Great new Domino features
since 9.0.1FP8
Yes, *new* features.
This is not IBM’s Domino anymore….
Darren Duke
Chief Answerer
STS
About Me – my fave slide
• Been doing this far too long….1996, R3
• Very well traveled blog https://blog.darrenduke.net
• Longtime presenter, both at this and other events
• Every time I think this year will be less Domino work, I’m wrong
• Please, please, please attend the sponsor sessions. They have
really helpful stuff for you and helped pay for this.
Me!!!!
The Sponsors
• NIFNSF (9.0.1 FP8 IF1)
– Move view indexes out of the NSF (much like DAOS does for
attachments)
– Can remove GB’s of data for applications with lots of
categorized views
• One STS customer removed 40GB of views and shrank the NSF to 8GB!
– Speeds up backups as your NSFs are smaller
– Per NSF, again much like DAOS
– See https://blog.darrenduke.net/darren/ddbz.nsf/dx/moving-
domino-nif-indexes-out-of-the-nsf.htm
9.0.1 FP8
• Mail forwarding restrictions (9.0.1 FP9)
– Prevent forwarding inside or outside of the domain
• These are different options, so you can allow forwarding internally, but
not externally. You can also allow forwards to custom domains.
– Disables the “Send copy to” rule
• Run rules on existing messages
– Does what it says
9.0.1 FP9
• 64 bit Domino only from this release forward
• ODS 53, 256GB behemoth NSFs!!!
• Symmetrical clustering
– Keep your clusters in sync and “repaired” automatically
– Can be targeted per folder
• But can’t do root folder (I think this is still correct)
• Document deletion logging
– Yeah really. Tell who deleted it, and yet still they will deny it!
10.0
• Automatic dead mail processing
– Yeah, only took 10 releases
– No need to do the “replica deletion hack” anymore
• DQL
10.0 Cont
• AUT – Automatic upgrade of clients
– Think Smart Upgrade but both smart and it upgrades
• Marvel Client Essentials added
• Onetime mail signatures
• SSL cipher changes
10.0.1
• Big changes under the cover to throw overboard many
IBM boat anchors and/or licensed features
– Move to OpenSSL
– InstallAnywhere
– AdoptOpenJDK
• DirectorySync
– New, better sync tool to keep Domino and AD users and
groups in sync
– Pre-req for Password Sync in 12.0
11.0
• Option to use ID Vault password as HTTP password
– So be gone, different and pesky to manage Internet Passwords
• DAOS 2-tier storage
– Move old DAOS attachments to cheap cloud storage
• so not AWS as it isn't cheap, look at Wasabi for cheap S3 storage
• Nomad for iPad official release
• God awful calendar UI changes
– Reverted in 12.0
– I’ve seen clients downgrade back to 10 to get rid of this
11.0 Cont
• Server Name Indicator (SNI) Domino support
– BFD
– No longer does each SSL Domino Internet Site need it’s own IP
address assigned
– See, BFD
• AES128 support for local replica encryption
• Save (technically “export”) to Notes Document to PDF in
client
11.0.1
• Nomad Web, another BFD
• MFA via TOTP
– Would be a BFD but I dislike the implementation
– And, yes, I’ve made “suggestions” as to how to “better” it
• Active Directory Password Sync
– Yes, you read the correctly. Another BFD.
• Integrated backup and restore, another BFD
– Better in 12.0.1 and even better in 12.0.2
12.0
• Password lockout via IP address
– Prevents a given attacker IP from credential spraying your
server
– Yes, you want this on
• Let’s Encrypt native support
• Reverted the awful R11 calendar design
• Entitlement Tracking
– A truly awful implementation, awful. A.W.F.U.L.
– Ask me later how I really feel, as this is the PG version
12.0 cont
• DKIM on outbound email (12.0.2 adds inbound)
• Native 3rd party meeting integration
– Teams, GotoMeeting, Zoom, etc.
– Available as an add-on to prior versions.
• Adminp auto process of name requests
– Finally!
• R4 & R5 sections of the NAB design are removed
– If you have an R4 or R5 server, then don’t upgrade to 12.0.1
– The above line is sarcasm.
12.0.1
• VSS support for backups, vBFD
• Untrusted email flows (think DKIM inbound)
• Entitlement Tracking improvements
– Well, they can’t make it any worse, can they?
• ICAP antivirus settings
• View rebuild improvements, 15-35% less time required
• Domino Restyle
• Nomad without SafeLinx
12.0.2 Beta – may not be in gold code
Please only ask questions I know the answers too.
Raise you hand in Zoom to ask a Q.
See https://blog.darrenduke.net for more Domino and
Security related musings/rants/thingymajigs
Special thanks as always to Richard Moy and team. Without
them, none of this happens.
Question time!!!
The Sponsors

Great new Domino features since 9.0.1FP8.pptx

  • 1.
