online meetings on their preferred platform without having to install a plug-in.

Improved Workspace Design with High Resolution Icons

The new Notes client is finally allowing to use high resolution icons for your databases, which makes a big difference to the look and feel of your workspace! No need to stick to small and old style 32×32 pixel database icons anymore.

We have already updated our standard templates with new icons, will you update yours?

Advanced Properties Box

You have asked for it, we have delivered: an all-new and resizable document property box:

Thanks to Panagenda, the new “advanced properties” box allows to search for field names or values, it also provides the requested ability to copy to clipboard or export to a CSV file:

What’s new in Notes v12.0.1?

HCL Domino Designer

We have already provided a 64Bit Notes client (in beta as of now), and based on your request are now providing a 64Bit Domino Designer client.

Also, Domino Designer v12.0.1 provides the ability to include high quality icons for rendering and enables developers to optimize the database full text index by defining which fields to be included in the index — a feature that many customers were requesting (see this idea).

What’s new in Domino Designer v12.0.1?

HCL Domino Server

For the Domino server a number of enhancements are waiting for you:

  • One-touch Domino setup with the ability to register users automatically
  • Certificate Manager is now integrated and does not require the DSAPI filter configuration anymore
  • Domino Directory template was cleaned up based on your request
  • Updates to the QVault tool for better manageability of ID’s in the Vault
  • Compare DB’s – a new template for developers to compare the design elements of two apps with each other
  • Entitlement Tracking now providing monthly reports 

This is just the first beta drop! We are going to release even more features in the next stage of the beta program.

What’s new in Domino 12.0.1?

HCL Traveler for Microsoft Outlook (HTMO) 3.0.3

HTMO in version 3.0.3 is providing the following new features:

  • Full support for delegated access (mail, calendar, contact)  
  • Improvements to the out-of-office user interface 
  • Performance improvements 

What’s new in Traveler 12.0.1?

What’s new for Microsoft Outlook support

…and a number of minor changes and performance improvements.

For a complete list of changes and improvements, please refer to Domino v12.0.1 release notes.

How to Participate in this Beta?

Customers with a current entitlement to Domino can find the software packages for both beta programs on Flexnet.

Beta participants, please let us know how you think about the product by submitting your feedback in our beta forum. For general input and new ideas or feature enhancement requests, please use the Domino ideas forum here. 

Thank you for your participation and your passion for HCL Domino!
HCL Domino Product Team 



Launch von HCL Notes und Domino 12 und Sametime 11.6

7. Juni 2021 Posted by Oliver Regelmann

Heute fand der Domino v12 Launch Event statt, die Setups selbst stehen bereits eine Woche zur Verfügung. Für registrierte Teilnehmer gab/gibt es eine Reihe von Vorträgen von HCL sowie von diversen Analysten und Kunden. Technisch gesehen am interessantesten dürften die Vorträge aus der “Domino Dozen” Reihe sein, die in den nächsten Tagen folgen. Morgen und […]

Der Beitrag Launch von HCL Notes und Domino 12 und Sametime 11.6 erschien zuerst auf n-komm.

Licensing Update: Domino V12 and Key CCX Enhancement

2. Juni 2021 Posted by Uffe Sorensen

Over the past yearHCL Digital Solutions has been on a journey to consolidate our customers’ HCL Domino licensing around our modern, per user, licensing model – HCL Domino Complete Collaboration Business Edition (a.k.a. “CCB”) including unlimited Guest Users, and the additional external user capability under the HCL Domino Complete Collaboration eXternal User (a.k.a. “CCX”) entitlement. 

The majority of our customers are now licensed under this model. With the upcoming HCL Domino V12 release, we are further enhancing the CCB/CCX entitlements as described below.  

Additionally, with the release of HCL Domino V12 we are aligning all Domino products on consistent license termswhich will be available imminently and include the compliance rules outlined in “HCL Domino Support Update” from February 3, 2021. 

CCB Recap: Simplifying HCL Domino Licensing

CCB is the key step in our journey to provide one license model for HCL Domino, eliminating the uncertainty of server capacity and sub-capacity (PVU) licensing and ambiguous entitlement rules. 

  • A simple “Per User everything model” – use any client and any protocol for any server capacity to run all applications – including enterprise e-mail. 
  • Transparent license compliance management by simple user counting. 
  • Adding additional capabilities to the core Domino environment under CCB entitlements from V12 – for example HCL Nomad for Web Browsers and HCL SafeLinx. 

CCB entitlements are needed for all employees and contractors of your enterprise needing access to your Domino CCB servers – covering all B2E (Business-to-Employees) scenarios. All CCB entitlements include unlimited external web user access as needed for most B2C (Business-to-Consumer/Citizen) scenarios: 

  • Guest: unlimited anonymous browser users can freely access your Domino based websites. 
  • Known Guest: unlimited registered users with credentials to log-in and access applications limited to being a “Reader” with permission to “write public documents” (controlled by Domino application access [ACL] – see Known Guest Use Cases later in this blog post).

For B2B (Business-to-Business) or advanced B2C scenarios, where the external users need to fully engage in applications beyond the access permitted for Known Guests, we introduced the CCX entitlement as an add-on for CCB licensing. (See Introducing CCX, External User Entitlements“ from September 23, 2020.

Extending CCX entitlement to address additional use cases

CCX users have full functionally to use Domino or Domino Volt [see below] applications and workflows but cannot create applications themselves. CCX users do not have a personal mailbox but can use task/functional mail for workflow routing or applications generating mail.  

The CCX Authorized User entitlement is unique, however, can be reassigned after 30 days of inactivity.  Consequently, some former Domino Utility Server B2C use cases can now be easily changed from trying to manage/throttle server PVU consumption, to simply ensuring adequate CCX entitlements for actual/expected external users in any 30 day periodwith little or no change to existing apps.  See later in CCX Use Cases. 

CCB Recap: Add-on features for CCB licenses

HCL will continue the “add-on” scheme for CCB licensing, which now includes: 

  • HCL Domino Volt can be licensed to all CCB users.  Licensing HCL Domino Volt as an add-on, includes all CCB and CCX users, as well as enabling use of HCL Enterprise Integrator, HCL SAP Connector and HCL Link on all HCL Domino servers under CCB entitlements. 
  • HCL Sametime Premium: special add-on price for CCB users to upgrade from HCL Sametime Premium Limited Chat to full capabilities.  

CCB Recap: Access to Domino Servers Licensed under CCB

HCL Domino Servers deployed under CCB Authorized User entitlements can only be accessed by the Licensee’s Enterprise entitled CCB Authorized Users, Guest Users, and CCX Authorized Users. No other user access or Domino Client Access Licensing are permitted access to CCB licensed servers.  In addition, the Servers may participate in mail routing (SMTP), directory lookup and authentication (LDAP) for non-HCL Domino programs and permit access to free/busy time information. 

Known Guest Use Cases (general B2C)

Known Guest, as seen from an application, is an authenticated (must be identified) external user listed in the application access control list (ACL) with Reader permission and permitted to write public documents.  This access is either granted on a named user basis or by the user being a member of a group or generic association in the ACL. 

Content tailored to individual users, subscribing to information

Any Known Guest in an application can read all non-restricted documents in the database and download any attachments from these.  Access to specific documents in the database can be controlled by adding users/groups in the ”Reader Name Field” for the document(s). As a result, only the appropriate Known Guests can read/download content. If you have a special Interest Profile or similar for the users, this can be used to filter the information available to relevant individuals. 

Submitting a form, starting a workflow, creating content

If a Known Guest is flagged as permitted to “Write Public Documents” this user will be able to see all Forms/actions in the application which are enabled as “Available to Public Access Users”.  
For example, using a Form called “Create Interest Profile”, which the user would complete and save to create a special Interest Profile or tailor a mailing list.   

Hints for the Admins/Developers: The Save Process can turn off the “$PublicAccess=1” flag to prevent the Interest Profile from being visible to all users of the appbut still available for the app and the originator to access appropriate content. 

