%YXSV.ÚVKIR)RKIQERR -RLEPXPMGLIW0IOXSVEX)PQEV*YGLW F],)6(8:IVPEKJÚV&MPHYRKWQIHMIR+QF, 7]WXIQEHQMRMWXVEXMSR

Transkript

1 27% %YXSV.ÚVKIR)RKIQERR -RLEPXPMGLIW0IOXSVEX)PQEV*YGLW %YJPEKIZSQ2SZIQFIV F],)6(8:IVPEKJÚV&MPHYRKWQIHMIR+QF, &SHIRLIMQ -RXIVRIX[[[LIVHX]SYHIEXGL [[[LIVHXFYWMRIWWHIEXGL [[[LIVHXZLWHIEX %PPI 6IGLXI ZSVFILEPXIR /IMR 8IMP HIW ;IVOIW HEVJ MR MVKIRHIMRIV*SVQ(VYGO*SXSOSTMI1MGVSJMPQSHIVIMRIQ ERHIVIR :IVJELVIR SLRI WGLVMJXPMGLI +IRILQMKYRK HIW,IVEYWKIFIVW VITVSHY^MIVX SHIV YRXIV :IV[IRHYRK IPIOXVSRMWGLIV 7]WXIQI ZIVEVFIMXIX ZIVZMIPJÂPXMKX SHIV ZIVFVIMXIX[IVHIR (MIWI 9RXIVPEKI [YVHI QMX KVS½IV 7SVKJEPX IVWXIPPX YRH KITVÚJX8VSX^HIQ OÔRRIR *ILPIV RMGLX ZSPPOSQQIR EYW KIWGLPSWWIR [IVHIR :IVPEK,IVEYWKIFIV YRH %YXSVIR OÔRRIRJÚVJILPIVLEJXI%RKEFIRYRHHIVIR*SPKIR[IHIV IMRI NYVMWXMWGLI :IVERX[SVXYRK RSGL MVKIRHIMRI,EJXYRK ÚFIVRILQIR (MI &MPHYRKWQIHMIR HIW,)6(8:IVPEKW IRXLEPXIR 0MROW F^[ :IV[IMWI EYJ-RXIVRIXWIMXIR ERHIVIV%RFMIXIV %YJ -RLEPX YRH +IWXEPXYRK HMIWIV %RKIFSXI LEX HIV,)6(8 :IVPEK OIMRIVPIM )MRJPYWW,MIVJÚV WMRH EPPIMRI HMI NI[IM PMKIR%RFMIXIVZIVERX[SVXPMGL 0SXYW.OTES $OMINO 2 JÚV ;MRHS[W 7]WXIQEHQMRMWXVEXMSR Ã Ã Ã 27%

2 I NHALTSVERZEICHNIS Notes Domino R5 - Systemadministration 2 1 Zertifizierungsstruktur II Server und Benutzer gruppieren Eindeutige Namen Querzulassungen Querzulassungen von IDs Schnellübersicht Übung Domänenstruktur II Mehrere Domänen Benachbarte Domänen Nicht benachbarte Domänen Mail-Weiterleitung an andere Domänen Adressbücher für mehrere Domänen pflegen Domänen zusammenführen Schnellübersicht Übung Notes/Domino Sicherheitsmodell II Zugriffsarten Steuerung des Zugriffs SSL auf einem Domino Server Einschränkung der Benutzerzugriffe Schnellübersicht Übung Mail Routing II Erweiterte Mail-Funktionen Gemeinsame Mail-Datenbanken Verwalten von gemeinsamen Mail- Datenbanken DNS (Domain Name Service) DNS konfigurieren Smart-Host Mail-Überwachung Mail-Verfolgung Durchführung der Mail-Verfolgung Schnellübersicht Übung Systemverwaltung II Datensicherung Server-Backup Transaktionsprotokollierung Arbeiten mit der Transaktionsprotokollierung Datenbanken komprimieren Komprimierungsart auswählen Komprimierungszeitpunkt für Datenbanken festlegen Durchführung der Datenbankkomprimierung Server-Stilllegungsanalyse Schnellübersicht Übung Administrative Aufgaben Überwachungstools Protokolldatei Protokollanalyse Datenbanküberwachung Automatische Server-Überwachung Tasks zur Server-Überwachung Konfiguration des Tasks COLLECTOR Konfiguration des Tasks EVENT Monitordokumente erstellen Mit Alarmdokumenten arbeiten Schnellübersicht Übung Datenbankverwaltung und Pflege Datenbanken verteilen Datenbanken verwalten Implementieren einer Datenbank Verteilen von Datenbanken Datenbankkatalog Erstellen eines Datenbankkatalogs Konfigurieren und Verwalten eines Datenbankkatalogs Datenbanksuche Datenbanken für die Datenbanksuche einrichten Domänenkatalog-Server Die Suchmaschine Domänensuche aktivieren Domänensuche und Benutzer Schnellübersicht Übung Kostenerfassung Einrichten der Kostenerfassung Optimieren der Kostenerfassung Schnellübersicht Übung

3 Inhaltsverzeichnis I 9 Server-Verfügbarkeit -Cluster Vorüberlegung Server clustern Überwachen und Verwalten eines Clusters Failover in einem Cluster Die Verteilung von Datenbanken in einem Cluster Schnellübersicht Übung Kalender und Zeitplanung Kalender und Zeitplanung Feiertagsdokumente importieren Die Datenbank FREIE ZEIT Die Cluster-Datenbank FREIE ZEIT Zeitplanung und Konfiguration Ressourcenreservierungsdatenbank Die Ressourcenreservierungsdatenbank einrichten Standortprofildokumente Ressourcendokumente Ressourcendokumente bearbeiten und löschen Kalender- und Zeitplanungsfunktionen mit Internet-Mail verwenden Schnellübersicht Übung Troubleshooting Mail-Routing-Probleme Mail-Routing prüfen Domino Verzeichnis prüfen Agentenprobleme Ausführungszeitpunkt eines Agenten überprüfen Ausführung des Agenten überprüfen Ausführung eines Agenten funktioniert nicht erwartungsgemäß Datenbankprobleme Verbindungsprobleme Schnellübersicht Stichwortverzeichnis...172

