HCL Domino V11 – Authenticating web users against the Notes ID passwords in the ID vault

Starting with Domino V11, you can configure Domino to use an ID vault password to authenticate web users accessing the server.

If enabled uses the Domino server to authenticate users to HCL Verse, HCL iNotes with their Notes ID and passwords stored in IDVault. With this feature, users only can to remember their password in the file ID.

This feature is ignored for authentication of the following users:

  • Notes client users
  • Web-only users without Notes IDs
  • Users who authenticate via SAML federated identity authentication

How to configure?

  • Create or edit a Configuration document in the Domino directory. (Configuration – Servers – Configurations)
  • Open the Security tab
  • In the Internet Password Verification section, select one of the following options

If some web users with registered Notes IDs do not have IDs in the vault or if you are unsure if they do, use “Check vault first, then directory“. If Notes IDs are not found in the vault, Domino will use internet passwords in Domino directory Person documents to authenticate the users.


What's new in the final release – Domino server V11

I continue with the previous article about news in final release, where I summarized news in Notes client and iNotes V11. However, most features require a Domino V11 server. Here is a summary of news for the Domino server.

Domino V11

  • New Domino licensing model
    (Active license management is not available for production use licenses at this time. Therefore, configuring a FlexNet license server for Domino 11.0.0 is not required. Details of when HCL will enable active license management will be announced.)
  • Product rebranding
    (References to IBMhave been rebranded to HCL for the Notes and Domino product family. Strings with IBM that were visible in normal use of the product are changed to HCL.
    Occurrences of IBM in the following locations are changed to HCL:
    – Logos and copyright information
    – Error messages
    – Dialog boxes
    – Templates and databases that ship with Domino and Notes 11
    – Registry path in Windows™ platform

    Not all IBM strings are replaced. The following occurrences of IBM strings remain and have not been changed:
    – The following directories or paths that if changed could require customers to alter their applications: IBM_TECHNICAL_SUPPORT, IBM_ID_VAULT, IBM_Credstore, IBMDomino.sym, ibmditar.css, C:\Program Files\IBM\Domino\data\domino\js\dojo-1.5.4\ibm
    – notes.ini configuration parameters that contain IBM strings
    – Proprietary IBM strings such as IBM operating systems, servers, compilers.
    – LDAP attributes
    – COM objects with IBM as the namespace
  • New InstallAnywhere platform for Domino
    (Flexera InstallAnywhere 2018 is the underlying install platform used as of HCL Domino 11. InstallAnywhere offers the following install modes:
    – Graphic User Interface (GUI) mode, available only on Windows
    – Console mode, available only on AIX and Linux
    – Silent install mode, available on all platforms
  • Directory Sync
    (Directory Sync allows you to sync people and group data from an external LDAP directory into the Domino directory. Currently data from Active Directory can be synced. )
  • DAOS tier2 storage
    (Domino Attachment Object Service (DAOS) tier 2 storage enables you to use an S3-compatible storage service to store older attachment objects that haven’t been accessed within a specified number of days. This feature allows you to reduce the amount of data stored on Domino servers that use DAOS. It can also improve the performance of any incremental file backups done for DAOS. An S3-compatible storage service uses the Amazon Web Services (AWS) Simple Storage Service (S3) API)
  • New Java Runtime Environment
    (The Java Runtime Environment (JRE) that comes with HCL Domino® 11 and HCL Domino Designer 11 is now Eclipse OpenJ9 that is provided through AdoptOpenJDK.
    The JRE component versions are:
    – openjdk version “1.8.0_222”
    – OpenJDK Runtime Environment (build 1.8.0_222-b10)
    – Eclipse OpenJ9 VM
  • IBM GSKit cryptographic libraries replaced with the OpenSSL equivalents
    (On all HCL Notes and Domino® platforms, OpenSSL 1.1.1a cryptographic libraries replace the IBM GSKit libraries provided in earlier releases)
  • Limiting ID file downloads from the ID vault is disabled for SAML federated login
    (When SAML Notes federated login or SAML Web federated login is the authentication method used to extract HCL Notes ID files from the ID vault, the value for the ID Vault policy setting Allow automatic ID downloads is now ignored. (This setting is in the ID vault tab of a Security Settings policy document).
    The setting is ignored because SAML authentication requires unrestricted download access to ID files from the vault.
  • Authenticating web users against the Notes ID passwords in the ID vault
    (You can configure HCL Domino® to use the password in an ID vault to authenticate web users that access the server)

HCL Domino, Notes, Traveler, Sametime V11 Documentation

If you are looking for what’s new in Domino, Notes, Sametime, Traveler V11 or need a quick reference to the documentation, here are a few links.