 If/when the Known Guest wants to “Update Interest Profile” later, another Form will be used presenting the update options, maybe pre-populated with some of the existing information, and then processed as above. 

Hints for the Admins/DevelopersThe Known Guest cannot update the initial document directly (being “Reader”), but the app could include a background Agent to manage updating/merging the content. 

When B2C requires higher level of access than the Known Guest

The above simple rules should permit implementation of most B2C use cases, however, HCL have found a number of existing B2C apps hosted on Domino Utility Server which do not adhere to the above rules. HCL has decided to enable the reuse of these apps rather than mandating a rewrite (which you can of course always do). This is accomplished by relaxing the usage requirements for the CCX entitlement and permitting an entitlement to be reassigned after 30 days of inactivity See examples below. 

CCX Use Cases

CCX Authorized User as seen from an application is an authenticated (must be identified) external user listed in the application access control list (ACL) with a maximum permission of Author. 
This access is either granted on a named user basis or by the user being a member of a group or generic association in the ACL. Any of these authenticated users can contribute documents to a Domino app/database, and edit own or other designated content. 

Some CCX B2B users will have a permanent, continuous, use of applications under the CCX entitlement.  
In B2C scenarios, with full use of app capabilities, user access is more sporadic. HCL have found that many customers with Domino Utility Server licensing, largely ignored the volume of users that were created as the user count was not a factor in licensing. These same customers struggled with server sub-capacity PVU management under fluctuating capacity needs and often had to throttle use to stay within licensed capacity (PVU) limits for their B2C apps, resulting in reduced customer satisfaction. 

Most applications written to work on a Domino Utility Server (using Author access) are now viable to deploy under CCX licensing, unchanged, by licensing the maximum volume of expected/planned users for any 30 day period. HCL still recommends that you optimize your B2C apps for the Known Guest model, which is included, with no limits, with even a single CCB entitlement. 

 Two examples of how to use short term/occasional external user engagement apps under the CCX model

Example 1: Job Postings

New Applicants register for web credentials and submit an initial Job Application Package.  They then: 

  • Update Packages during interview cycles and eventually progress into on-boarding workflows 
  • If not on-boarded, Job Application docs still exist and can be resumed/updated later by Applicants 
  • When there is no activity with a particular Applicant for 30 days, the CCX entitlement can be reassigned to another Applicant/External user – effectively, you need entitlements for any active/expected users within any 30 days period. 
Example 2: Citizen/Government Interactions 

Many countries are creating authentication facilities for citizens based on government issued individual credentials.  Any user based licensing counting all permitted users, would be totally prohibitive for using these public IDs.  However, many apps exist or are being written to submit public forms, to obtain information from Government/Municipalities, etc under the Government ID: 

  • The revised CCX is perfectly designed for many existing apps coded for user permission as Author. 
  • The app must use the Government provided means of authentication, and then have appropriate ACL set-up to allow these external users access up through Author for the app.  Data can be kept around as app scenarios dictate, and user affiliation with the app likewise.   
  • If there is no activity with a particular CCX Citizen for 30 days, the entitlement can be reassigned to another Citizen/External user – effectively, you need entitlements for any active/expected users within any 30 day period. 

 Both of these scenarios could, generally, be written/updated to work within the Known Guest model.

Aligning all Domino V12 Licenses

HCL Domino V12 products will be provided to customers on active Support consolidated under the four categories and License Information documents below.  Note, that all current entitlements, support subscriptions and part numbers remain unchanged. 

Program Name:  HCL Domino Complete Collaboration Business Edition 12.0 includes: 

  • HCL Domino Complete Collaboration Business Edition 12.0 
  • HCL Domino Complete Collaboration External User 12.0 
  • HCL Nomad for Web Browsers (eliminating desktop upgrades for the future) is a supporting program uniquely provided with the CCB entitlement from V12. Any customer needing this feature must migrate to the CCB/CCX license model. 

 Program Name:  HCL Domino Enterprise 12.0 consolidating the following 3 models: 

  • HCL Domino Enterprise 12.0 Client Access 
  • HCL Domino Enterprise 12.0 Processor Value Unit  
  • HCL Domino Collaboration Express 12.0 

 Program Name:  HCL Domino Messaging 12.0 consolidating the following 3 models: 

  • HCL Domino Messaging 12.0 Client Access 
  • HCL Domino Messaging 12.0 Processor Value Unit  
  • HCL Domino Messaging Express 12.0 

 Program Name:  HCL Domino Utility 12.0 consolidating the following 2 models: 

  • HCL Domino Utility 12.0 Processor Value Unit  
  • HCL Domino Utility Express 12.0 Processor Value Unit 

Acquiring Entitlements and Support for above products is fully supported for CCB/CCX and for all other products as described in “HCL Domino Support Update” from February 3, 2021, under the following rules: 

  • No partial renewals permitted for any licensing. 
  • For HCL Domino Enterprise Client/Server:  If the current configuration is compliant for both client and server side, Support can be renewed as-is, or you can migrate to CCB, cost neutral.  In all other circumstances, to renew or adjust volumes, HCL require that you negotiate a migration to the CCB/CCX license model.  
  • For HCL Domino Collaboration Express:  A compliant configuration can be renewed as-is, or you can migrate to CCB on attractive terms.  HCL also recommends migrating to CCB to increase footprints, or to take advantage of HCL Domino Volt, however, you are permitted to acquire additional perpetual entitlements for a compliant configuration. 
  • All compliant standalone Utility Server entitlements can be renewed as-is (use of Domino Designer requires appropriate Domino Enterprise Client Access licences). To increase footprints, HCL require that you migrate to the CCB/CCX license model, which now supports all Utility Server use cases. 
  • For HCL Domino Messaging product models: A compliant configuration can be renewed as-is.  Also, you can increase the footprint for a compliant configuration by acquiring appropriate new entitlement parts. 

 HCL has updated all formal HCL Domino V12 License Information Documents now available here

Managing the upgrade/coexistence scenario from Domino Utility Server to CCB/CCX

An existing Domino Utility Server PVU or Utility Express PVU configuration with appropriate Domino Enterprise Client Access licenses for app maintenance can be renewed as-is.  However, many customers want to grow their application volume (hence, deployed server capacity) or want to take advantage of moving to CCB/CCX and the CCB add-on capabilities.

If you replace your Utility Server Support Subscription with appropriate CCB/CCX Authorized User volume to cover the current users, you can leave the installation as-is and just use your new CCB licensing.

If you need to maintain coexistence between Utility Server and CCB environments, you need to observe the following guidelines: 

  • Any entitlements included with CCB are only available to the CCB environment, e.g. Safelinx/Nomad Web. If HCL Domino Volt was added to CCB, the HCL Enterprise Integrator, HCL SAP Connector, and HCL Link are only available for the CCB environment.  
  • Any existing HEI/SAP Connector in the Utility Server environment must be continued/renewed as-is and cannot be replaced by the CCB entitled programs.  
  • Users defined on Utility Servers must be on the Denied Access List for all CCB servers to separate them from CCB licensing counts, whereas any CCB user is permitted access to the Utility Servers. 
  • The V12 Entitlement Reporting Tool provides a report for all of your Domino Domains, however, you can drill down on specific servers or groups of servers to understand user volumes by server. 

This announcement further enforces CCB/CCX as the licensing platform for Domino customers, allowing all customers to upgrade to CCB and with CCB as the only model for all new customers.

If you have any questions about this blog post and announcements or have any licensing questions, please contact your HCL product specialist or Business Partner. 

 Useful Links:  

 Related Blog Posts:

Frequently Asked Questions

Updated since September 23,  2020, “Introducing CCX, External User Entitlements 

Q: How are CCB/CCX users counted?