4 3 Notes Domino R5 - Systemadministration 2 3 Notes/Domino Sicherheitsmodell II,Q GLHVHP.DSLWHO HUIDKUHQ 6LH Æ ZLH 6LH :HE&OLHQWV DXWKHQWLIL]LHUHQ N QQHQ Æ ZLH 6LH GLH 1DPHQV XQG.HQQZRUWDXWKHQWLIL]LHUXQJ HLQULFKWHQ N QQHQ Æ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ugriffsarten 'HQ =XJULII EHU GHQ 1RWHV &OLHQW KDEHQ 6LH LQ GHU 9HUJDQJHQKHLW VFKRQ NHQQHQ JHOHUQW 9LHOH )LUPHQ HQW VFKHLGHQ VLFK LQ HLQHP QlFKVWHQ 6FKULWW ]XVlW]OLFK ]X GHU HLJHQWOLFKHQ &OLHQW$QPHOGXQJ DXFK GHQ =XJULII EHU LKU 1HW]ZHUN,QWHUQHW,QWUDQHW PLW HLQHP :HE&OLHQW ]X JHZlKUOHLVWHQ 6LH P VVHQ GDPLW XQWHU 1RWHV'RPLQR ]ZHL $UWHQ GHV =XJULIIV XQWHUVFKHLGHQ : 1RWHV &OLHQWV : :HE&OLHQWV Notes Clients 8P GHQ =XJULII DXI GHQ 'RPLQR 6HUYHU EHU HLQHQ 1RWHV &OLHQW ]X VWHXHUQ KDEHQ 6LH ELVKHU,''DWHLHQ I U GLH HLQ]HOQHQ %HQXW]HU HUVWHOOW %HL GHU (UVWHOOXQJ GLHVHU,''DWHL ZLUG GLHVH PLW HLQHP =HUWLILNDW I U GLH JHVDPWH 'RPlQH RGHU I U GLH MHZHLOLJH 2UJDQLVDWLRQVHLQKHLW DXVJHVWDWWHW %HL HLQHP =HUWLILNDW KDQGHOW HV VLFK XP HLQHQ HOHNWURQLVFKHQ 6WHPSHO GHU GLH $QZHQGHU HLQGHXWLJ LGHQWLIL]LHUW (U EHLQKDOWHW GHQ 1DPHQ GHV =HUWLIL]LHUHUV 'RPlQH RGHU 2UJDQLVDWLRQVHLQKHLW GHQ 1DPHQ GHV $QZHQGHUV RGHU 6HUYHUV DQ GHQ GDV =HUWLILNDW DXVJHJH EHQ ZXUGH HLQHQ IIHQWOLFKHQ 6FKO VVHO GHU VRZRKO LP 'RPLQR 9HU]HLFKQLV DOV DXFK LQ GHU,''DWHL VHOEVW DEJHOHJW ZLUG HLQH HOHNWURQLVFKH 6LJQDWXU VRZLH HLQ 9HUIDOOVGDWXP GHV =HUWLILNDWV XQG GDPLW DXFK GHU JHVDP WHQ,''DWHL

5 Notes/Domino Sicherheitsmodell II 3 Privater und öffentlicher Schlüssel =XU 9HU XQG (QWVFKO VVHOXQJ YRQ HOHNWURQLVFKHQ 1DFKULFKWHQ XQG 'DWHQEDQNHQ VRZLH ]XU $XWKHQWLIL]LHUXQJ DQ 6HUYHUQ XQG ]ZLVFKHQ $QZHQGHUQ YHUZHQGHW 'RPLQR IIHQWOLFKH XQG SULYDWH 6FKO VVHO GLH EHLP $QOHJHQ HLQHU QHXHQ,''DWHL EHUHFKQHW ZHUGHQ 'HU IIHQWOLFKH 6FKO VVHO HLQHV $QZHQGHUV LVW LP 'RPLQR 9HU]HLFKQLV MHGHUPDQQ ]XJlQJOLFK XQG ZLUG EHLVSLHOVZHLVH EHLP 0DLO9HUVDQG YHUZHQGHW XP GLH 1DFKULFKW I U GLHVHQ $Q ZHQGHU ]X YHUVFKO VVHOQ 1XU GHU (PSIlQJHU NDQQ GDQQ PLW VHLQHP SULYDWHQ 6FKO VVHO GHU DXVVFKOLH OLFK LQ GHU,''DWHL JHVSHLFKHUW LVW GLH ]XJHVDQGWH YHUVFKO VVHOWH 1DFKULFKW HQWVFKO VVHOQ :LUG HLQ IIHQWOLFKHU 6FKO VVHO YHUVHKHQWOLFK JHO VFKW RGHU EHVFKlGLJW NDQQ YRP %HQXW]HU HLQ QHXHU IIHQWOLFKHU 6FKO VVHO HUVWHOOW ZHUGHQ GHU GDQQ YRP $GPLQLVWUDWRU ZLHGHU ]HUWLIL]LHUW ZLUG Authentifizierung am Server *UHLIW HLQ $QZHQGHU DXI HLQH 'DWHQEDQN ]X GLH DXI HLQHP 6HUYHU OLHJW VR ILQGHW GHU 9RUJDQJ GHU $XWKHQWLIL ]LHUXQJ VWDWW 'DEHL JHQHULHUW GHU 1RWHV &OLHQW HLQH ]XIlOOLJH =DKO 'LHVH =DKO YHUVFKO VVHOW HU PLW HLQHP 7HLO DXV GHU %HQXW]HU,' GLH 6HUYHU XQG &OLHQW JHPHLQVDP EHVLW]HQ 'LHVH =DKO ZLUG MHW]W YHUVFKO VVHOW DQ GHQ 6HUYHU JHVHQGHW 'HU 6HUYHU HPSIlQJW GHQ 6FKO VVHO XQG GHFRGLHUW LKQ HU JUHLIW VLFK GDEHL GHQ 7HLO KHUDXV GHU 6HUYHU XQG &OLHQW JHPHLQVDP JHK UW )LQGHW HU GLH *HPHLQVDPNHLW GHV 6FKO VVHOV VFKLFNW HU LKQ DQ GHQ &OLHQW ZLHGHU ]XU FN 'HU &OLHQW YHUJOHLFKW MHW]W ZLHGHUXP GHQ ]XU FNJHVFKLFNWHQ 6FKO VVHO PLW GHP 6FKO V VHO GHQ HU DQ GHQ 6HUYHU ZHJJHVFKLFNW KDW 1XQ IlQJW GHU 6HUYHU YRQ VHLQHU 6HLWH DXV DQ HLQHQ VROFKHQ 6FKO VVHO DQ GHQ &OLHQW ]X VFKLFNHQ XP GLH hehusu IXQJ GHU $XWKHQWLIL]LHUXQJ GXUFK]XI KUHQ Verschlüsselung/Entschlüsselung bei der Anmeldung Web-Clients 8P GHQ =XJULII DXI GHQ 'RPLQR 6HUYHU EHU HLQHQ :HE&OLHQW ]X VWHXHUQ YHUI JHQ 6LH MHW]W QLFKW PHKU EHU GLH (LQVDW]P JOLFKNHLW YRQ,''DWHLHQ +LHU PXVV DXI GHU 6LFKHUKHLWVHEHQH YRQ 'RPLQR HLQ DQGHUHV 9HUIDKUHQ HLQJHVHW]W ZHUGHQ HLQH VR JHQDQQWH DOOJHPHLQH 1DPHQV XQG.HQQZRUWDXWKHQWLIL]LHUXQJ,QQHUKDOE GHU 1DPHQV XQG.HQQZRUWDXWKHQWLIL]LHUXQJ ODVVHQ VLFK XQWHU 'RPLQR GUHL =XJULIIVHEHQHQ IHVWOHJHQ : $QRQ\PHU =XJULII : 3HUVRQHQJHVWHXHUWHU =XJULII : 3HUVRQHQJHVWHXHUWHU XQG YHUVFKO VVHOWHU =XJULII Notizen