HCL Domino 11.0 documentationLINK
HCL Notes 11.0 documentationLINK
HCL iNotes 11.0 documentationLINK
HCL Client Application Access 3.0LINK
HCL Domino 11 documentation updatesLINK
HCL Traveler 11.0 documentationLINK
HCL Sametime 11.0 documentationLINK

Domino, Notes, Traveler, Sametime V11 released

As announced in early December, Domino, Notes, Traveler and Sametime V11 were released. Check Flexnet where you should already see the installation files.

Active license management is not available for production use licenses of HCL Domino 11 at this time. Therefore, configuring a FlexNet license server for Domino 11.0.0 is not required. Details of when HCL will enable active license management will be announced.

In addition to English, a German and Japanese language version is available. We’ll have to wait for more languages.

Traveler V11 can be installed on Domino server V9.0.1 and V10.


HCL Domino 11.0 Detailed System Requirements LINK
HCL Notes 11.0 Detailed System Requirements  LINK
HCL iNotes 11.0 Browser Requirements LINK
HCL Client Application Access 3.0 Detailed System Requirements LINK
HCL Sametime 11 System requirements LINK
HCL Sametime 11 Installation and Administration Guide LINK
Getting Started with HCL Sametime 11 LINK

What’s coming in Notes V11 almost before release?

After the Engage conference (May 2019), I wrote an article about what to expect in the new version of Domino / Notes. I wrote that there will be a beta version in Q3 / 19 and so on. So what is the current situation?

HCL fulfilled its promises and released at the end of October perhaps the latest Domino / Notes beta 2 including Traveler and Sametime V11 beta.

At the same time, HCL announced the first major release of V11 on December 4, so it is more than likely that we will be able to install the final version by the end of the year.

Are there any changes from the May information? Here is a selection of some important things:

  • Cleaner, modernized UI.
    The overall appearance of Notes has changed in this release.
  • Minimalistic menus
    Less used actions and options are hidden until you need them. Drop-down and expanding menus allow you to retain all previous capabilities without cluttering the workspace.
  • Simplified forms
    Forms within Notes Calendar and Contacts are organized in a basic, user friendly layout.
  • Domino licensing
    Starting with HCL Domino 11, each Domino server must be configured to connect to a FlexNet licensing server. The licensing server is used to validate that a Domino server is in compliance with the licensing requirements.
  • Inbox action bar
    There are fewer icons above the inbox on the action bar. Further options can be viewed when you select and hover over an email
  • Multiple Dictionaries Support
    You can now spell check any language that your HCL Notes client supports within an email or document.
  • Meetings > 24 Hour Support
    Meetings that are longer than 24 hours are now supported by the HCL Notes Calendar
  • Export As PDF
  • TLS 1.2 support for SAML
    Notes and Embedded Sametime now support TLS 1.2 with Notes’ Federated login (SAML).
  • Mac 64-bit Uninstaller
    The uninstaller provided for Notes 11 on Mac is now 64-bit. This change is made because Apple will no longer support a 32-bit uninstaller as of Mac OS 10.15 (Catalina) release.
  • Moving folders prompt
    Users are now prompted to confirm when a mail folder is moved
  • Synched release schedule
    Starting with this release, Sametime® and Notes® follow the same release schedule.
  • New HCL Notes 11 theme
    HCL Notes has a new theme for Mail, Calendar, Contacts, and Notebook. After the previous blue, there has been a change that is much more pleasant after a long period of use.

