How an ID vault works
This topic describes common vault operations.
ID vault security
An ID vault provides several layers of security.
Planning an ID vault deployment
The topics in this section provide information to help you plan an ID vault deployment.
ID vault FAQs
Here are answers to some frequently asked questions about the ID vault.
Creating and configuring an ID vault
To make an ID vault operational you must create the vault database on a server, create the vault ID file, specify at least one vault administrator, specify which user organizations trust the vault, assign password reset authority, and use policies to assign user IDs to the vault.
Deleting an ID vault
You can delete an ID vault. Before doing that you must delete all replicas except the one on the vault primary server.
Viewing user IDs in a vault
After users have been assigned to a vault through a policy, the next time they start Notes after the policy has taken effect, their IDs are uploaded to the vault. Note that there may be a delay before policy changes take effect.
Maintaining ID file synchronization
When passwords on Notes client IDs become different from the passwords on the IDs in the ID vault, synchronization of ID information between clients and the ID vault stops. You can enable automatic restarting of synchronization when the passwords get out of sync. You can use the Query Vault console command or the Domino Administrator to monitor and manage ID synchronization.
Managing the user IDs in an ID vault
You can reset the password of an ID stored in a vault, specify the number of ID downloads a user is allowed, extract an ID from a vault for auditing purposes, delete an ID from a vault, or mark an ID in a vault as inactive.
Troubleshooting an ID vault configuration
There are two ways to troubleshoot problems with an ID vault, do either or both of the following:
ID vault NOTES.INI settings
The following NOTES.INI settings pertain to the ID vault.