6 3 Notes Domino R5 - Systemadministration 2 ( 1) Anonymer Zugriff 'LH HUVWH (EHQH GHV =XJULIIV VWHOOW GHU DQRQ\PH =XJULII GDU %HLP =XJULII EHU HLQHQ :HE&OLHQW DXI HLQH 'DWHQEDQN GLH VLFK DXI GHP 'RPLQR 6HUYHU EHILQGHW KDEHQ 6LH ]XQlFKVW GLH 0 JOLFKNHLW DOOH %HQXW]HU RKQH (LQVFKUlQNXQJHQ ]XJUHLIHQ ]X ODVVHQ 6LH OHJHQ I U GLHVH $UW GHV =XJULIIV LQ GHU 'DWHQEDQN$&/ IHVW GDVV HV VLFK EHL GHQ :HE&OLHQWV XP VR JHQDQQWH DQRQ\PH %HQXW]HU $121<0286 KDQGHOW Einrichten eines anonymen Zugriffs 8P HLQHQ DQRQ\PHQ =XJULII I U :HE&OLHQWV HLQ]XULFKWHQ P VVHQ 6LH I U GLH MHZHLOLJH 'DWHQEDQN GLH =XJULIIV NRQWUROOOLVWH $&/ EHDUEHLWHQ =X GLHVHP =ZHFN N QQHQ 6LH HLQHQ 1RWHV &OLHQW RGHU GHQ 'RPLQR $GPLQLVWUD WRU EHQXW]HQ ) U GLH bqghuxqj GHU $&/(LQVWHOOXQJHQ GHU 'DWHQEDQN EHQ WLJHQ 6LH 0DQDJHU]XJULII RGHU 5XIHQ 6LH GHQ 0HQ SXQNW '$7(, '$7(1%$1. =8*5,)) DXI.OLFNHQ 6LH PLW GHU UHFKWHQ 0DXVWDVWH DXI GLH 'DWHQEDQN XQG ZlKOHQ 6LH '$7(1%$1. =8*5,)),P JH IIQHWHQ )HQVWHU GHU =XJULIIVNRQWUROOOLVWH KDEHQ 6LH GDQQ GLH 0 JOLFKNHLW,KUH bqghuxqjhq GXUFK]XI K UHQ /HJHQ 6LH I U GHQ %HQXW]HU GHQ (LQWUDJ $ 121<0286 LP =XJULIIVIHQVWHU EHU GLH 6FKDOWIOlFKH +,1=8)h*(1 DQ :lkohq 6LH GHQ HQWVSUHFKHQGHQ =XJULIIVW\S I U GLHVHQ %HQXW]HU DXV ACL einer Datenbank (2) Personengesteuerter Zugriff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lW GHU.HQQZ UWHU GLH HU LQ GHQ 3HU VRQHQGRNXPHQWHQ LP 'RPLQR 9HU]HLFKQLV ILQGHW

7 Notes/Domino Sicherheitsmodell II 3 Einrichten eines personengesteuerten Zugriffs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lkohq 6LH LP 5HJLVWHU 3 (5621(1 81' * 5833(1 HLQHQ EHUHLWV YRUKDQGHQHQ %H QXW]HU DXV XQG EHWlWLJHQ 6LH GLH 6FKDOW IOlFKH 3 (5621%($5%(,7(1 :lkohq 6LH LP 5HJLVWHU 3 (5621(1 81' * 5833(1 GLH 6FKDOWIOlFKH 3(5621 +,1=8 )h*(1 XP HLQHQ QHXHQ %HQXW]HU DQ]XOH JHQ 1HKPHQ 6LH I U GLH )HOGHU 9 251$0( 1 $&+1$0( % (187=(51$0( XQG, 17(51(7. (11:257 GLH HQWVSUHFKHQGHQ (LQWUlJH YRU 6SHLFKHUQ 6LH GDV 'RNXPHQW GXUFK %HWl WLJXQJ GHU 6FKDOWIOlFKH 6 3(,&+(51 81' 6&+/,(66(1 )ROJHQGH,QKDOWH N QQHQ 6LH LQ GLH )HOGHU HLQI JHQ Personendokument )HOG (LQJDEH 9 251$0(, 1,7,$/ 1 $&+1$0( *HEHQ 6LH GHQ 9RU XQG GHQ 1DFKQDPHQ GHV %HQXW]HUV HLQ :HQQ HV JH Z QVFKW ZLUG N QQHQ 6LH DXFK HLQ,QLWLDO GHV ]ZHLWHQ 9RUQDPHQV KLHU HLQWUD JHQ % (187=(51$0( *HEHQ 6LH GHQ 1DPHQ PLW GHP VLFK GHU %HQXW]HU DP 6HUYHU DQPHOGHW HLQ 'LHVHV )HOG NDQQ DXFK ]XVlW]OLFK GHQ TXDOLIL]LHUWHQ 1RWHV1DPHQ HQWKDOWHQ 'RPLQR OLHVW EHL GHU hehusu IXQJ GHV 3HUVRQHQGRNXPHQWV GHQ HUVWHQ 1DPHQ LQ GLHVHP )HOG DXV XP GHQ %HQXW]HU LQ 'DWHQEDQN$&/V XQG *HVWDOWXQJV OLVWHQ ]X LGHQWLIL]LHUHQ, 17(51(7.(11:257 *HEHQ 6LH KLHU GDV.HQQZRUW HLQ PLW GHP VLFK GHU %HQXW]HU EHU GHQ :HE &OLHQW DQPHOGHQ ZLUG Notizen

