Front cover - IBM Redbooks

470 Lotus Security Handbook
For each person who will user Notes IDs with Smartcards, perform the following
steps:
1. If recovery can be set up for the user, the administrator should do this and
send the user an e-mail with recovery information attached.
2. The user opens the e-mail from the administrator that contains the recovery
information.
3. The user chooses Actions → Accept Recovery Information.
4. In the “Backup ID File” dialog box, the user clicks “Send” to send an initial
backup User ID to the recovery database.
Note: An encrypted backup copy of a Notes user ID cannot be used with
Notes unless it was recovered by the Recovery Authorities.
Performing Notes ID file and password recovery
Now that Notes ID file and password recovery has been set up and the Notes IDs
have the recovery information within them, it is now possible to handle situations
where a Notes ID file is lost or damaged. The Recovery Authorities can retrieve
the backup copy of the Notes ID from the backup Notes ID database. If the
backup copy does not exist, it is simply not possible to recover the Notes ID.
As well, Notes will help when the Notes ID file is modified in certain ways. For
instance, when the user acquires a new public key, accepts a name change,
accepts or creates a document encryption key, or performs other types of user ID
operations, Notes automatically sends updated encrypted backup User IDs to
the centralized database.
To recover a Notes user ID, the user should perform the following steps:
1. Contact the administrator (or more precisely, one of the Recovery Authorities)
to have them send back the passwords (there may be more than one,
depending on how Notes ID and Password Recovery was set up) needed to
recover the Notes User ID. The recovery password is randomly generated
and unique to each recoverable Notes user ID and administrator.
Note: If some users do not have access to their Notes user ID, these users
should contact their administrator, who can provide them with an encrypted
backup of their Notes user ID. Once they have the backup Notes user ID,
they can continue with the following steps.
2. Once the user has the recovery passwords, they restart Notes. In the
Password dialog box when the user first logs into Notes, they click OK without
entering their password.