Blackberry PROFESSIONAL SOFTWARE FOR IBM LOTUS DOMINO - - RELEASE NOTES Guide de l'utilisateur télécharger pdf (Page 110)

IBM Lotus Notes, Domino, Domino Designer 8 Release Notes

Observations and known behaviors :

1. AIX: The new server will generate ipc keys with a new and unique ID, while the failed server instance's

ipc keys will also be around for NSD to use. Once NSD is finished using the failed server instance's ipc

keys, NSD will clean up the keys, as well as the processes.

2. Solaris: The new server will generate new and unique files in

/tmp

to support the new Domino

instance, specifically the files titled ".*please_do_not_remove". The failed server instance's files will

be left for NSD to use. Once NSD is finished using the failed server instance's files, NSD will clean up the

files, as well as the processes.

3. When using NSD with Server Fast Restart with Domino, it is necessary to use the

-key

option to

specify which instance to collect information about. Future releases will allow NSD to default to the

current running instance.

a. A quick way to determine the key for the current instance is to look for the last key generated in the

technical support directory. From the Domino data directory:

cd IBM_TECHNICAL_SUPPORT

ls -tla | head

b. To run NSD to collect data with an example key of FD9AA800, from the Domino data directory:

/opt/m4/lotus/bin/nsd -key FD9AA800

c. To run NSD to terminate Domino with an example key of FD9AA800, from the Domino data

directory

/opt/m4/lotus/bin/nsd -kill -key FD9AA800

4. In the current beta release, Server Fast Restart does not work with a server ID with a password.

5. To ensure satisfactory performance of the new Domino instance while NSD is collecting data, it is

recommended to have double the amount of physical memory available. Specifically, if the Domino

instance uses up to 4 GB of physical memory, it is recommended that the new instance of Domino has

access to an additional 4 GB of physical memory.

Domino Server

SSL Cryptographic Accelerators

Starting with Notes/Domino 7, the SECManipulateSC API function can be used to push the server's RSA

keypair from an SSL keyring file onto a cryptographic token that supports PKCS#11. This will cause all

private key operations involving the server key to be performed upon the token. This cryptographic token

can be a traditional smartcard (which will result in terrible performance issues) or an SSL cryptographic

accelerator that provides a PKCS#11 interface.

The only cryptographic accelerator that has been tested is the Rainbow CryptoSwift eCommerce Server

Accelerator PCI CS400 model 2.2.6a, using the PKCS#11 DLL installed to

c:\WINNT\system32\Cryptoki22.dll with the PKCS11

HWCHECK=1 NOTES.INI variable set.

In the current beta release, the server's ID file must be smartcard-enabled in order for the PushKyrKey

operation to succeed.

1 2 ... 105 106 107 108 109 110 111 112 113 114 115 ... 209 210

Commentaires sur ces manuels

Pas de commentaire

Blackberry PROFESSIONAL SOFTWARE FOR IBM LOTUS DOMINO - - RELEASE NOTES Guide de l'utilisateur Page 110

Commentaires sur ces manuels

Produits connexes et manuels pour Logiciel Blackberry PROFESSIONAL SOFTWARE FOR IBM LOTUS DOMINO - - RELEASE NOTES