8 3 Notes Domino R5 - Systemadministration 2 (3) Personengesteuerter und ve rschlüsselter Zugrif f 'LH VLFKHUVWH (EHQH I U HLQHQ =XJULII EHU HLQHQ :HE&OLHQW VWHOOW HLQ YHUVFKO VVHOWHU =XJULII PLW 66/ 6HFXULW\ 6RFNHW /D\HU GDU %HL GLHVHU 0HWKRGH ZHUGHQ DOOH,QIRUPDWLRQHQ HLQVFKOLH OLFK GHU 1DPHQ XQG.HQQZ UWHU YHUVFKO VVHOW *HUDGH LQ GHU KHXWLJHQ =HLW LVW GLHVH 0HWKRGH HLQ VLFKHUHU 6FKXW] VLFK JHJHQ 0HWKRGHQ DE]XVL FKHUQ GLH YHUVXFKHQ SHUV QOLFKH,QIRUPDWLRQHQ DXV]XVSLRQLHUHQ 9HUZHQGHQ 6LH DXI MHGHQ )DOO GLHVH 0HWKRGH GHU $XWKHQWLIL]LHUXQJ ZHQQ 6LH 3HUVRQHQ =XJULII DXI 'DWHQEDQ NHQ PLW XQWHUQHKPHQVNULWLVFKHQ,QIRUPDWLRQHQ JHZlKUHQ Einrichten eines personengesteuerten und verschlüsselten Zugriffs 8P GLHVHQ =XJULII I U,KUH %HQXW]HU HLQ]XULFKWHQ EHQ WLJHQ 6LH HLQ,QWHUQHW]HUWLILNDW 'LHVHV,QWHUQHW]HUWLILNDW N QQHQ 6LH VLFK YRQ,KUHU 'RPLQR =HUWLIL]LHUXQJVVWHOOH RGHU HLQHP )UHPGDQELHWHU KROHQ (LQ,QWHUQHW]HUWLILNDW HQWKlOW HLQHQ IIHQWOLFKHQ XQG SULYDWHQ 6FKO VVHO HLQHQ 1DPHQ HLQ $EODXIGDWXP XQG HLQH GLJLWDOH 6LJQDWXU 1DFK $QIRUGHUXQJ HLQHV VROFKHQ =HUWLILNDWV ZLUG HV LP 3HUVRQHQGRNXPHQW DEJHOHJW XQG GDQDFK I U 1RWHV %HQXW]HU LQGHU 1RWHV,' JHVSHLFKHUW 'DV =HUWLILNDW I U,QWHUQHWEHQXW]HU ZLUG LQ HLQHU ORNDOHQ 'DWHL JHVSHL FKHUW 'HQ (LQULFKWXQJVYRUJDQJ I KUHQ 6LH EHU GHQ 'RPLQR $GPLQLVWUDWRU GXUFK 6LH VROOWHQ YRUKHU SU IHQ RE GHU $GPLQLVWUDWLRQVSUR]HVV RUGQXQJVJHPl HLQJHULFKWHW ZXUGH XQG RE EHUHLWV HLQH =HUWLIL]LHUXQJVSURWRNROOGDWHL DQJHOHJW ZXUGH 5XIHQ 6LH GHQ 0HQ SXQNW $'0,1,675$7,21 3(5621(1 81' *5833(1 DXI RGHU.OLFNHQ 6LH LP 'RPLQR $GPLQLVWUDWRU DXI GDV 5HJLVWHU 3 (5621(181'* 5833(1,P JH IIQHWHQ )HQVWHU ZLUG,KQHQ HLQH /LVWH PLW *UXSSHQ XQG 3HUVRQHQ GLH VLFK LP 'RPLQR 9HU]HLFKQLV EHILQ GHQ DQJHERWHQ :lkohq 6LH GLH 3HUVRQHQ LQ GHU /LVWH DXV GHQHQ 6LH HLQ,QWHUQHW]HUWLILNDW ]XZHLVHQ P FKWHQ :lkohq 6LH GHQ 0HQ SXQNW $.7,21(1,17(51(7=(57,),.$7 =8 $86*(:b+/ 7(1 3(5621(1 +,1=8)h*(1 DXV :lkohq 6LH GLH 6FKO VVHOULQJGDWHL DXV XQG JHEHQ 6LH GDV GD]XJHK ULJH.HQQ ZRUW HLQ *HEHQ 6LH HLQ $EODXIGDWXP HLQ XQG EHWl WLJHQ 6LH GLH 6FKDOWIOlFKH 5(*,675,(5(1 Personendokument 1DFK 'XUFKI KUXQJ GLHVHU $NWLRQHQ N QQHQ 6LH GHQ (LQWUDJ GHV,QWHUQHW]HUWLILNDWV LQ GHQ HLQ]HOQHQ 3HUVRQHQ GRNXPHQWHQ EHUSU IHQ 3.2 Steuerung des Zugriffs ) U MHGHQ %HQXW]HU GHU PLW HLQHP :HE&OLHQW DXI GHQ 'RPLQR 6HUYHU ]XJUHLIHQ P FKWH UHJHOQ 6LH ]XQlFKVW GHQ =XJULII EHU GLH 'DWHQEDQN$&/ XQG GLH 3HUVRQHQGRNXPHQWH =XVlW]OLFK ]XU (UVWHOOXQJ YRQ 3HUVRQHQ GRNXPHQWHQ XQG GHQ (LQWUDJ LQ GLH 'DWHQEDQN$&/ P VVHQ 6LH DXFK GDV 6HUYHU'RNXPHQW PLW GHQ HQW VSUHFKHQGHQ (LQVWHOOXQJHQ YHUVHKHQ XQG EHDUEHLWHQ 'LHVH (LQVWHOOXQJHQ ULFKWHQ VLFK GDQDFK ZLH 6LH GHQ %H QXW]HUQ GHQ =XJULII HUP JOLFKHQ XQG I U ZHOFKHQ $QVFKOXVVW\S 6LH HLQH $XWKHQWLIL]LHUXQJ HLQULFKWHQ P FKWHQ

9 Notes/Domino Sicherheitsmodell II 3 1DFK GHU,QVWDOODWLRQ HLQHV 'RPLQR 6HUYHUV VLQG I U GHQ =XJULII VWDQGDUGPl LJ VFKRQ HLQLJH 9RUHLQVWHOOXQJHQ JHWURIIHQ 6LH N QQHQ LP 6HUYHU'RNXPHQW GLH (LQVWHOOXQJHQ ]XU 1DPHQV XQG.HQQZRUWDXWKHQWLIL]LHUXQJ I U ]ZHL $QVFKOXVVW\SHQ ZlKOHQ : $XWKHQWLIL]LHUXQJ EHU 7&3,3 : $XWKHQWLIL]LHUXQJ EHU 66/ (1) Authentifizierung über TCP/IP,P 6HUYHU'RNXPHQW N QQHQ 6LH HLQH $XWKHQWLIL]LHUXQJ I U 7&3,3 HLQVWHOOHQ ZHQQ 6LH %HQXW]HU DXI 'DWHQ EDQNHQ ]XJUHLIHQ ODVVHQ ZROOHQ GLH PLW XQNULWLVFKHQ 'DWHQ DUEHLWHQ (2) Authentifizierung über SSL :ROOHQ 6LH GDJHJHQ I U,KUH %HQXW]HU HLQH VLFKHUH 9HUELQGXQJ ]XP 6HUYHU DXIEDXHQ ZHLO HV VLFK EHL,KUHQ 'DWHQ XP XQWHUQHKPHQVNULWLVFKH 'DWHQ KDQGHOW ZHUGHQ 6LH LQ GLHVHP )DOO LP 6HUYHU'RNXPHQW GHQ 66/$QV FKOXVV XQG GLH $XWKHQWLIL]LHUXQJ DNWLYLHUHQ Einrichten des Server-Dokuments 8P GLH (LQVWHOOXQJHQ LP 6HUYHU'RNXPHQW EHDUEHLWHQ ]X N QQHQ EHQ WLJHQ 6LH GHQ 'RPLQR $GPLQLVWUDWRU RGHU 5XIHQ 6LH GHQ 0HQ SXQNW $'0,1,675$7,21.21),*85$7,21 DXI.OLFNHQ 6LH LP 'RPLQR $GPLQLVWUDWRU DXI GDV 5HJLVWHU. 21),*85$7,21,P JH IIQHWHQ 5HJLVWHU VWHKW,KQHQ HLQH 6HUYHU/LVWH ]XU 9HUI JXQJ PLW GHU 6LH GDV HQWVSUHFKHQGH 6HUYHU 'RNXPHQW I U GHQ 6HUYHU DXVZlKOHQ N QQHQ (UZHLWHUQ 6LH GLH /LVWH 6 (59(5 XQG ZlKOHQ 6LH GLH $QVLFKW $ //(6 (59(5'2.80(17( DXV :lkohq 6LH GDV ]X EHDUEHLWHQGH 6HUYHU'RNXPHQW DXV %HWlWLJHQ 6LH GLH 6FKDOWIOlFKH 6 (59(5 %($5%(,7(1 ]XP gii QHQ HLQHV 6HUYHUGRNX PHQWV.OLFNHQ 6LH DXI GDV 5HJLVWHU $ 16&+/h66(, 17(51(7$16&+/h66( (V ZHUGHQ I QI 5H JLVWHU DQJH]HLJW,Q MH GHP 5HJLVWHU :(% 9 (5=(,&+1,6 1 (:6 0 $,/ XQG,,23 VLQG GLH 3URWRNROOH PLW LK UHQ (LQVWHOOXQJHQ DXI JHOLVWHW.OLFNHQ 6LH DXI GDV 5HJLVWHU PLW GHP 3UR WRNROO I U GDV 6LH HLQH 1DPHQV XQG.HQQ ZRUWDXWKHQWLIL]LHUXQJ DQJHEHQ P FKWHQ Server-Dokument

