Great new Domino features have been added since version 9.0.1FP8. Key features introduced in subsequent versions include moving view indexes out of NSF files to reduce size, mail forwarding restrictions, 64-bit support, automatic dead mail processing, SSL cipher changes, DAOS 2-tier storage, server name indicator support, Active Directory password sync, password lockouts, Let's Encrypt support, entitlement tracking improvements, DKIM support, and potential features in the 14 beta version like DLAU and AdminCentral. The presenter encourages attending sponsor sessions to learn more helpful information and thanks Richard Moy and team for their work enabling these new features.

1. Great new Domino features
since 9.0.1FP8
Yes, *new* features.
This is not IBM’s Domino anymore….
Darren Duke
Chief Answerer
STS

2. Sponsors

3. About Me – my fave slide
• Been doing this far too long….1996, R3
• Very well traveled blog https://blog.darrenduke.net
• Longtime presenter, both at this and other events
• Every time I think this year will be less Domino work, I’m wrong
• Please, please, please attend the sponsor sessions. They have
exceedingly helpful stuff for you and helped pay for this.
• Speed Sponsoring is 2pm, please attend
Me!!!!

4. • NIFNSF (9.0.1 FP8 IF1)
– Move view indexes out of the NSF (much like DAOS does for
attachments)
– Can remove GB’s of data for applications with lots of
categorized views
• One STS customer removed 40GB of views and shrank the NSF to 8GB!
– Speeds up backups as your NSFs are smaller
– Per NSF, again much like DAOS
– See https://blog.darrenduke.net/darren/ddbz.nsf/dx/moving-
domino-nif-indexes-out-of-the-nsf.htm
9.0.1 FP8

5. • Mail forwarding restrictions (9.0.1 FP9)
– Prevent forwarding inside or outside of the domain
• These are different options, so you can allow forwarding internally, but
not externally. You can also allow forwards to custom domains.
– Disables the “Send copy to” rule
• Run rules on existing messages
– Does what it says
9.0.1 FP9

6. • 64 bit Domino only from this release forward
• ODS 53, 256GB behemoth NSFs!!! (BFD)
• Symmetrical clustering (BFD with caveats)
– Keep your clusters in sync and “repaired” automatically
– Can be targeted per folder
• But can’t do root folder (I think this is still correct)
• Document deletion logging
– Yeah really. Tell who deleted it, and yet still they will deny it!
10.0

7. • Automatic dead mail processing
– Yeah, only took 10 releases
– No need to do the “replica deletion hack” anymore
• DQL
10.0 Cont

8. • AUT – Automatic upgrade of clients
– Think Smart Upgrade but both smart and it upgrades
• Marvel Client Essentials added
• Onetime mail signatures
• SSL cipher changes
10.0.1

9. • Big changes under the cover to throw overboard many
IBM boat anchors and/or licensed features
– Move to OpenSSL
– InstallAnywhere
– AdoptOpenJDK
• DirectorySync
– New, better sync tool to keep Domino and AD users and
groups in sync
– Pre-req for Password Sync in 12.0
11.0

10. • Option to use ID Vault password as HTTP password
– So be gone, different and pesky to manage Internet Passwords
• DAOS 2-tier storage
– Move old DAOS attachments to cheap cloud storage
• so not AWS as it isn't cheap, look at Wasabi for cheap S3 storage
• Nomad for iPad official release
• God awful calendar UI changes
– Reverted in 12.0
– I’ve seen clients downgrade back to 10 to get rid of this
11.0 Cont

11. • Server Name Indicator (SNI) Domino support
– BFD
– No longer does each SSL Domino Internet Site need it’s own IP
address assigned
– See, BFD
• AES128 support for local replica encryption
• Save (technically “export”) to Notes Document to PDF in
client
11.0.1

12. • Nomad Web, another BFD
• MFA via TOTP
– Would be a BFD but I dislike the implementation
– And, yes, I’ve made “suggestions” as to how to “better” it
• Active Directory Password Sync
– Yes, you read the correctly. Another BFD.
• Integrated backup and restore, another BFD
– Better in 12.0.1 and even better in 12.0.2
12.0

13. • Password lockout via IP address
– Prevents a given attacker IP from credential spraying your server
– Yes, you want this on
• Let’s Encrypt native support
• 64-bit Windows clients, yeah BFD
– Test your stuff before you move from 32-bit
• Reverted the awful R11 calendar design
• Entitlement Tracking
– A truly awful implementation, awful. A.W.F.U.L.
– Ask me later how I really feel, as this is the PG version
12.0 cont

14. • DKIM on outbound email (12.0.2 adds inbound)
• Native 3rd party meeting integration
– Teams, GotoMeeting, Zoom, etc.
– Available as an add-on to prior versions.
• Adminp auto process of name requests
– Finally!
• R4 & R5 sections of the NAB design are removed
– If you have an R4 or R5 server, then don’t upgrade to 12.0.1
– The above line is sarcasm.
12.0.1

15. • VSS support for backups, vBFD
• Untrusted email flows (think DKIM inbound)
• Entitlement Tracking improvements
– Well, they can’t make it any worse, can they?
• ICAP antivirus settings
• DKIM Inbound
• View rebuild improvements, 15-35% less time required
• Domino Restyle
• Nomad without SafeLinx
12.0.2

16. • DLAU built in?
– Domino License Analysis Utility
– v3 of Entitlement Tracking, and it is better
• AdminCentral
• Installation
– One-touch
– Notifications!
– Notes.ini location
• External email warning via policy
• HTTP with FIDO2 auth
14 Beta – may not make it to Gold

17. • If you Google DLAU, you get this….

18. Please only ask questions I know the answers too.
Raise you hand in Zoom to ask a Q.
See https://blog.darrenduke.net for more Domino and
Security related musings/rants/thingymajigs
Special thanks as always to Richard Moy and team. Without
them, none of this happens.
Question time!!!

19. Sponsors