Front cover - IBM Redbooks

530 Lotus Security Handbook
For information on securing the server console with a Smartcard reader, see the
Domino 6 Administration Guide.
Requirements for effective Smartcard use
► Before users can install Smartcard readers, it is critical that you disable
password checking, change/grace intervals, and password expiration in the
Person documents of Smartcard users. Otherwise, those users will eventually
be locked out and unable to log in to their home server.
► Ensure that user IDs are recoverable via ID File Recovery before enabling
them for SmartCard use.
11.14.2 Execution Control Lists
An Execution Control List (ECL) protects user workstations against active
content from unknown or suspect sources, and can be configured to limit the
action of any active content that is allowed to run on workstations. The ECL
determines whether the signer of the code is allowed to run the code on a given
workstation, and defines the access that the code has to various workstation
functions. For example, an ECL can prevent another person's code from running
on a computer and damaging or erasing data.
“Active content” includes anything that can be run on a user workstation,
including formulas; scripts; agents; design elements in databases and templates;
documents with stored forms, actions, buttons, and hot spots; as well as
malicious code (such as viruses and so-called “Trojan horses”).
There are two kinds of ECLs: the Administration ECL, which resides in the
Domino Directory (NAMES.NSF); and the workstation ECL, which is stored in the
user's Personal Address Book (NAMES.NSF). The Administration ECL is the
template for all workstation ECLs. The workstation ECL is created when the
Notes client is first installed. The Setup program copies the administration ECL
from the Domino Directory to the Notes client to create the workstation ECL.
A workstation ECL lists the signatures of trusted authors of active content. “Trust”
implies that the signature comes from a known and safe source. For example,
every system and application template shipped with Domino or Notes contains
the signature Lotus Notes Template Development. Likewise, every template and
database that your organization designs should contain the signature of either
the application developer or the administrator. For each signature, the ECL
contains settings that control the actions that active content signed with that
signature can perform and the workstation system resources it can access.
If active content attempts an action that is not enabled for the signer, or if the
signer is not listed in the ECL, Notes generates an Execution Security Alert