SECURITY
Setting up ID recovery
Before users can recover their ID files, you must set up a centralized mail or mail-in database to store encrypted backups of ID files and specify information about which administrators -- known here as recovery authorities -- are allowed to recover IDs. You must perform these steps before anyone loses or corrupts an ID -- ideally before you begin registering users.

1. From the Domino Administrator, click Configuration, and then click Certification.

2. Click Edit Recovery Information.

3. In the "Choose a Certifier" dialog box, click Server and select the registration server name from the Domino Directory (only if the correct server name does not appear).

4. Choose the certifier for which you are creating recovery information.

5. Click OK. The "Edit Master Recovery Authority List" dialog box appears.

6. Enter the number of recovery authorities that are required to recover an ID file. It is recommended that you choose at least three.

7. Click Add and select the names of the administrators who are the designated recovery authorities.

8. Choose whether you want to use an existing mailbox for recovery information or create a new one.


9. Click OK.

10. If you are using a server-based certification authority, at the server console type:


11. In the mail-in database ACL, set the -Default- access to No access and give administrators Reader access.

Note If you have created additional O-level Notes certifiers, be sure to cross-certify them with the initial Notes certifier prior to setting up recovery information.

See also