Application Security, Inc.
home client login partner login online store contact us
search:
Solutions Products Partners Support News & Events About Us
Download
Purchase License Now
Download Data Sheet
Watch Self Guided Demo

Lotus Domino Client Summary

AppDetectivePro for Lotus Domino works with your existing Lotus Notes client software installation to perform Audits with high performance, accuracy, and superior platform support. You must obtain a copy of Lotus Notes client software and have it installed on the machine running AppDetectivePro in order to perform an Audit. You must also configure AppDetectivePro to communicate correctly with your Lotus Domino servers.

Click here for a brief online description on how to obtain and install the Lotus Notes client software drivers.

Once the Lotus Notes client software is installed, configuring it to communicate with your target Lotus Domino server is relatively easy. You will need the following information:

  1. The IP address or hostname of the server

  2. A valid Notes ID file

  3. The password to unlock your Lotus Notes ID file

These three pieces of information will allow AppDetectivePro for Lotus Domino to "login" to the server and perform an audit.

Unlike most internet servers which perform authentication through a username/password pair, Lotus identifies users through an RSA private/public key pair. A username is attached to the RSA pair for human convenience. Since the RSA key pairs are too large for a human being to remember, they are stored in a special file called an "ID File." This ID File enables the Notes client to know what its RSA key pair is for authentication without requiring the user to memorize it. In order to protect the ID File from being stolen, it is encrypted using a regular password. This is the password that users enter into the Lotus Notes client when they log on to the server.

Lotus Notes client information is generally stored on the Lotus Domino server for every user created. The Lotus Domino server's administrator will know how to retrieve the ID File. Transmitting ID files over email is considered safe since they are encrypted. However, ASI recommends that ID files be re-encrypted using a separate encryption program whenever they are transmitted over the network.