10 3 Notes Domino R5 - Systemadministration 2 ) U GDV MHZHLOLJH 5HJLVWHU N QQHQ 6LH LP $EVFKQLWW 7&3,3 RGHU 66/ GLH IROJHQGHQ 6FKULWWH GXUFKI KUHQ :lkohq 6LH LP $EVFKQLWW 7&3,3 I U GDV )HOG 1 $0(81'. (11:257 GLH (LQVWHOOXQJ - $ ZHQQ 6LH EHL GHU 9HUELQGXQJ EHU 7&3,3 HLQH 1DPHQV XQG.HQQZRUWDXWKHQWLIL]LHUXQJ HLQULFKWHQ ZROOHQ :lkohq 6LH LP $EVFKQLWW 66/ I U GDV )HOG 1 $0(81'. (11:257 GLH (LQVWHOOXQJ - $ ZHQQ 6LH EHL GHU 9HUELQGXQJ ]XP 'RPLQR 6HUYHU HLQH JHVLFKHUWH 1DPHQV XQG.HQQZRUWDXWKHQWLIL]LH UXQJ HLQULFKWHQ ZROOHQ 3.3 SSL auf einem Domino Server 66/ 6HFXUH 6RFNHWV /D\HU LVW HLQ PRGHUQHU,QWHUQHWVLFKHUKHLWVVWDQGDUG GHU HLQH JHVLFKHUWH 9HUVFKO VVHOXQJ YRQ,QIRUPDWLRQHQ EH] JOLFK GHU %HQXW]HU GLH VLFK DP 'RPLQR 6HUYHU DXWKHQWLIL]LHUHQ ZROOHQ ]XOl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lW GHU 3DUWHLHQ DOVR GDV hehu SU IHQ RE GLH 'DWHQ DXFK ZLUNOLFK YRQ GHU 3HUVRQ VWDPPHQ GLH GLHVH YHUVHQGHW KDEHQ VROO 'LHV ZLUG GXUFK HLQ VR JHQDQQWHV =HUWLILNDW HLQHU &HUWLILFDWLRQ $XWKRULW\ &$ HLQHU DQHUNDQQWHQ %HJODXELJXQJVVWHOOH JHZlKU OHLVWHW 8P GLH 9HUWUDXOLFKNHLW GHU 'DWHQ ]X JDUDQWLHUHQ HLQLJHQ VLFK EHLGH 3DUWHLHQ YRU GHP 'DWHQDXVWDXVFK DXI HLQHQ JHPHLQVDPHQ 6FKO VVHO PLW GHP DOOH 'DWHQ YRU GHP 7UDQVSRUW YHUVFKO VVHOW ZHUGHQ 'DPLW VROO DXVJHVFKORVVHQ ZHUGHQ GDVV 'DWHQ DXI LKUHP :HJ YRQ 'ULWWHQ JHOHVHQ RGHU JDU YHUlQGHUW ZHUGHQ Einrichten von SSL auf einem Domino Server ) U GDV (LQULFKWHQ YRQ 66/ DXI,KUHP 'RPLQR 6HUYHU P VVHQ 6LH IROJHQGH 6FKULWWH GXUFKI KUHQ : (LQH 6HUYHU=HUWLILNDWVDGPLQLVWUDWLRQ HLQULFKWHQ : (LQH 6HUYHU6FKO VVHOULQJGDWHL HUVWHOOHQ : (LQH 'RPLQR =HUWLIL]LHUXQJVVWHOOH HLQULFKWHQ (1) Server-Zertifikatsadministration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

11 Notes/Domino Sicherheitsmodell II 3 Einrichten der Server-Zertifikatsadministration 'LH 6HUYHU=HUWLILNDWVDGPLQLVWUDWLRQ LVW HLQH 'DWHQEDQN &( ) GLH VLFK EHUHLWV DXI GHP 'RPLQR 6HUYHU EHILQGHW 'DPLW 6LH PLW GLHVHU 'DWHQEDQN DUEHLWHQ N QQHQ EHQ WLJHQ 6LH GHQ 1RWHV &OLHQW RGHU GHQ 'RPLQR $GPLQLVWUDWRU =XVlW]OLFK VROOWHQ 6LH HLQHQ :HE%URZVHU LQVWDOOLHUW KDEHQ GDPLW 6LH ]X HLQHP VSlWH UHQ =HLWSXQNW GLH =HUWLILNDWH YRP 6HUYHU HLQHU =HUWLIL]LHUXQJVVWHOOH DEUXIHQ N QQHQ RGHU 5XIHQ 6LH GHQ 0HQ SXQNW '$7(, '$7(1%$1. g))1(1 DXI.OLFNHQ 6LH LP 'RPLQR $GPLQLVWUDWRU DXI GDV 5HJLVWHU ' $7(,(1 :lkohq 6LH GLH 'DWHL &( ) 6HUYHU=HUWLILNDWVDGPLQLVWUDWLRQ XQG IIQHQ 6LH VLH (UVWHOOHQ 6LH PLW GHU 6FKDOWIOlFKH 6 &+/h66(/5,1*( = 8/$6681*(1 (567(//(1 QHXH 6FKO VVHO ULQJH XQG =XODVVXQJHQ 0LW GHU 6FKDOWIOlFKH 6 &+/h66(/5,1*( $1=(,*(1 %($5%(,7(1 N QQHQ 6LH GLH EHUHLWV HUVWHOOWHQ 6FKO VVHOULQJH DQ]HLJHQ ODVVHQ XQG EHDUEHLWHQ /DVVHQ 6LH VLFK EHU GLH 6FKDOWIOlFKH =8/$6681*6$1)25'(581* // HLQ 3URWRNROO EHU GLH ELVKHULJHQ =HUWLILNDWVDQIRUGHUXQJHQ DQ]HLJHQ Server-Zertifikatsadministration :HQQ 6LH IWHUV PLW GLHVHU 'DWHQEDQN DUEHLWHQ ZHUGHQ OHJHQ 6LH GLH =HUWLILNDWVDGPLQLVWUDWLRQ &( ) DXI GHU $UEHLWVEHUHLFKVVHLWH,KUHV 1RWHV &OLHQWV DE (2) Server-Schlüsselringdatei (LQH 6HUYHU6FKO VVHOULQJGDWHL LVW HLQH HLQIDFKH %LQlUGDWHL GLH GLH $XIJDEH KDW GLH 6HUYHU=HUWLILNDWH ]X YHU ZDOWHQ Notizen