    Great new Dominofeatures since 9.0.1FP8 Yes, *new* features. This is not IBM’s Domino anymore…. Darren Duke Chief Answerer STS
  • 2.
    About Me –my fave slide • Been doing this far too long….1996, R3 • Very well traveled blog https://blog.darrenduke.net • Longtime presenter, both at this and other events • Every time I think this year will be less Domino work, I’m wrong • Please, please, please attend the sponsor sessions. They have really helpful stuff for you and helped pay for this. Me!!!!
  • 3.
  • 4.
    • NIFNSF (9.0.1FP8 IF1) – Move view indexes out of the NSF (much like DAOS does for attachments) – Can remove GB’s of data for applications with lots of categorized views • One STS customer removed 40GB of views and shrank the NSF to 8GB! – Speeds up backups as your NSFs are smaller – Per NSF, again much like DAOS – See https://blog.darrenduke.net/darren/ddbz.nsf/dx/moving- domino-nif-indexes-out-of-the-nsf.htm 9.0.1 FP8
  • 5.
    • Mail forwardingrestrictions (9.0.1 FP9) – Prevent forwarding inside or outside of the domain • These are different options, so you can allow forwarding internally, but not externally. You can also allow forwards to custom domains. – Disables the “Send copy to” rule • Run rules on existing messages – Does what it says 9.0.1 FP9
  • 6.
    • 64 bitDomino only from this release forward • ODS 53, 256GB behemoth NSFs!!! • Symmetrical clustering – Keep your clusters in sync and “repaired” automatically – Can be targeted per folder • But can’t do root folder (I think this is still correct) • Document deletion logging – Yeah really. Tell who deleted it, and yet still they will deny it! 10.0
  • 7.
    • Automatic deadmail processing – Yeah, only took 10 releases – No need to do the “replica deletion hack” anymore • DQL 10.0 Cont
  • 8.
    • AUT –Automatic upgrade of clients – Think Smart Upgrade but both smart and it upgrades • Marvel Client Essentials added • Onetime mail signatures • SSL cipher changes 10.0.1
  • 9.
    • Big changesunder the cover to throw overboard many IBM boat anchors and/or licensed features – Move to OpenSSL – InstallAnywhere – AdoptOpenJDK • DirectorySync – New, better sync tool to keep Domino and AD users and groups in sync – Pre-req for Password Sync in 12.0 11.0
  • 10.
    • Option touse ID Vault password as HTTP password – So be gone, different and pesky to manage Internet Passwords • DAOS 2-tier storage – Move old DAOS attachments to cheap cloud storage • so not AWS as it isn't cheap, look at Wasabi for cheap S3 storage • Nomad for iPad official release • God awful calendar UI changes – Reverted in 12.0 – I’ve seen clients downgrade back to 10 to get rid of this 11.0 Cont
  • 11.
    • Server NameIndicator (SNI) Domino support – BFD – No longer does each SSL Domino Internet Site need it’s own IP address assigned – See, BFD • AES128 support for local replica encryption • Save (technically “export”) to Notes Document to PDF in client 11.0.1
  • 12.
    • Nomad Web,another BFD • MFA via TOTP – Would be a BFD but I dislike the implementation – And, yes, I’ve made “suggestions” as to how to “better” it • Active Directory Password Sync – Yes, you read the correctly. Another BFD. • Integrated backup and restore, another BFD – Better in 12.0.1 and even better in 12.0.2 12.0
  • 13.
    • Password lockoutvia IP address – Prevents a given attacker IP from credential spraying your server – Yes, you want this on • Let’s Encrypt native support • Reverted the awful R11 calendar design • Entitlement Tracking – A truly awful implementation, awful. A.W.F.U.L. – Ask me later how I really feel, as this is the PG version 12.0 cont
  • 14.
    • DKIM onoutbound email (12.0.2 adds inbound) • Native 3rd party meeting integration – Teams, GotoMeeting, Zoom, etc. – Available as an add-on to prior versions. • Adminp auto process of name requests – Finally! • R4 & R5 sections of the NAB design are removed – If you have an R4 or R5 server, then don’t upgrade to 12.0.1 – The above line is sarcasm. 12.0.1
  • 15.
    • VSS supportfor backups, vBFD • Untrusted email flows (think DKIM inbound) • Entitlement Tracking improvements – Well, they can’t make it any worse, can they? • ICAP antivirus settings • View rebuild improvements, 15-35% less time required • Domino Restyle • Nomad without SafeLinx 12.0.2 Beta – may not be in gold code
  • 16.
    Please only askquestions I know the answers too. Raise you hand in Zoom to ask a Q. See https://blog.darrenduke.net for more Domino and Security related musings/rants/thingymajigs Special thanks as always to Richard Moy and team. Without them, none of this happens. Question time!!!
  • 17.