Secure replication with Notes client?

On my first machine there is a Lotus Domino server (running under Windows Server 2003) and I wanted to create replicas of my importatnt databases on a second machine.On teh 2nd machine there is a Lotus Notes client, (also running under Windows Server 2003),

I created a replica of the important databases;

the Notes is set up to replicate the databases in each 15 minutes (with the Domino).

I ask your advice how to increase the security of the 2nd machine,

I do not want that anybody can access the content of the Lotus databases,

even they have Windows administrator access to the 2nd machine (Windows Server 2003).

Please help.

Thanks a lot,

Laszlo Nemes

Subject: secure replication with Notes client?

Hi

restrict your 2nd DB’s ACL to yourself (keep the server, but make sure that no one has the id file),

and uncheck the ‘enforce consistent ACL across all replicas’.

Only check your 2 dbs replication settings.

ian

Subject: secure replication with Notes client?

The only way to truly secure data is through encryption. Luckily, with Notes/Domino, encryption is just a checkbox away!

On your client computer, pick File → Database → Properties

Click on Encryption

If it’s not selected already, select Locally Encrypt this Database using:

and then pick your encryption level. Medium is sufficient for most needs. Since Notes 6, the default any time you create a new local replica copy is for this setting to be turned on to medium, so chances are your database is already encrypted. Make sure the Notes ID on the machine has a good, long password and you will be good to go.

ACL’s can be bypassed via numerous methods if someone has a replica copy on their computer - they should never be fully entrusted to secure sensitive data.

Subject: RE: secure replication with Notes client?

Hi

We already got these kind of issues,

and your answer has a great interest for me.

I have no time today to spend looking for related documentation,

could you please just put a few links about what you posted ?

thanks in advance.

ian