12 3 Notes Domino R5 - Systemadministration 2 Erstellen einer Server-Schlüsselringdatei 1DFKGHP 6LH GLH 6HUYHU=HUWLILNDWVDGPLQLVWUDWLRQ HLQJHULFKWHW KDEHQ N QQHQ 6LH PLW +LOIH GLHVHU 'DWHQEDQN HLQH 6HUYHU6FKO VVHOULQJGDWHL HUVWHOOHQ 9HUZHQGHQ 6LH GD]X GDV YRQ,KQHQ DEJHOHJWH 6\PERO DXI GHU $U EHLWVEHUHLFKVVHLWH,KUHV 1RWHV &OLHQWV RGHU EHQXW]HQ 6LH GHQ 'RPLQR $GPLQLVWUDWRU RGHU 5XIHQ 6LH GHQ 0HQ SXQNW $'0,1,675$7,21 '$7(,(1 DXI.OLFNHQ 6LH LP 'RPLQR $GPLQLVWUDWRU DXI GDV 5HJLVWHU ' $7(,(1,P JH IIQHWHQ 5HJLVWHU ZlKOHQ 6LH LQ GHU /LVWH GLH HQWVSUHFKHQGH 'DWHQEDQN DXV giiqhq 6LH GLH 6HUYHU =HUWLILNDWVDGPLQLVWUDWLRQ XQG EHWlWLJHQ 6LH GLH 6FKDOWIOlFKH ( 567(//(1 6,((,1(16 &+/h66(/5,1* 'DV QHXH 'RNXPHQW ]XU 6FKO VVHOULQJHUVWHOOXQJ IIQHW VLFK *HEHQ 6LH LQ GLH YRUJH JHEHQHQ )HOGHU GLH :HUWH HLQ %HWlWLJHQ 6LH QDFK GHU HUIROJWHQ (LQJDEH GLH 6FKDOWIOlFKH 6 &+/h66(/ 5,1*'$7(, (567(//(1 XP GHQ 3UR]HVV DE]XVFKOLH HQ Schlüsselringdatei erstellen )ROJHQGH )HOGHU VWHKHQ I U GLH (LQJDEHQ ]XU 9HUI JXQJ )HOG :HUW 1 $0('(56 &+/h66(/5,1*'$7(, *HEHQ 6LH KLHU GHQ H[SOL]LWHQ 3IDG XQG 'DWHLQDPHQ HLQ 9RUJHJHEHQ LVW.(<),/(.<5 LP 9HU]HLFKQLV '$7$ GHV 'RPLQR $GPLQLVWUDWRUV (V LVW KLOI UHLFK GLH (UZHLWHUXQJ.<5 ]X YHUZHQGHQ XP GLH 1DPHQ I U 6HUYHU XQG &$6FKO VVHOULQJGDWHL NRQVLVWHQW ]X KDOWHQ 6 &+/h66(/5,1*.(11:257 6LH P VVHQ KLHU PLQGHVWHQV DOSKDQXPHULVFKH =HLFKHQ HLQJHEHQ & 21),503 $66:25' 'DV.HQQZRUW ZLUG KLHU QRFK HLQPDO EHUSU IW 'DGXUFK ZLUG VLFKHUJHVWHOOW GDVV GDV.HQQZRUW NRUUHNW HLQJHJHEHQ ZXUGH 6 &+/h66(/*5g66( 'LH *U H GHU IIHQWOLFKHQ XQG SULYDWHQ 6FKO VVHOSDDUH MH OlQJHU GHU 6FKO V VHO GHVWR K KHU LVW GLH 9HUVFKO VVHOXQJ,Q (XURSD LVW MHGRFK QRFK GLH LQWHU QDWLRQDOH 9HUVLRQ YHUI JEDU PLW GHU QXU GLH %LW6FKO VVHOJU H UHDOLVLHUW ZHUGHQ NDQQ $ //*(0(,1(51 $0( %HVFKUHLEXQJ GLH GDV &$=HUWLILNDW LGHQWLIL]LHUW 2 5*$1,6$7,21 +LHU JHEHQ 6LH GHQ 1DPHQ GHU 2UJDQLVDWLRQ E]Z GHU )LUPD HLQ ]X GHU GLH &$ JHK UW