Registration for Domino V11 is open

Domino V11 beta is scheduled on September 16. To participate in the Domino Portfolio and Sametime V11 beta simply fill-in and submit the entry form on this site: LINK

HCL is looking for participants who are willing to:

  • Engage in a dialog about Domino, Notes and Sametime V11 and provide timely and candid feedback
  • Be constructive and professional in all written/spoken interaction with beta program members, and HCL
  • Attend the web conferences and meetings pertaining to the beta program
  • Install and test the beta offering in a non-production environment
  • Share their use case for the beta in their company
  • Be open to the idea of becoming a reference for Domino and/or Sametime V11

There will be an initial beta release with a product refresh to follow. Testing will start on 9/4 for the products below:

  • HCL Notes and Domino v11.0.0 Release Notes English
  • HCL Notes v11.0.0 Basic Configuration Windows English
  • HCL Notes v11.0.0 Windows English
  • HCL Notes v11.0.0 Mac 64 bit English
  • HCL Notes, Domino Designer and Admin v11.0.0 Windows English
  • HCL Domino Server v11.0.0 Windows 64 bit English
  • HCL Domino Server v11.0.0 Linux 64 bit English
  • HCL Sametime v11.0.0 Multilingual*

*Initial beta release will be Sametime Embedded client only for install with Notes v11.0.0. All other Sametime v11.0.0 clients and servers will follow. New code strings will be English only.


HCL Factory Tours Milan – Day 2 Summary

After an intensive first day and a great evening followed by an interesting program right from the morning.

The second day I was most interested in the news about Verse 11, Sametime 10, Client Notes 11.

VERSE On-Premises 11…

Barry Rosen and Andrew Davis have demonstrated the functionality that will appear in the near future in VOP 1.0.7 :

  • ICS Import directly from an attachment
  • Allow user to download all attachments at once
  • Allow user to filter search results to show unread messages
  • Allow viewing of messages sent with “prevent copy” turned on
  • Better user experience when type-ahead yields no results
  • Change blank subject line to the name of an attachment
  • Continued enhancements on the modernization of the Calendar user interface
  • and several others

VOP features coming to VOC in Q1/Q2 -Subject to change:

  • 24 hour time setting
  • 30 days data sync for offline
  • Accept button added to Calendar Inbox popup card
  • Allow users to minimize the compose and quick calendar create docked windows
  • Dual Time Zone in Calendar Inbox
  • Extension: 3rd party Files repository integration
  • Extension: Custom name Picker enhancement.TO/Cc/Bcc in one action
  • Extension Enhancement: Hook before on Send: provide attachment name & size and bcc info
  • and many others


  • Complete New Calendar React UI
  • Complete effort for supporting Verse Web on Mobile (Mobile web alternative to iNotes Ultra Light)
  • Next Gen Lightweight Client

Notes & Lightweight Client Strategy

Another (for me) expected session was Notes & Lightweight Client Strategy by Adrew Davis

Notes 11 backlog sneak peak – Subject to change

  • Windows 64-bit /JVM 11 support
  • Mac 64-bit installer
  • Modernized Look
  • Stretch Goal: Create meetings beyond 24 hours – for all clients !

What does it mean to be “Lighter Weight”

  • Simpler Install and Upgrade – No more provisioning
  • Super fast startup – enough said
  • Single native process – No Java, less memory ….
  • Simpler extensibility model – HTML/JS programming – No more Eclipse, Java, SWT
  • and others

The first beta Lighter Weight Client should be in 2019

Sametime 10

What to expect in Sametime 10 showed Pat Galvin.

What´s in Sametime Limited use V10

  • Concurrent online clients – desktop, mobile, browser
  • Messages received immediately on all online client
  • Received queued messages when logging in on a client
  • Runs on Domino 64-bit
  • Fully compatible with Sametime 9.0.1 FP1

What’s next in V10 or V11

  • Server-side Chat History
  • Multi-Device File Transer
  • Multi-Device Voice/Video Calling
  • No More Browser Plugins
  • Docker for Simplified Deployment
  • Get rid of WAS, DB2, Sametime System Console
  • and many others

What to write at the end?

I did not get any more because I had to go back home to work. The journey by car was long enough and I had time to think about what it was like for 2 days in HCL Factory.

It was a great day with lots of interesting information, and it seems that HCL really means “Domino family” seriously.

I’m glad I could be there to meet a bunch of new people.
I’m glad I do not have to end after 25 years of working with Domino / Notes.

Thanks for the invitation, thanks to the all members HCL team.
You do not stop!

I look forward to May – engage.ug and sutol.cz conference