A: The Domino V12 Entitlement Tracker Tool produces an internal report to assist you with license compliance. (This report is not collected by HCL) 

  • You simply count the entries across all Domino Directories and Authentication Sources permitting users to log-in.  The count of credentials permitting log-in equals the number of Authorized Users. 
  • Keep separate track of “external” users and exclude from the CCB count.  A user on all Denied Access Lists are excluded from the counts. 
  • CCB includes an unlimited entitlement for Guest users. If logged-in Known Guest user credentials are included in the Domino Directories identified/separated out as “guests”, simply exclude from CCB/CCX counts. 
  • Needed CCX entitlements are established from the maximum number of log-in’s used or to be used in any 30 day period.  
  • CCB and CCX can reside on same server or as administrator decides – counting is always across all Domino Directories in Licensee’s enterprise.   
  • No employee or contractor in Licensee’s Enterprise can be a CCX or Guest user.   

Q: am using an earlier Domino license model. How do I switch to CCB/CCX?  

A: CCB licensing is a superset of prior Domino licensing. When CCB licensing is established replacing active Domino licensing, CCB can provide the entitlements that were in place for the Domino Servers and various clients. To support the user constituents, you may need both CCB/Guest and CCX entitlements to match your current use cases, but you can continue to use deployed software. In most cases, if you have a compliant installation, the move to CCB is cost neutral. 

Q: I just need Domino apps, no need for mail or other features. 

A: Mail routing is intrinsic to Domino and to many apps that run on the platform. For simplicity, the full mail application is included with CCB and functional/workflow mail is included with CCX – both HCL Verse, the traditional Notes user interface, and mobile access. The mail function is always part of your entitlement, whether you use it or not. 

Q: Can I still just license mail? 

A: The mail-only licensing of Domino Messaging CAL/PVU, Messaging Express is still available. However, you can fully replace your mail entitlements with CCB and include Domino Volt to gain significant additional value for your users. (See also Aligning all Domino V12 Licenses in this blog.) 

Q: What is included with CCB and what are add-ons? 

A: The CCB license includes entitlements to  

  • HCL Nomad for Web Browsers for all CCB/CCX users 
  • HCL SafeLinx  for all CCB servers and CCB/CCX users  
  • HCL Sametime Premium Limited Chat 
  • You must have a CCB license to enable any code install/download & product support for the above functions. 

Add-ons include:   

  • Full HCL Sametime Premium at a special, reduced, price 
  • HCL Domino Volt for all CCB users at a simple uplift (which is also extended to all CCX users for no additional charge).  The HCL Domino Volt add-on includes HCL Enterprise Integrator, HCL SAP Connector and HCL Link which are entitled for all CCB entitled servers with Domino Volt 
  • CCX on a per External User basis as described elsewhere in this blog. 

Q: What is a CCB user permitted to do? 

A: CCB users are entitled to all aspects of Domino applications and enterprise e-mail and purchased add-ons per above, without license restrictions on what users are permitted to do. CCB users can create and participate in apps and workflows to any level set by their Domino Administrators. 

Q: How do you restrict CCX and Guest users’ access to an application? 

A: Based on your settings in the Domino “Access Control List” (ACL) – all Domino databases/applications have an ACL which maps access levels to users. The access level is a classification limiting which tasks a user can perform in the database  – Manager, Editor, Author, Reader, Depositor, No Access – these classes are just labels, not verbatim. To fully understand permitted use cases, refer to the product documentation on ACLs found here  
Learn about Domino Access Control Lists (ACL)

Hints for the Admins/DevelopersExisting apps and standard templates may need customisation to support Known Guest users (free with CCB), whereas CCX users should have appropriate support with no changes to apps. 

Q: Why is a CCX user permitted ACL level up to Author? 

A: CCX users can fully participate in, and use (not create) Domino apps and workflows (including Domino Volt if added to CCB.)  The maximum ACL level allowed is “Author” access, which is typically assigned to users who need to contribute documents to a Domino database – and authenticated users can edit their own and other designated content.  
CCX is for authenticated, external users only and not permitted for any employee or contractor in the Licensee’s Enterprise. 

Q: Why is an anonymous Guest permitted ACL level up to Author? 

A: Anonymous Guests are web users, who beyond browsing a web site are permitted actions like submitting a contact form, participating in a web survey, posting anonymous blog content, etc. “Author” access is typically assigned to users who need to contribute documents to a Domino database just like CCX users, however, being anonymous they cannot edit any content, nor access individualised content and no details are retained as to who contributed to the database. 

Q: Why is a logged-in Guest only permitted ACL level up to Reader? 

A: Under ACL control, “Reader” access allows controlled creation of documents by using public access forms. Logged-in Guests authenticating with HTTP/LDAP are typically a dynamic, ever increasing volume of users visiting your web site, registering to gain access to community content, special interest forums, initiating workflows, etc.  “Reader” access is typically assigned to users who are only permitted to read documents in a database and/or using public forms to create documents. This case is for authenticated, external, limited use only, and not permitted for any Employee or contractor in the Licensee’s Enterprise.  
For external users needing any higher level of access, you must purchase CCX entitlements. 

Disclaimer – HCL’s statements regarding its plans, directions, and intent are subject to change or withdrawal without notice at HCL’s sole discretion. Information regarding potential future products is intended to outline our general product direction and it should not be relied on in making a purchasing decision. The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to deliver any material, code or functionality. Information about potential future products may not be incorporated into any contract. The development, release, and timing of any future features or functionality described for our products remains at our sole discretion. Performance is based on measurements and projections using standard HCL benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon many factors, including considerations such as the amount of multi programming in the user’s job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve results similar to those stated here.  

HCL Domino V12 vor Launchevent freigegeben

28. Mai 2021 Posted by Gerda Marx

HCL hat am Domino V12 bereits freigegeben, weit vor dem für den 07. Juni 2021 angekündigten Launchevent. Die Agenda verspricht trotz allem ein interessantes online Event. Richard Jefts wird die Keynote für Domino V12 halten. Er  wird den Zuschauern erklären warum dieses Release so wichtig ist, warum die neue [...]

Der Beitrag HCL Domino V12 vor Launchevent freigegeben erschien zuerst auf hedersoft Blog.

Public Webkonferenzlösungen in den Notes Kalender integrieren

21. Mai 2021 Posted by Andreas Schulte, HCL

Der Weg ins Büro ist für viele Menschen ein Teil des normalen Lebens, den wir uns alle nach viel im Homeoffice verbrachten Zeit zurückwünschen. Die regelmäßige Nutzung von Videokonferenzen wird sicher als eine der positiven Entwicklungen aus der Pandemie auch im Büro übrigbleiben. Sie sind kostengünstig, schonen Zeit, Budget und viele Ressourcen.

HCL bietet hier mit Sametime eine sichere Lösung für den Eigenbetrieb on-premises oder auf privaten Cloudinstanzen. Viele Domino Kunden haben aber während der Pandemie vorläufige Entscheidungen für Public-Webkonferenzservices getroffen. Dabei ist die Integration in den Notes Kalender ein Thema.

Wer vor dieser Aufgabe steht sollte sich die Integration der gängigen Anbieter wie Microsoft Teams, WebEx, Zoom, Livesize und GoToMeeting in den Notes Kalender mit Notes2Conf genauer anschauen. Eine einfache Integration in den Notes Kalender erhöht die Akzeptanz von Notes und erleichtert die Erstellung und Verwaltung der Videokonferenzen.

Die Lösung Notes2Conf des deutschen Anbieters Dacher Systems GmbH aus Berlin kann mit allen Notes Clients ab Version 9.x eingesetzt werden.

Mit einem Eintrag am Domino Server wird das Gateway eingebunden. Ohne Änderung der Mailschablone können die Anwender ab dann alle Videokonferenzen wie ein normales Meeting im Kalender anlegen und verwalten. Notes2Conf kümmert sich um den Rest und erstellt die notwendigen Meetings bei den externen Anbietern, generiert die Konferenzlinks für interne und externe Teilnehmer.