13 Notes/Domino Sicherheitsmodell II 3 )HOG :HUW 8 17(525*$1,6$7,21 2SWLRQDO N QQHQ 6LH KLHU GHQ %HUHLFK RGHU GLH $EWHLOXQJ HLQJHEHQ ]X GHP GLH &$ JHK UW SWLRQDO N QQHQ 6LH KLHU GHQ 2UW RGHU GLH 6WDGW HLQJHEHQ LQ GHP VLFK GLH &$ EHILQGHW % 81'(6/$1'2'(55 (*,21 +LHU JHEHQ 6LH GDV %XQGHVODQG RGHU GLH 5HJLRQ HLQ ]X GHPGHU GHU REHQ DQJHJHEHQH 2UW JHK UW / $1' +LHU JHEHQ 6LH HLQH DXV ]ZHL =HLFKHQ EHVWHKHQGH %H]HLFKQXQJ GHV /DQGHV HLQ LQ GHP GHU &$6HUYHU VWHKW 1DFKGHP 6LH GLH (LQJDEHQ XQG GLH $NWLRQ ]XU (UVWHOOXQJ GHU 6FKO VVHOULQJGDWHL GXUFKJHI KUW KDEHQ EHNRP PHQ 6LH QRFKPDOV HLQH %HVWlWLJXQJ JHOLHIHUW 'LHVH %HVWlWLJXQJ ]HLJW GLH YRQ,KQHQ JHPDFKWHQ (LQJDEHQ XQG ZHLVW 6LH GDUDXI KLQ GDVV 6LH MHW]W =HUWLILNDWH KLQ]XI JHQ N QQHQ Erstellen einer Server-Zertifikatsanforderung 8P,KUHU QHX HUVWHOOWHQ 6FKO VVHOULQJGDWHL =HUWLILNDWH KLQ]XI JHQ ]X N QQHQ P VVHQ 6LH LP QlFKVWHQ 6FKULWW EHU GLH 6HUYHU=HUWLILNDWVDGPLQLVWUDWLRQ GLH =XODVVXQJVDQIRUGHUXQJ HUVWHOOHQ RGHU 5XIHQ 6LH GHQ 0HQ SXQNW $'0,1,675$7,21 '$7(,(1 DXI.OLFNHQ 6LH LP 'RPLQR $GPLQLVWUDWRU DXI GDV 5HJLVWHU ' $7(,(1,P JH IIQHWHQ 5HJLVWHU ZlKOHQ 6LH LQ GHU /LVWH GLH HQWVSUHFKHQGH 'DWHQEDQN DXV giiqhq 6LH GLH 6HUYHU =HUWLILNDWVDGPLQLVWUDWLRQ XQG EHWlWLJHQ 6LH GLH 6FKDOWIOlFKH ( 567(//(1 6,((,1(= 8/$6681*6$1)25 '(581* 'DV QHXH 'RNXPHQW II QHW VLFK :lkohq 6LH LP )HOG = (57, ),.$76$1)25'(581* //,(5(1 HLQ - $ ZHQQ 6LH GHQ 9RUJDQJ SURWRNRO OLHUHQ ZROOHQ :lkohq 6LH LP $EVFKQLWW 0 (7+2'( GLH 2SWLRQ,1 0 $6.( $8) &$6,7( (,1)h *(1 IDOOV GLHVH 0HWKRGH YRQ GHU =HUWLIL]LHUXQJV VWHOOH XQWHUVW W]W ZLUG DQVRQVWHQ ZlKOHQ 6LH $ /6 (0 $,/$1&$ 6(1'(1 %HHQGHQ 6LH GHQ 9RUJDQJ PLW GHU 6FKDOWIOlFKH = (5 7,),.$76$1)25'(581* (5 67(//(1 Zertifikatsanforderung erstellen 1DFK %HHQGLJXQJ GLHVHU $NWLRQ EHNRPPHQ 6LH ZLHGHU HLQH %HVWlWLJXQJ JHOLHIHUW 'D 6LH MHW]W HLQH $QIRUGH UXQJ EHU HLQ =HUWLILNDW DEJHVHW]W KDEHQ P VVHQ 6LH ZDUWHQ ELV,KU DQJHIRUGHUWHV =HUWLILNDW IHUWLJ LVW )DOOV 6LH GLH $QIRUGHUXQJ YRQ HLQHP )UHPGDQELHWHU GXUFKI KUHQ ODVVHQ ZLUG HU 6LH SHU 0DLO EHQDFKULFKWLJHQ ZR 6LH,KU QHXHV =HUWLILNDW DEKROHQ N QQHQ

14 3 Notes Domino R5 - Systemadministration 2 1DFK (UKDOW GLHVHV =HUWLILNDWV P VVHQ 6LH ]XQl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omino Zertifizierungsstelle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hehuwudjhq YRQ H[WHUQ DXVJHVWHOOWHQ &OLHQW=HUWLILNDWH LQ GDV 'RPLQR 9HU]HLFKQLV Einrichten der Domino Zertifizierungsstelle 8P DXI GHP 'RPLQR 6HUYHU GLH =HUWLIL]LHUXQJVVWHOOH HLQ]XULFKWHQ EHQ WLJHQ 6LH GLH 6FKDEORQH ' 20,12= (57,), =,(581*667(//(&&$17) GLH VLFK EHUHLWV DXI GHP 6HUYHU EHILQGHW 0LW +LOIH GHV 1RWHV &OLHQWV RGHU GHV 'RPLQR $GPLQLVWUDWRUV HUVWHOOHQ 6LH GLH 'DWHQEDQN I U GLH 'RPLQR =HUWLIL]LHUXQJVVWHOOH 5XIHQ 6LH GHQ 0HQ SXQNW '$7(, '$7(1%$1. 1(8 DXI RGHU :lkohq 6LH GLH 7DVWHQNRPELQDWLRQ STRG N,P JH IIQHWHQ )HQVWHU I KUHQ 6LH GLH $NWLRQHQ ]XU (UVWHOOXQJ HLQHU 'DWHQEDQN GXUFK :lkohq 6LH LP )HOG 6 (59(5 GHQ 1D PHQ GHV 6HUYHUV DXV /DVVHQ 6LH PLW GHU 2SWLRQ : (,7(5( 6 &+$%/21(1 $1=(,*(1 DOOH 6FKDEOR QHQ DXI GHP 6HUYHU DQ]HLJHQ :lkohq 6LH GLH 6FKDEORQH ' 20,12 = (57,),=,(581*667(//( DXV *HEHQ 6LH LP )HOG 7,7(/ GHQ HQW VSUHFKHQGHQ 1DPHQ HLQ *HEHQ 6LH LP )HOG ' $7(,1$0(1 HLQH %H]HLFKQXQJ I U GLH 'DWHQEDQN HLQ %HWlWLJHQ 6LH GLH 6FKDOWIOlFKH 2. GDPLW GLH 'DWHQEDQN HUVWHOOW ZLUG Dialogfenster N EUE D ATENBANK

15 Notes/Domino Sicherheitsmodell II 3 1DFK GHU (UVWHOOXQJ GHU 'DWHQEDQN P VVHQ 6LH GLH $&/ IROJHQGHUPD HQ EHDUEHLWHQ ; 'LH $GPLQLVWUDWRUHQ GLH,QWHUQHW]HUWLILNDWH DXVJHEHQ XQG YHUZDOWHQ VROOHQ ZHUGHQ GHU 'DWHQEDQN$&/ KLQ]XJHI JW -HGHU $GPLQLVWUDWRU HUKlOW (GLWRU]XJULII PLW / VFKUHFKWHQ XQG GLH 5ROOH &$3 5,9,/(*('8 6(5 ; 'DV =XJULIIVUHFKW ' ()$8/7 OHJHQ 6LH DOV $8725(1=8*5,))0,7( 567(//(1 IHVW 8P ]X YHUKLQGHUQ GDVV %HQXW]HU EHLP :lkohq YRQ '$7(, '$7(1%$1. g))1(1 RGHU :HE&OLHQWV EHLP 'XUFKVXFKHQ HLQHU 'DWHQEDQNOLVWH GLH $QZHQGXQJ ' 20,12= (57,),=,(581*667(//( DQJH]HLJW EHNRPPHQ P VVHQ 6LH GLH $QZHQGXQJ DXVEOHQGHQ 6LH GHDNWLYLHUHQ GLH $Q]HLJH GHU 'DWHQEDQN LQ GHU,QIR%R[ (,*(16&+$)7(1 ' $7(1%$1. LP 5HJLVWHU * (67$/781* GXUFK GLH 2SWLRQ, 0',$/2*)(/' '$7(1%$1.g))1(1$1=(,*(1 Erstellen der CA-Schlüsselringdatei und der CA-Zertifikate 8P 6HUYHU XQG &OLHQW=HUWLILNDWH ]X VLJQLHUHQ XQG HLQH GLJLWDOH &$6LJQDWXU ]X GHQ 6HUYHU XQG &OLHQW=HUWLIL NDWHQ KLQ]X]XI JHQ YHUZHQGHQ 6LH GDV &$=HUWLILNDW 'DV &$=HUWLILNDW ZLUG LQ GHU 6FKO VVHOULQJGDWHL HLQHU %LQlUGDWHL GLH GXUFK HLQ.HQQZRUW JHVFK W]W LVW JHVSHLFKHUW ) U GLH (UVWHOOXQJ GHU 6FKO VVHOULQJGDWHL XQG GHU =HUWLILNDWH YHUZHQGHQ 6LH GLH 'RPLQR =HUWLIL]LHUXQJVVWHOOH &&$16) RGHU 5XIHQ 6LH GHQ 0HQ SXQNW '$7(, '$7(1%$1. g))1(1 DXI.OLFNHQ 6LH LQ GHU $UEHLWVEHUHLFKVVHLWH,KUHV 1RWHV &OLHQWV DXI GDV 'DWHQEDQNV\PERO,P +DXSWPHQ GHU 'RPLQR =HUWLIL]LHUXQJVVWHOOH ZHUGHQ,KQHQ HLQLJH 2SWLRQHQ ]XU $XVZDKO DQJHERWHQ :lkohq 6LH XQWHU = 8 /$6681*6$8725,7b76. 21),*85$7,21 GLH 2S WLRQ = 8/$6681*6 $8725,7b766&+/h66(/ 5,1* =8/$6681* (5 67(//(1 'DV 'RNXPHQW IIQHW VLFK *HEHQ 6LH LQ GLH )HOGHU GLH YRUJHVHKHQHQ :HU WH HLQ %HWlWLJHQ 6LH GLH 6FKDOWIOlFKH = (57,),=,( 581*66&+/h66(/5,1* (567(//(1 XP GLH $N WLRQ DE]XVFKOLH HQ Dokument zur Erstellung des Zertifizierungsstellen-Schlüsselrings Notizen

