Watch Heather Hottenstein's presentation from DNUG 47 Online. The presentation covers many of the best practices to consider with the newest release of HCL Verse on-Premises.
Questions reach out to hhottens@rprwyatt.com or info@rprwyatt.com
2. I Am...
15.07.2020 Präsentationstitel
2
• Houston, Texas
• A Domino girl in a Domino world!
• 1994 – present
• Domino Systems Administration
• HCL Ambassador Class 2020 Member
• RPR Wyatt
• HCL Partner
• Consulting Services
• VitalSigns
3. Best Practices Verse on Premises
15.07.2020 Präsentationstitel
3
• What is Verse on Premises (VoP)?
• Why should you care?
• Installing Verse on Premises
• Best Practices
• Server Configuration, Security, Mail Managment
• Additional Configuration Considerations
• Future Plans
• Upcoming HCL Webinars
4. Verse on Premises Defined
15.07.2020 Präsentationstitel
4
• Business email
• Manage work, not email
• Interact with Sametime and Connections within the same interface
• Technically…
• Domino mail.nsf
• Accessed via web browser
• Use in parallel with Notes client, iNotes, Traveler, and Nomad
5. Why care about VOP?
15.07.2020 Präsentationstitel
5
• Verse is the mail client of the future
• Domino 11 - no new iNotes features
• Domino 12 - iNotes deprecated, replaced by Verse
6. Installing VoP 1.0.9a
15.07.2020 Präsentationstitel
6
• https://help.hcltechsw.com/verse_onprem/1.0.9/admin/vop_configuring_server.html
• Additional download and install on the Domino server
• System Requirements
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0074467&sys_kb_id=
57baaee6dbf9949855f38d6d139619de
• Domino 9.0.1 with Feature Pack 10 or higher on Microsoft Windows (64-bit 2008, 2012) or
Red Hat Linux (64-bit 6).
• Domino 10.0 or higher on Microsoft Windows (64-bit 2012, 2016), Red Hat Linux (64-bit 7),
or AIX (64-bit 7.2, TL1 or higher)
• Domino 10.0.1 or higher on IBM i version V7R2 or V7R3.
• Domino 11.0 on Microsoft Windows (64-bit 2012, 2016, 2019), Red Hat Linux (64-bit 7), or
AIX (64-bit 7.2, TL1 or higher)
7. Installing VoP 1.0.9a (continued)
15.07.2020 Präsentationstitel
7
• Additional Domino Requirements
• Mail template - mail9FP9.ntf or higher
• HTTPS
• ID Vault
• Full text index
• HTTPJVMMaxHeapSize=2048M
HTTPJVMMaxHeapSizeSet=1
8. Installing VoP 1.0.9a (continued)
15.07.2020 Präsentationstitel
8
1. Tell HTTP Quit
2. Extract HCL_Verse_On_Premises.zip file to
datadominoworkspaceapplications
3. Copy iwaredir.ntf to the Domino data directory
4. Create or update iwaredir.nsf
1. On the UI Setup page enable Verse
5. Load HTTP
6. Configure Credential store (credstore.nsf), note cluster specifics
7. URL: https://domino_hostname.domain.com/verse
9. Server Configuration Best Practices
15.07.2020 Präsentationstitel
9
• Domino clusters with self healing (Domino 10+)
• Internet Clustering - DNS Round Robin/Load Balancer
• Transaction logging
• DAOS
• Web Site documents
10. Server Configuration Best Practices
15.07.2020 Präsentationstitel
10
• Internet Protocols - HTTP - Number active threads
• Show stat domino.threads.active.peak (NSF only)
• Show stat http.peakconnections (All requests)
• Tell traveler stat show -> Push.Devices.Total
• Devices X 1.2
• Internet Protocols - HTTP - Concurrent Connections
• Maximum number of concurrent network sessions
• Equal or greater than active threads
• Internet Protocols - HTTP - Persistent Connections - Disabled (note: default is enabled)
11. Security Best Practices
15.07.2020 Präsentationstitel
11
• Network placement, firewall rules
• Remote access - VPN, mobile phone hot spot
• Server document - Security tab
• Auto mail forwarding
• Zip and exe attachments
• SMTP - TLS configuration
• Admin access - ACL vs Full Access Admin
• Anti virus/Anti spam
12. Security Best Practices
15.07.2020 Präsentationstitel
12
• HTTPDisableMethods=TRACE
• Disables cross site scripting attack
• Web Admin
• DominoNoWebAdmin=1
13. Psst the password is…Login controls
15.07.2020 Präsentationstitel
13
• Domino Directory Profile (Actions - Edit Directory Profile)
• Use more secure Internet Passwords
• Server Configuration document
• Enforce Internet Password Lockout - Yes
• Server document
• Security - Internet Authentication - Fewer name variations with higher security
• Ports - Internet Ports - Enforce server access settings - Yes
• Internet Protocols - HTTP - Allow HTTP clients to browse database - No
• Internet Protocols - Domino Web Engine - Force login on SSL - Yes
14. More Password Best Practices
15.07.2020 Präsentationstitel
14
• Security Settings document
• Password requirements, expiration
• Internet password - Update Internet Password When Notes Client
Password Changes
• Force user to change Internet password on next login
• Select Person document/s Action - Set Password Fields
• End user training
• Phishing Vigilance
• Phrases vs words - iu2lhbihtwokh
15. Domino 11 Login Option
15.07.2020 Präsentationstitel
15
• Login via ID Vault
• Server Configuration document - Security - Internet Password
Verification