So funktioniert das Notes2conf Gateway

Gerade in der Umstellungsphase auf z.B. HCL Sametime on-premises oder der Nutzung von verschiedenen Cloudwebkonferenz-Anbieter hilft das flexible monatliche Mietmodell für Notes2Conf. Insbesondere die einfache Integration macht eine kurzfristige Lösung ohne roll-out möglich, da man innerhalb von Stunden mit Notes2Conf die Integration umgesetzt hat, ohne die eigene Infrastruktur zu verändern.


Der Beitrag Public Webkonferenzlösungen in den Notes Kalender integrieren erschien zuerst auf DNUG e.V..

Domino 12 – Worauf wir uns freuen können (Teil 1)

27. April 2021 Posted by Thomas Zeizel, HCL

Die Neuerungen in Domino 12

Wie wir aus den verschiedenen Webinaren zu Domino 12 wissen, gibt es auch für die Administratoren ein paar Neuerungen, die einen zweiten Blick wert sind. Während sich der Domino Server bei IBM lange in einer Art Winterschlaf befand und man schon über notwendige Updates der Infrastruktur froh sein durfte, kann man seit Version 11 einen wunderbaren Trend beobachten: Neben den unabdingbaren Aktualisierungen gibt es aus meiner Sicht auch immer drei Kategorien von Neuerungen:

  • Sicherheit – denn auch die sicherste Plattform kann immer noch sicherer gemacht werden
  • Integration – neue Formen des Deployments, aber auch Schnittstellen für Entwickler/-innen
  • Ein Goodie – eine Kleinigkeit, die aber große Wirkung haben kann

Während ich schon über die Sicherheitsaspekte und die Integration von Let’s Encrypt Zertifikaten gesprochen habe – und im nächsten Teil über die Integration berichten werde – möchte ich mich heute einem Goodie widmen, dass mir in der Präsentation von Thomas Hampel – unserem Produktmanager für Notes/Domino, der auch hier in der Region Zuhause ist – anlässlich der dritten Beta aufgefallen ist.

Domino 12 Beta 3 ist schon „Feature-complete”

Nach den Aussagen meiner Kollegen wird an der Beta 3 tatsächlich nur noch anhand des Feedbacks der Teilnehmenden am Beta-Programm gearbeitet: Was wir also sehen, ist schon sehr wahrscheinlich die Domino 12, wie wir für das Event am 7. Juni 2021 erwarten. Dennoch von mir an dieser Stelle der Hinweis, dass es hier auch noch Abstriche geben könnte, falls noch massive Probleme auftreten würden.

Mein „Hidden Champion“ in Domino 12

Bisher hatte ich von diesem Goodie immer mal wieder gehört – und es irgendwie immer gleich abgehakt. Nachdem ich jedoch die Demo von Thomas gesehen habe, ist die Backup-Funktion mein persönliches Highlight. Zugegebenermaßen mit bin ich kein “tiefer” Techniker, hier finden Sie in der DNUG-Fachgruppe sicherlich bessere Ansprechpartner, aber die Einfachheit und Geschwindigkeit der Lösung hat sogar mich überzeugt.

Nun gibt es Backup-Software für Domino-Server ja schon seit Jahren, viele Kunden setzen dennoch eher auf Backups der gesamten (virtuellen) Maschine. Das mag zwar schön einfach erscheinen, aber mit DAOS (also der deduplizierenden Speicherung von Anhängen) und Transaktionslogging kann es dabei auch schon zu Inkonsistenzen kommen – und wer will schon immer den ganzen Domino-Server herunterfahren, damit man ein brauchbares Backup bekommt? Das komplette Backup eines Servers ermöglicht üblicherweise, dass man den gesamten Server mit allen Domino-Datenbanken auf den Zustand zu einem bestimmten Zeitpunkt in der Vergangenheit (nämlich einem Backup-Zeitpunkt) zurücksetzt. Wenn also Herr Müller seinen super-wichtigen Ordner mit allen Dokumenten gelöscht hat und diese wiederherstellen lassen will, bekommt auch Frau Meier wieder den alten Zustand, zu dem Zeitpunkt, an dem der Ordner noch da war, vorgesetzt – und alle Ihre neuen Mails sind auch futsch.

Das neue Backup – sinnvollerweise als Task in „Backup“ und „Restore“ getrennt – sorgt hingegen für eine Datensicherung, die sich der Inhalte und Struktur eines Domino-Servers bewusst ist, und dennoch die Möglichkeiten moderner Backuplösungen (z.B. Speicherung lokal und in einer Cloud) unterstützt. Somit werden auch Wiederherstellungsaufgaben mit chirurgischer Präzision möglich. Zum Vergleich:

  • Wiederherstellung kann in-place (also am Ursprungsort) oder gesondert stattfinden (z.B. um etwas zu kontrollieren)
  • Es können einzelne Datenbanken wiederhergestellt werden – auch en bloc, falls es Abhängigkeiten gibt
  • Innerhalb von Datenbanken können einzelne Dokumente und Ordner wiederhergestellt werden (der Klassiker: Es wurden im Aufräumrausch wichtige Mails gelöscht – auch aus dem Papierkorb)

Dabei können auch diverse Domino-spezifische Anpassungen (z.B. Zugriffsrechte, Replika IDs, Agenten) on-the-fly vorgenommen werden, so dass eine wiederhergestellte Datenbank – falls gewünscht – nur inaktiv zurückgespielt werden kann.

More to come

Das war für mich schon sehr beeindruckend und ich kann die Sessions rund um Domino 12 nur empfehlen. Wer sich noch für das globale Launch-Event anmelden will, kann dies hier tun. Da wir schon über 2.000 Anmeldungen zu verzeichnen haben, wird das eine großartige Gelegenheit wieder die Community zu Notes/Domino an einem Ort versammelt zu sehen und gemeinsam die Präsentationen zu besuchen und zu diskutieren.

Ich freue mich schon jetzt darauf und wünsche Ihnen eine gute Woche – bleiben Sie gesund!

Tom Zeizel
Associate Vice President und Head of HCL Software DACH

Der Beitrag Domino 12 – Worauf wir uns freuen können (Teil 1) erschien zuerst auf DNUG e.V..

DNUG Jahreskonferenz #dachnug48

26. April 2021 Posted by Gerda Marx

Die Jahreskonferenz der DNUG findet auch in diesem Jahr online statt. Die deutschsprachige Usergroup für Notes/Domino hat viele verschiedene Fachgruppen u.a. für die HCL Produkte Notes/Domino, Connections und Sametime. Das Online-Event wird am 08. und 09. Juni 2021 jeweils Nachmittags ab 14 Uhr stattfinden. Nach der Begrüßung am 08. [...]

Der Beitrag DNUG Jahreskonferenz #dachnug48 erschien zuerst auf hedersoft Blog.

#DACHNUG48 is coming!

18. April 2021 Posted by Thomas Zeizel, HCL

HCL Domino Version 12 kommt

Richard Jefts, HCL Software

Wie ich bereits mehrfach angekündigt habe, steht Domino 12 vor der Tür. Das globale Launch-Event hat bereits weit mehr als die 1.200 Anmeldungen, die ein kleines Präsent erhalten sollten. Am Folgetag, dem 8. Juni 2021, wird Richard Jefts die Eröffnungskeynote auf der #DACHNUG48 halten, und hierbei nochmal auf die aktuelle Version von Domino, aber auch auf das große Update von HCL Sametime für Web-Meetings eingehen.

Neben dem Blick auf die aktuellen Versionen, können wir sicherlich auch den Ausblick auf die Roadmap erwarten.

Das erste mal dabei: Die Fachgruppe BigFix

Der erste Tag steht eigentlich – wie sonst auch – im Zeichen von Digital Solutions: Nach der Keynote wird noch ein interessantes Kundenprojekt vorgestellt und anschießend präsentieren sich die Fachgruppen und bieten Vorträge zu aktuellen Themen an. Als neue Fachgruppe ist in diesem Jahr auch das Thema BigFix vertreten. Endgeräte-Management ist ein wichtiges Thema – über die Verwaltung von Betriebssystemen, installierter Software (und der dazugehörenden Lizenzen) bis hin zu Konfigurations- und Patchmanagement bietet die BigFix-Familie alles, was man heutzutage als Admin benötigt. Somit können Sie künftig nicht nur Notes-Clients und Domino-Server, sondern auch die Komponenten darunter und daneben pflegen. Ein Blick hierauf lohnt sich sicher!

