The ID vault is an optional, server-based database that holds protected copies of Notes® user IDs. An ID vault allows administrators and users to easily manage Notes user IDs. Users are assigned to a vault through policy configuration, and copies of user IDs are uploaded to a vault automatically once the policy has taken effect.

The benefits of using an ID vault include:

• The ability for authorized personnel to change (reset) passwords on IDs stored in a vault when users forget them, without access to the ID files or the vault
• Support for the use of a custom application to reset passwords
• Easy recovery of lost or damaged user IDs
• Automatic synchronization of multiple ID copies
• No user involvement during ID renames
• No user involvement during ID key rollover

How an ID vault works
This topic describes common vault operations.

ID vault security
An ID vault provides several layers of security.

Planning an ID vault deployment
The topics in this section provide information to help you plan an ID vault deployment.

ID vault FAQs
Here are answers to some frequently asked questions about the ID vault.

Creating and configuring an ID vault
To make an ID vault operational you must create the vault database on a server, create the vault ID file, specify at least one vault administrator, specify which user organizations trust the vault, assign password reset authority, and use policies to assign user IDs to the vault.

Deleting an ID vault
You can delete an ID vault. Before doing that you must delete all replicas except the one on the vault primary server.

Viewing user IDs in a vault
After users have been assigned to a vault through a policy, the next time they start Notes after the policy has taken effect, their IDs are uploaded to the vault. Note that there may be a delay before policy changes take effect.

Maintaining ID file synchronization
When passwords on Notes client IDs become different from the passwords on the IDs in the ID vault, synchronization of ID information between clients and the ID vault stops. You can enable automatic restarting of synchronization when the passwords get out of sync. You can use the Query Vault console command or the Domino Administrator to monitor and manage ID synchronization.

Managing the user IDs in an ID vault
You can reset the password of an ID stored in a vault, specify the number of ID downloads a user is allowed, extract an ID from a vault for auditing purposes, delete an ID from a vault, or mark an ID in a vault as inactive.

Troubleshooting an ID vault configuration
There are two ways to troubleshoot problems with an ID vault, do either or both of the following:

ID vault notes.ini settings
The following notes.ini settings pertain to the ID vault.

Related concepts
How an ID vault works
Planning an ID vault deployment
Managing the user IDs in an ID vault

Related tasks
Creating and configuring an ID vault

Related reference
ID vault security
ID vault FAQs