3. About Me – my fave slide
• Been doing this far too long….1996, R3
• Very well traveled blog https://blog.darrenduke.net
• Longtime presenter, both at this and other events
• Every time I think this year will be less Domino work, I’m wrong
• Please, please, please attend the sponsor sessions. They have
exceedingly helpful stuff for you and helped pay for this.
• Speed Sponsoring is 2pm, please attend
Me!!!!
4. • NIFNSF (9.0.1 FP8 IF1)
– Move view indexes out of the NSF (much like DAOS does for
attachments)
– Can remove GB’s of data for applications with lots of
categorized views
• One STS customer removed 40GB of views and shrank the NSF to 8GB!
– Speeds up backups as your NSFs are smaller
– Per NSF, again much like DAOS
– See https://blog.darrenduke.net/darren/ddbz.nsf/dx/moving-
domino-nif-indexes-out-of-the-nsf.htm
9.0.1 FP8
5. • Mail forwarding restrictions (9.0.1 FP9)
– Prevent forwarding inside or outside of the domain
• These are different options, so you can allow forwarding internally, but
not externally. You can also allow forwards to custom domains.
– Disables the “Send copy to” rule
• Run rules on existing messages
– Does what it says
9.0.1 FP9
6. • 64 bit Domino only from this release forward
• ODS 53, 256GB behemoth NSFs!!! (BFD)
• Symmetrical clustering (BFD with caveats)
– Keep your clusters in sync and “repaired” automatically
– Can be targeted per folder
• But can’t do root folder (I think this is still correct)
• Document deletion logging
– Yeah really. Tell who deleted it, and yet still they will deny it!
10.0
7. • Automatic dead mail processing
– Yeah, only took 10 releases
– No need to do the “replica deletion hack” anymore
• DQL
10.0 Cont
8. • AUT – Automatic upgrade of clients
– Think Smart Upgrade but both smart and it upgrades
• Marvel Client Essentials added
• Onetime mail signatures
• SSL cipher changes
10.0.1
9. • Big changes under the cover to throw overboard many
IBM boat anchors and/or licensed features
– Move to OpenSSL
– InstallAnywhere
– AdoptOpenJDK
• DirectorySync
– New, better sync tool to keep Domino and AD users and
groups in sync
– Pre-req for Password Sync in 12.0
11.0
10. • Option to use ID Vault password as HTTP password
– So be gone, different and pesky to manage Internet Passwords
• DAOS 2-tier storage
– Move old DAOS attachments to cheap cloud storage
• so not AWS as it isn't cheap, look at Wasabi for cheap S3 storage
• Nomad for iPad official release
• God awful calendar UI changes
– Reverted in 12.0
– I’ve seen clients downgrade back to 10 to get rid of this
11.0 Cont
11. • Server Name Indicator (SNI) Domino support
– BFD
– No longer does each SSL Domino Internet Site need it’s own IP
address assigned
– See, BFD
• AES128 support for local replica encryption
• Save (technically “export”) to Notes Document to PDF in
client
11.0.1
12. • Nomad Web, another BFD
• MFA via TOTP
– Would be a BFD but I dislike the implementation
– And, yes, I’ve made “suggestions” as to how to “better” it
• Active Directory Password Sync
– Yes, you read the correctly. Another BFD.
• Integrated backup and restore, another BFD
– Better in 12.0.1 and even better in 12.0.2
12.0
13. • Password lockout via IP address
– Prevents a given attacker IP from credential spraying your server
– Yes, you want this on
• Let’s Encrypt native support
• 64-bit Windows clients, yeah BFD
– Test your stuff before you move from 32-bit
• Reverted the awful R11 calendar design
• Entitlement Tracking
– A truly awful implementation, awful. A.W.F.U.L.
– Ask me later how I really feel, as this is the PG version
12.0 cont
14. • DKIM on outbound email (12.0.2 adds inbound)
• Native 3rd party meeting integration
– Teams, GotoMeeting, Zoom, etc.
– Available as an add-on to prior versions.
• Adminp auto process of name requests
– Finally!
• R4 & R5 sections of the NAB design are removed
– If you have an R4 or R5 server, then don’t upgrade to 12.0.1
– The above line is sarcasm.
12.0.1
15. • VSS support for backups, vBFD
• Untrusted email flows (think DKIM inbound)
• Entitlement Tracking improvements
– Well, they can’t make it any worse, can they?
• ICAP antivirus settings
• DKIM Inbound
• View rebuild improvements, 15-35% less time required
• Domino Restyle
• Nomad without SafeLinx
12.0.2
16. • DLAU built in?
– Domino License Analysis Utility
– v3 of Entitlement Tracking, and it is better
• AdminCentral
• Installation
– One-touch
– Notifications!
– Notes.ini location
• External email warning via policy
• HTTP with FIDO2 auth
14 Beta – may not make it to Gold
18. Please only ask questions I know the answers too.
Raise you hand in Zoom to ask a Q.
See https://blog.darrenduke.net for more Domino and
Security related musings/rants/thingymajigs
Special thanks as always to Richard Moy and team. Without
them, none of this happens.
Question time!!!