Der zweite Tag wird groß!

Darren Oberst, HCL Software

Am zweiten DACHNUG48-Tag starten wir mit einer Keynote von Darren Oberst, der als Corporate Vice President für die gesamte Sparte HCL Software die weltweite Verantwortung trägt.

Er wird die Gesamtstrategie, die Entwicklung und damit den Stellenwert von HCL Software innerhalb des Konzerns darstellen. Hierbei liegt sicherlich auch ein Augenmerk auf aktuelle Akquisitionen und Kooperationen, von denen alle Produkte innerhalb unseres Portfolios profitieren dürften.

Nach der Keynote werde ich kurz mein Team für HCL Software in Deutschland, Österreich und die Schweiz vorstellen. Das Überblick soll dabei, neben der allgemeinen Struktur und dem Partner-Business, auch auf unsere drei Produktebereiche Digital Solutions, DevSecOps und Customer Experience gerichtet werden, die sich den Mitgliedern präsentieren werden.


Trotz des virtuellen Formats, soll das Networking nicht zu kurz kommen: Jeder Tag endet mit virtuellen Stehtischen, an denen man sich ungezwungen zu den Themen des Tages – und drüber hinaus – austauschen kann. In lockerer Atmosphäre treffen wir uns zum fröhlichen Miteinander – hierzu soll auch ein Überraschungspaket beitragen, dass bei der Anmeldung mit angefordert werden kann (einfach die Lieferadresse – z.B. im Home Office – eintragen).

Hier geht es zur Anmeldung

Ich hoffe auf zahlreiche Anmeldungen und freue mich schon heute auf das Event. Bleibt mir jetzt nur noch, Ihnen eine gute Woche zu wünschen und: Bleiben Sie gesund!

Tom Zeizel
Associate Vice President DACH

Der Beitrag #DACHNUG48 is coming! erschien zuerst auf DNUG e.V..

The Countdown to the Newest HCL Domino and Sametime Begins! Join Us for Our Global Launch

15. April 2021 Posted by Richard Jefts

I am thrilled to announce that registration is now live for what will surely be a true, blockbuster event on June 7. This exclusive virtual event celebrates our latest versions of HCL Domino v12 and HCL Sametime. The first 1200 registrants got a free gift (we blew past that number in a couple of days!).

I personally love the amazing video that helps capture the excitement as we could down the days to these “breakaway” releases. (An agenda will be released soon. Follow us on Twitter to get the latest.) 

The launch event will include thought-leading sessions, demos, customer speakers, and more. And, it kicks off an exciting collection of Domino content delivered in a series we are calling the “Domino Dozen” (once you’ve registered for the launch, you will have access to this program). Each day, for 12 days following the launch, we will drop a new, essential Domino-related treasure. These pieces will include webinars, panel discussions, and technical deep dives, early access to special programs, thought leadership pieces, and more.  

Also, join us for the closing keynote and happy hour on June 23 — we are calling “Nerdi Gras,” as a hat tip to the days of Lotus past. We will be releasing a party kit soon, with downloadable favors, so you can join in the fun.

For those of us who’ve been on this Domino journey with us for so many years — and for those of you we will be welcoming as new customers — we can’t wait to celebrate.

Join us.

HCL Domino, HCL Domino Volt oder HCL Volt MX? – Das ist hier die Frage

23. März 2021 Posted by Thomas Zeizel, HCL

HCL Domino, der Allrounder

Zunächst einmal möchte ich mich natürlich HCL Domino als unserem Flaggschiff auf dem Gebiet der Anwendungsplattformen widmen. Mit HCL Domino war es von Anfang an möglich, dass Anwender – auch ohne tieferes Wissen um die darunter liegende Technik – eigene Anwendungen gestalten könnten.

Diese Plattform zeichnet sich durch ein paar Eckpunkte aus, die noch heute für Low-Code-Plattformen immanent wichtig sind:

  • Einheitliches Look and Feel – wer auch immer die Fachanwendung erstellt, die Eingabe-Elemente, Aktionen oder Navigation sehen, solange man sich an den Standard hält, über alle Anwendungen gleich aus und funktionieren gleich.
  • Eingebaute User-Verwaltung – eine neue Fachanwendung muss sich nicht um Authentifizierung oder die Verwaltung von Usern kümmern, sondern nutzt die darunter liegende Plattform mit allen Rollen- und Rechtenkonzepten.
  • Workflow und Integration – bei HCL Domino bedeutet dies, wie eigentlich auch in allen anderen Plattformen, dass über Mail nach Freigaben o.ä. gefragt wird. Hinzu kommt aber auch die Fähigkeit, dass man über REST und andere Schnittstellen auf andere Systeme (wie z.B. SAP) zugreifen kann.

Der Vorteil einer solchen Lösung war damals wie heute, dass alle auf ihr entwickelten Anwendungen von der Weiterentwicklung der darunter liegenden Plattform profitieren. So wird mit HCL Domino 12 die Multi-Faktor-Authentifizierung kommen oder Dank HCL Nomad jede Anwendung auch auf mobilen Endgeräten laufen – ohne dass an den Anwendungen selbst etwas geändert werden müsste.

Nichtsdestotrotz sollten auch Domino-Anwendungen von Zeit zu Zeit aktualisiert werden, um gerade am Front-End zum User weiterhin frisch und nicht zu altbacken auszusehen.

HCL Domino ist aber noch breiter aufgestellt als nur als „Rapid Application Development“-Plattform, wie es früher hieß: Man kann auch Enterprise-Anwendungen darauf betreiben von einem internen CRM bis hin zu Web-Anwendungen mit Millionen Endanwendern über mehrere Instanzen. Somit zeigt sich die ganze Bandbreite der Entwicklung von Anwendungen, von Low-Code bis Pro-Code, allein schon in diesem Produkt.

HCL Domino Volt – Low-Code-Entwicklung auf Basis von HCL Domino

HCL Domino Volt

Während Domino-Fans zu Recht anmerken könnten, dass die Entwicklung von Anwendungen auf ihrer Lieblingsplattform doch schon sehr einfach ist, gibt es am Markt aber durchaus auch den Bedarf nach noch mehr Einfachheit. Dem von mir schon oft verteufelten Excel-„Anwendungs“-Wahnsinn kann man hierbei mit HCL Domino Volt begegnen: Mit HCL Domino Volt kann man beispielsweise Canvas-Driven-Apps – also Anwendungen, die sich über ihre Oberfläche definieren – auf Basis von Excel-Listen erstellen. Diese Apps haben dann eine Eingabemaske, verschiedene Ansichten auf die Daten und bieten somit Komfort und Sicherheit bei der Verwaltung. Keine Excel-Formel, die man versehentlich überschreibt, oder Daten, die durch eine unbedachte Sortierung durcheinander geraten.

Behörden haben in Europa bereits mit Domino Volt Tausende von Corona-Beihilfen bearbeitet und dafür Terabytes an Daten verwaltet. Durch die einfache, aber sichere, Entwicklungsplattform, eignet sich Volt für alle Anwendungen, die eine einfach Datenverwaltung mit leichtgewichtigen Workflows benötigen. Damit ist diese Plattform eine ideale Ergänzung im Arsenal der heutigen Anwendungsentwicklung und ‑bereitstellung. Mit Domino Volt können eine Vielzahl kurzfristiger Anforderungen aus verschiedenen Fachbereichen eines Unternehmens bedient werden, so dass die Entwickler mehr Zeit für die konzentrierte Arbeit an den langfristigen Projekten haben.

