Front cover - IBM Redbooks

206 Lotus Security Handbook
Setting up Notes ID recovery
Setting up Notes ID file and password recovery is fairly straightforward. The
process should be completed before any administrator begins registering users
because it is not possible to recover Notes IDs which are certified by a Certifier
ID that does not contain recovery information.
This is detailed clearly and concisely in the “ID Recovery” section of the Lotus
Domino 6 Administration documentation and in the Lotus Domino 6 Administrator
Help file.
Performing Notes ID recovery
Once Notes ID recovery has been set up and the Notes IDs have the recovery
information within them, it is possible to handle situations where a Notes ID file is
lost or damaged. The Recovery Authorities can retrieve the backup copy of the
Notes ID from the backup Notes ID database. If the backup copy does not exist,
it is simply not possible to recover the Notes ID.
As well, Notes will help when the Notes ID file is modified in certain ways, for
instance, when the user acquires a new public key, accepts a name change,
accepts or creates a document encryption key, or performs other types of User
ID operations. In these cases, Notes automatically sends updated encrypted
backup user IDs to the centralized database.
The detailed procedure for performing Notes ID recovery is in the product
documentation and in the Lotus Domino 6 Administrator Help file.
6.1.5 The Domino Directory
Information about all Notes IDs (including every user, server, and certifier ID) is
maintained on the Domino server, specifically in a Notes database called the
Domino Directory.
The Directory contains a Person document for each user, which in turn contains
a great deal of information about each Notes user. Table 6-1 shows how the
Person document is structured.