HCL Volt MX – Ein Code für jede Plattform

Der große Vorteil von HCL Volt MX, das man in älteren Gartner MQs und Forrester Waves noch unter den früheren Bezeichnungen „Kony“ oder „Temenos“ findet, liegt definitiv bei der Softwareentwicklung für mobile Endgeräte unter Apple iOS und Android, aber auch für Progressive Web Apps.

Die HCL Volt MX Plattform

Egal für welche Plattform eine App entwickelt wird, dank Volt MX benötigt man lediglich einen Quellcode. Das erleichtert nach dem ersten Release auch die weitere Pflege und Erweiterung der Anwendung, ganz nach dem Volt MX Motto „Start fast. Stay fast.“.

Zudem bietet Volt MX zahlreiche, fertige Schnittstellen zu diversen Standardanwendungen (auch zu HCL Domino), die dann auch nicht mehr entwickelt – und vor allen Dingen – nicht ständig nachgezogen werden müssen, wenn der Hersteller der anderen Anwendung an dieser etwas ändert.

Insofern ist auch HCL Volt MX eine Low-Code-Plattform für Pro-Code-Developer, da diese auf viele vorgefertigte Komponenten zurückgreifen und sich auf die Entwicklung ihrer eigenen App konzentrieren können. Damit ist Volt MX ein zusätzlicher Pfeil im Köcher der Anwendungsentwicklung, insbesondere dann, wenn es sich um Apps handelt, die für mobile Endgeräte und für die breite Öffentlichkeit gedacht sind. Unter Anderem hat ein Department of Motor Vehicles in den USA sogar virtuelle Führerscheine im Apple Wallet mit Hilfe dieser Plattform realisiert.

Und was sollte man nun nutzen?

Ich glaube, dass jede der oben genannten Plattformen eine Daseinsberechtigung mit den jeweiligen Schwerpunkten und Stärken hat. Falls Sie für die Anwendungsentwicklung in Ihrem Unternehmen verantwortlich sind, bekommen Sie insbesondere mit Volt MX eine sehr flexible Plattform. Aber auch Volt auf Basis von HCL Domino hat Vorteile – weil man damit einfache Anwendungen, wie Umfragen oder Eingabeformulare, erstellen kann, die dennoch Schnittstellen mit dem HCL Enterprise Integrator und dem SAP Connector günstig nutzen können. Letzteres gilt auch für HCL Domino-Anwendungen, die insbesondere für Unternehmen mit HCL Notes und Verse für E-Mail und Kalender interessant sind, aber auch ohne die Nutzung von E-Mail in vielen Firmen eingesetzt werden. Hier sind oft Zuverlässigkeit, die Sicherheit durch die Verschlüsselung und auch die Replikation von Daten in entlegene Gegenden der Welt gute Argumente für diese Plattform.

Alles in allem deckt HCL Software für die Erstellung von Anwendungen ein breites Spektrum ab. Was in Ihrem individuellen Fall die beste Plattform darstellt, können Sie gerne gemeinsam mit uns oder einem unserer Business Partner herausfinden.

Mit diesem Angebot wünsche ich Ihnen gleichzeitig eine gute Woche und bleiben Sie gesund!

Tom Zeizel
Associate Vice President DACH

Der Beitrag HCL Domino, HCL Domino Volt oder HCL Volt MX? – Das ist hier die Frage erschien zuerst auf DNUG e.V..

HCL Domino v12: The 4 New Security Features You’ve Been Waiting for

16. März 2021 Posted by Cormac McCarthy

While no platform is immune to the possibility of hacking, the question I would pose is: Has your Domino infrastructure ever been hacked?  Didn’t think so. It’s probably boring to say that the most straight forward answer is HCL Domino is rock solid on security.   When set up correctly and optimised, HCL Domino is the most secure platform of its type.  It’s true though.  Reliable and secure is a good thing. A very good thing. 

The HCL Domino v12 beta is out now.  If you haven’t already tried it, it’s free for all existing licensed Domino customers.  It’s waiting there in flexnet for you to download and try it out!  It’s the first time a beta of this type is in existence and it has multiple interactions (we’re currently on beta 2; beta 3 is scheduled for the end of March. Register here to join us for the beta 3 webinar.

What I really love about it is the almost instantaneous feedback from the beta forum, from those in charge of development.  Domino v12 is scheduled for full release in Q2 of this year.  (June 2021 timeframe is given at the moment).

Read an overview of what’s coming here.

Here’s is a list of all the NEW NATIVE security features coming in Domino v12 and there’s a whole host of them:

  • Automating certificate management 
  • Time-based one-time password (TOTP) authentication 
  • Enforce internet password lockout based on IP address 
  • TLS 1.0 is disabled by default 
  • Support for PEM-formatted TLS host keys and certificates 
  • Two new curves supported for TLS 1.2 ciphers that use ECDHE for forward secrecy
  • New template signing ID uses 2048-bit keys
  • NRPC port encryption supports forward secrecy using X25519
  • Import internet certificates that contain unsupported critical extensions
  • Suppress key rollover alerts during ID vault synchronization
  • New Query Vault command options
  • Support for SameSite cookie 

Also note native support for DKIM is planned in the 12.0.x timeline. (Again natively, you can achieve DKIM with third party mail gateways).

We could argue about which are the best and more important ones here, but I’m going to concentrate on the 4 new security features in Domino v12 that you’re going to want to implement straight away:

  1. Automating certificate management 
  2. Time-based one-time password (TOTP) authentication
  3. Two new curves supported for TLS 1.2 ciphers that use ECDHE for forward secrecy
  4. NRPC port encryption supports forward secrecy using X25519 

Note: these are all based on current plans at beta 2, some of these will be subject to change (for the better) come beta 3 and GA.

What is it?
Automating certificate management?

What does it give you?

This topic could probably be four killer new features in one on its own, because it includes so much.

The short answer here is it takes something that was a headache to most admins and makes it completely seamless and automatic. It also includes support for ECDSA which is very progressive in terms of offering support for cutting edge security (some browsers don’t even support it yet).

In order to explain the context here, we probably need a short history lesson on cert management in Domino.  Prior to SHA-2 being the supported, Domino managed certs via a Domino database. It did exactly what it said on the tin and was never really updated from the time of release. But it worked. There were only four steps listed in the database. Some customers did find it fiddly.

Then SHA-2 support for Domino came out and admins did not like how this was implemented.  Again, it’s Domino, so it was secure, and it worked, but the process was a headache.  I have to admit for 99 percent of our customers, I just did it for them to save them the hassle so I got used to it.  But you did need a kyrtool, you’d need to install Openssl, you’d have to copy and paste various commands, copy parent and intermediate certs into text files.  It was messy to implement.

Well that’s gone.

What’s in its place is the most straight-forward solution one could imagine.

Let’s Encrypt offers free third-party SSL certs.  They’re currently the most widely used Certificate Authority in the world and work with all major browsers (they’re sponsored by some of them).

You can now get Let’s Encrypt Certs in Domino, by filling in a couple of fields in a form.  In short saying, “I want a cert for my website.  Give me one now.”  And it will give you one straight away. In seconds, your web server will be running with that cert.  A new task called CertMgr manages it all.

“It can’t be that easy,” I hear you say.  Well, in most use cases, it is.

Wildcard certs are slightly different, but again it’s as easy as it can be.  Other third-party certs are still 100 per cent supported, and easier than ever to implement with the Certificate Store.

Another point you might have missed around this is CertMgr supports Elliptic Curve Digital Signature Algorithm (ECDSA) using the NIST P-256 and NIST P-384 curves.  Not all browsers support this yet (most do), but in short it has the potential to give quicker and more secure TLS connections and shows that HCL are ahead of the curve #badnerdpun.

How do you implement it?

There are a lot of options available here but I cannot over emphasise how straight forward this is to implement.

CertMgr runs as a task. The first time you load it builds a back-end Domino database.  The database has intuitive forms but there’s documentation just in case.  You create a free account with Let’s Encrypt with a couple of clicks within the database.

I don’t want to get too bogged down in the detail here, because you don’t actually need to know the back ground details, but there a couple of ways Let’s Encrypt will verify you’re the owner of the domain, either by HTTP response (the most straight forward I think, but requires that the server can initiate outbound HTTPS requests – even temporarily to Lets Encrypt) or via DNS Response.

The HTTP response in particular is VERY easy to setup.

Third party certs are managed via the database, so you won’t have to fiddle about with openssl and the kyrtool.

ECDSA is a more complex subject, but the steps to implement are relatively straight forward here, the main complicating factor here is managing browser support, there’ll be more of this in beta 3 (thanks to Daniel Nashed for answering some of my basic questions on this.  Follow Daniel’s blog for more expanded detail on these subjects).

What is it?

Time-based one time password (TOTP) authentication

What does it give you?

Firstly, the obvious point here is you’ve been able to do TOTP in Domino for a long time, but it required third party software or appliances.  Here we get TOTP natively within Domino.

What is TOTP? Well, it’s two factor authentication based on a time based password that changes.   You put an app on your device that manages a six figure pin that changes every 60 seconds and it associated with a specific account.

Here you can deploy here with any number of apps (I’ve used Google Authenticator and OpenATP with Domino12 extensively for a couple of months and both have worked perfectly).

How do you implement it?

It’s easy.

You set up a trust relationship with your ID Vault and TOTP.

You enable it on the configuration settings document and then either web site, server or virtual server document.

You’ve to do a once off configure on the login form (but there’s a template for you to use, so it’s two minutes work for a non-developer).

Restart Domino and you’re ready to go.

Each user does a self-enrolment process the first time they connect which is intuitive, and takes no more than a couple of minutes.

There’s more functionality coming on this with Directory Assistance and managing multiple domains so watch this space.

What is it? 

Two new curves supported for TLS 1.2 ciphers that use ECDHE for forward secrecy

What does it give you?

Better performance on Perfect Forward Secrecy.

Perfect Forward Secrecy has been available since Domino 9.0.1 FP3 IF2.  It gives assurances session keys will not be compromised.

This new set of two new elliptical curves (once forward secrecy is set up) can offer better performance.  The two new curves are X25519 and X448. 

How do you implement it?

You do nothing. If you don’t want it you need to actively turn it off with a notes.ini setting. Domino 12 will attempt to use supporting curves in the following order

  1. X25519 
  2. NIST P-256
  3. X448
  4. NIST P-384
  5. NIST P-521 

What is it?

NRPC port encryption supports forward secrecy using X25519

What does it give you?

This sounds very similar to the last one, but there’s a whole lot more to unpack here.  These are for Domino to Domino connections over port 1352 or Notes client to Domino connections over port 1352.

So if you’ve ports with encryption turned on (which nowadays we are recommending to everyone), with Domino 12 the level of encryption increases from:

  • 128 bit AES-GCM for network encryption and integrity protection and 128 bit AES tickets 


  • 256 bit AES-GCM for network encryption and integrity protection, X25519 for forward secrecy, and 128 bit AES tickets.

Basically stronger, encryption, better protection for sessions with forward secrecy and a curve that gives the best performance.

How do you implement it?

This is one of those points of different between Domino and Notes clients and ANY other technology.  (i.e. as opposed to the Office365 hacks, which are being put down to weakness in how Microsoft authenticates out of box).  Certs are baked in.  Basically if you have port encryption turned on, this will turn on by default.  If you don’t have them, turned on you can just enable encryption on the ports (for all inter server traffic), and via a policy for Notes clients.

In any other technology this would be so much more complex to do.  You’d need multiple devices to manage the connections, you’d have to change the port numbers, probably have to allow that port in a firewall plus you’d need to manage certs with third parties.  With NRPC, you’re already using certs to connect in so it’s just saying encrypt the port.  The same port (1352) is in use whether encrypted or not encrypted, so no further changes are required on the network or firewalls etc.

Oh and that’s only NEW and NATIVE features in Domino 12.  I just have to mention one more briefly that is no-charge to all entitled CCB customers. It’s HCL SafeLinx.  It is already available and in the wild.  It supports both HTTP and Notes port connections out of the box as a reverse proxy.  If you already user HCL Nomad you’ll probably know about it.  Later this in 2021, HCL Nomad Web will be out and you’ll look into this more then. (It can also be used for Sametime, Traveler and Verse – there’ a webinar on this coming up).  It builds upon the layers of native Domino security and gives you flexibility to add extra layers of security, particularly for external connections.  The main advantage is that it’s got baked in functionality for Domino so you don’t have to reinvent the wheel to do a basic set up.

I hope you enjoyed my first blog for HCL.

As always please provide feedback if you found anything interesting here.

Cormac McCarthy – Domino People Ltd

The Low Down on HCL Domino v12 Beta 2 and Beta 3

1. März 2021 Posted by Barry Rosen

A month ago we released the first beta drop of HCL Domino v12 and we’re excited to see such a high level of engagement among our customers, ambassadors and business partners. Two weeks ago, we announced the drop of Beta 2 and hosted a webinar with an overwhelming number of live questions — 118 to be exact! If you missed the webinar, you can catch the replay here. We also picked the most popular questions about our beta program and v12 , and have published those — along with the answers — here.  

To keep up with this exciting momentum, please join us at our next webinar about beta 3 on March 30, at 10AM ET. Register here. Beta 3 will be the last beta drop before the v12 release, so don’t miss your chance to participate and help us shape the future of HCL Domino! In fact, don’t wait for the next beta drop. All existing customers are automatically entitled to download the software packages from Flexnet today. We look forward to your feedback.

Beta Q&A 

Still have unanswered questions about the beta? Submit them in the beta forum.

Q: Is there a way to tell if issues raised in the beta forum are included/fixed in beta 2 or 3? 

A: The list of SPRs fixed in beta2 can be found in the release notes. Please see here.

Q: When can we expect the 64-bit standard client? 

A: Our plan is to start with the basic Notes client first in v12 beta 3, and then release the 64-bit standard client in a beta post v12 GA.

Q: Is the C-API toolkit updated and available as part of this beta? 

A: We released the C-API toolkit for v11 and will update for v12 post release.

Q: Is two-factor authentication available? 

A: Yes, feel free to try it out today! 

Q: If I load the beta on my system, will upgrading to v12 Prod work? 

A: When going from the beta version to the GA version, we recommend uninstalling the beta and installing v12 as a clean new install.

Q: Is there a backlog of undo/redo? 

A: No, but it has been submitted in our Ideas Portal. You can vote for it here.

General HCL Domino v12 Q&A 

Q: Does Domino 12 install VoP automatically as part of the base install? 

A: VOP will be included in Domino v12, but not automatically installed. 

Q: When will Hebrew and Finnish be included in Domino? 

A: Both languages are on the list for v12.0.1.

Q: Is there any chance for DKIM support in Domino in near future? 

This is in our future roadmap and will be delivered in the V12.0.x timeframe.

Q: Is there a future for HCAA ? 

A: From a technical point of view, HCL Nomad Web will succeed HCAA.

Q: What version of Domino will the Nomad Web client require? 

A: It will require a v12 server.

Q: What version of Java is supported by the v12 Domino server? And what is the roadmap for Domino for keeping up with Java versions? 

A: OpenJDK 8, and of course we are going to upgrade this to newer versions moving forward.

Q: Is Certificate Store replacing CertSrv 

A: Yes.

Q: Can I install and configure Domino through Ansible? 

A: Yes, feel free to do that. You can also check out some examples here.

Q: Is the old KYR/STH still supported? Can I push in new certificates by script or automation? 

A: LetsEncrypt will manage certificate renewals automatically. If you do not want to use LetsEncrypt, you can use your own CA. And yes, you can automate it.

Q: Is it possible for a developer to use the LetsEncrypt support to create SSLKeyring for dummy FQDN? 

A: LetsEncrypt certificates are only issued to servers that can be reached via HTTP or where the owner is in control of the DNS record. Creating a self-signed certificate is not possible with LetsEncrypt but will be possible with the Domino Certificate Manager.

Q: What will happen to Xpages going forward?  

A: Domino V12 will include Bootstrap 4. XPages functionality will continue to be enhanced and fully supported, but note that we are shifting to make low code (Domino Volt) our top priority.

Q: Will Bootstrap4 & FontAwesome also be available in XPiNC? 

A: Yes.

Q: Are there still text size limits in text fields or form documents?  

A: Many limits of Domino were raised or will no longer exist in v12. However, if you still need anything to be improved, please submit your idea here.

Q: What is the version of Sametime embedded in Notes v12? 

A: Sametime 11.5.

Q: When will Domino v12 be available to the market and how can I learn more?  

A: We will launch v12 in Q2 this year, around June. Stay tuned as more details to be announced soon. In the meantime, you can read our preview article here and watch our preview demos here

Tom Zeizels Blog – HCL Domino V12 Beta veröffentlicht

30. Januar 2021 Posted by Thomas Zeizel, HCL

Wie Mitte 2020 angekündigt, wird HCL in diesem Jahr die Version 12 von HCL Domino und HCL Notes veröffentlichen. Einen ersten Einblick können sich nun interessierte Kunden und Kundinnen über die, gerade in dieser Woche veröffentlichte, Beta-Version verschaffen, die bereits in Flexnet zum Download zur Verfügung steht. Für diejenigen unter Ihnen, die diesen Blog schon […]

Der Beitrag Tom Zeizels Blog – HCL Domino V12 Beta veröffentlicht erschien zuerst auf DNUG.

Start Your Engines! HCL Domino v12 Beta is Here! Are You Ready?

20. Januar 2021 Posted by Thomas Hampel

If you joined us at Digital Week 2020, you’ve probably heard about the preview of Domino v12. (It was the most popular session of the event!) Now that the release of v12 is around the corner, we would like to provide all current customers an exclusive preview. Today, we’re officially launching the first public beta of Domino v12!  

We are inviting you to join this beta program and take part in shaping the future of our product, helping us deliver the best-ever product experience! All existing Domino customers are automatically entitled and will be able to download the required software packages from Flexnet today. (See below for Q&A.) 

The goal of the Domino v12 Beta Program is for our community of beta participants to conduct an honest, constructive, and thoughtful review and testing of the Domino v12 beta software, which includes HCL Domino V12 , HCL Notes V12 , HCL Domino Designer & Admin V12 and HCL Traveler V12  

 In the first phase of the beta program, we are delivering the following components:   

  • Domino on Docker (English)  
  • Domino for Windows, Linux, AIX (English)  
  • Traveler for Windows, Linux, AIX (Multilingual)  
  • Notes Standard for Windows (English)  
  • Notes Standard for Mac (English)
  • Designer and Admin Client (English)  

At a later stage of the beta program, we will be providing Domino and Traveler for IBMi, as well as additional language support. 

Beta participants, please let us know how you think about the product by submitting your feedback in our beta forum. For general input and new ideas or feature enhancement requests, please use the Domino ideas forum here.  

v12 Beta Highlights 


 Domino Designer 

  • XPages now Bootstrap 4.4.1 – Thanks to Howard for this idea.   
  • Improvements to build responsive and mobile Domino applications,  
  • Ability to use DQL in Formulas 

 Notes Client 

  • Significantly improved the performance on Windows and Mac, especially on slow networks. 
  •  Improved Search: When searching for a person, an email, or a Notes application, suggestions will now appear in the typeahead. Your recent searches will also be displayed in the typeahead. This is based on this idea.  
  • Multiple email signatures: If you were bothered by the lack of email signature management before, Notes v12 allows you to choose a signature when you compose, reply or forward an email. Based on this idea from Daniel.
  • Choose a different “From” address when composing an email, a feature initially requested by Vlaad in this idea

 These are just a few highlights of the new features of V12. For more details, please refer to the What’s New section of the product: 

Frequently Asked Questions:   

 (1) Do I need to register to get the beta version of v12?  

If you are an existing customer, you are entitled to v12 beta automatically. Please contact your IT admin to get v12 beta from Flexnet.   

(2) How can I submit feedback on the beta and how would HCL handle my feedback?  

Please submit your feedback via our beta forum here.  

We will review all the feedback and respond as soon as we can. Note that not all feedback will be implemented into the product; the final decision depends on various factors. However, we will ensure every comment is heard and being taken into consideration.  

(3) Do I need to register for the beta forum to provide feedback? 
If you have not created an account on HCL Partner Connect website, you will need to register for access. It will take around 1 business day to get the approval. Once the registration is approved, you can access the beta forum. The account will be used for accessing any beta forum in the future. For customers who already have an account, you can login and access the forum directly. 

(4) If I am not a current customer, can I be a part of the beta?   

Currently, the Domino v12 beta is only open to existing customers. If you would like to try Domino, please contact your HCL sales representative to get access to the trial version of Domino v11.  

 (4) What is the difference between beta and trial?  

A beta is considered as an early access program to our latest version which is not available to the public. The goal of setting up beta is to collect concrete feedback from users so that we make improvements and bring the best experience when the features go live.   

A trial is offered to potential customers who haven’t tried our software before and expressed interest in purchasing the software.   
(5) What is the difference between HCL Domino Early Access Program and the beta? If I have already registered for the Early Access Program, should I try the beta too? 
The Early Access Program (EAP) is intended to give users a preview of features that are considered for HCL Domino v12. It is feature-driven and iterative, meaning new iterations (code drops) will be made available as soon as they are declared ready for testing by our development team. In the EAP, you are usually be able to test only one or a few features.  
The beta is a full-scale preview of features and functionalities considered for HCL Domino v12. Various components including Domino, Notes and Traveler will be offered.  
With this beta release for v12, the EAP will be suspended until the official launch of HCL Domino v12.

HCL Domino Volt: The December Release is Here!

8. Dezember 2020 Posted by Martin Lechleider

While the holiday season is upon us, we’re not slowing down! Including the launch earlier this April, we’ve had three releases of HCL Domino Volt — with many more to come in 2021. Starting today, customers can access v1.0.2 on the HCL License Portal and updated documentation here.  

To learn more about building apps with HCL Domino Volt and what new features are in the latest release, please join our webinar next week, “Zero to Hero in 30 days,” where we’ll demonstrate apps built across different use cases, industries, and skill levels. You will learn what you can realistically deploy in 30 days.  

Highlights of this new release include: 

  • Improved user experience
  • Standardize the look of your apps
  • More ways to use HCL Domino to get things done  

Improved usability: With a new properties panel and no modal dialogs, we’ve eliminated extra steps and hidden settings. These changes have made the tool more intuitive and requires fewer clicks to get things done.  

Standardize the look of your apps: Drive brand consistency and standardize the look of your apps​. You can now add custom themes that align with your aesthetics and your organization’s branding. Users will be able select the themes you add when designing their apps. 

Leverage Domino to get things done: The following features provide more ways for you to get things done by leveraging Domino’s capabilities: 

  • ‘Contains’ search operator (uses full text indexing): Quickly find information you need by searching for data by text string. It works with data view and services.  
  • Sort by app-specific fields ​(uses DQL): Easily analyze data you’ve collected by sorting your fields in the data view. 
  • Name-picker item on the palette (uses Domino directory): Easily find and select people and groups in the Domino directory and assign them to roles or to receive notifications.

Workflows and other improvements 

  • Map internet email to role and notifications: You now have the flexibility to use any internal email address when assigning roles and notifications, not just Notes addresses. 
  • Email attachments:  Now you can include files that have been attached during the form fill process in email notifications. 
  • Application history: You can now view past changes made to your app.  

Not an HCL Domino Volt customer yet? Try it out in our free sandbox, which includes all the latest features in this release. Find out more about HCL Domino Volt here.

The post HCL Domino Volt: The December Release is Here! appeared first on HCL SW Blogs.