16 3 Notes Domino R5 - Systemadministration 2 )ROJHQGH :HUWH N QQHQ 6LH LQ GLH )HOGHU HLQJHEHQ )HOG :HUW 1 $0('(56 &+/h66(/5,1*'$7(, *HEHQ 6LH GHQ H[SOL]LWHQ 3IDG XQG 'DWHLQDPHQ HLQ 9RQ 'RPLQR YRUJHJHEHQ LVW &$.(<.<5 LP 9HU]HLFKQLV '$7$ GHV 'RPLQR $GPLQLVWUDWRUV 6 &+/h66(/5,1*.(11:257 6LH P VVHQ PLQGHVWHQV DOSKDQXPHULVFKH =HLFKHQ KLHU HLQJHEHQ. (11:257h%(535h)81* 'DV.HQQZRUW ZLUG KLHU QRFK HLQPDO EHUSU IW 'DGXUFK ZLUG GDV.HQQZRUW DXI NRUUHNWH (LQJDEH JHSU IW 6 &+/h66(/*5g66( 'LH *U H GHU IIHQWOLFKHQ XQG SULYDWHQ 6FKO VVHOSDDUH MH Ol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lWLJXQJ,KUHU HLQJHJHEHQHQ 'DWHQ XQG HLQH,QIRUPDWLRQ LQ ZHOFKHP 9HU]HLFKQLV GLH &$6FKO VVHOULQJGDWHL DEJHOHJW ZXUGH ) U GHQ )DOO GDVV 6LH DQGHUH &OLHQWV YHUZHQGHQ ZROOHQ XP $QIRUGHUXQJHQ ]X EHVWlWLJHQ XQG ]X VLJQLHUHQ VROOWHQ 6LH GLH 6FKO VVHOULQJGDWHL DXI HLQH 'LVNHWWH RGHU HLQ 1HW]ZHUNODXIZHUN NRSLHUHQ 'DGXUFK ZLUG VLH I U DQGHUH &OLHQWV ]XJlQJOLFK $XI MHGHQ )DOO VROOWHQ 6LH GLH 6FKO VVHOULQJGDWHL DQ HLQHP VLFKHUHQ 2UW DEOHJHQ 8P HLQHP XQEHIXJWHQ =XJULII YRU]XEHXJHQ VROOWHQ QXU GLH YRQ,KQHQ IHVWJHOHJWHQ $GPLQLVWUDWRUHQ =XJULII DXI GLH 6FKO VVHOULQJGDWHL XQG GDV.HQQZRUW GHU =HUWLIL]LHUXQJVVWHOOH KDEHQ %HL GHU :DKO GHV 1DPHQV GHU =HUWLIL]LHUXQJVVWHOOH VROOWHQ 6LH VRUJIlOWLJ YRUJHKHQ 'D GLH (LQWUlJH EHL $ //*( 0(,1(5 1$0( 25*$1,6$7,21 817(525*$1,6$7, % 81'(6/$1' 2'(5 5 (*,21 XQG / $1' GHQ HLQGHXWLJHQ 1D PHQ GHV &$6HUYHUV IHVWOHJHQ NDQQ HV HLQ DXIZlQGLJHU 3UR]HVV ZHUGHQ ZHQQ 6LH DXIJUXQG HLQHU 1DPHQV lqghuxqj =HUWLILNDWH HUQHXW DXVVWHOOHQ P VVHQ Das Profil der Anwendung DOMINO ZERTIFIZIERUNGSSTELLE konfigurieren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lWLJHQ 6LH LP 1DYLJDWRU GHQ (LQWUDJ = 8/$6681*6$8725,7b76352),/.21),*85,(5(1 'LH 0DVNH 3 52),/ '(5= (57,),=,(581*667(//( IIQHW VLFK

17 Notes/Domino Sicherheitsmodell II 3 *HEHQ 6LH LQ GDV )HOG &$ 6 &+/h66(/'$7(, GHQ 3IDG XQG 'DWHLQDPHQ I U GLH &$6FKO VVHOULQJGDWHL HLQ 1RUPDOHUZHLVH VXFKW 1RWHV VWDQGDUGPl LJ DXI GHU ORNDOHQ )HVWSODWWH QDFK GHU 6FKO VVHOULQJGD WHL 6LH N QQHQ DEHU DXFK HLQ 1HW]ODXIZHUN ZlKOHQ DXI GDV DQGHUH $GPLQLVW UDWRUHQ =XJULII KDEHQ 'DV )HOG '161$0( '(6 = (57,),.$766(59(56 EHQ WLJW GHQ 7&3,3'161D PHQ GHV 6HUYHUV DXI GHP GLH $QZHQGXQJ = (5 7,),=,(581*667(//( LQVWDO OLHUW LVW 'RPLQR YHUZHQ GHW GLHVHQ 1DPHQ EHL GHU hehuplwwoxqj GHV 2UWHV DQ GLH $GPLQLVWUDWRUHQ XQG &OLHQWV DQ GHP GLH VLJQLHUWHQ =HUWLILNDWH ]X ILQGHQ VLQG %HWlWLJHQ 6LH GLH 6FKDOW IOlFKH 6 3(,&+(51 81' 6&+/,(66(1 XP GDV 'RNX PHQW ]X VSHLFKHUQ Profil der Zertifizierungsstelle,Q GLH QDFKIROJHQGHQ )HOGHU ZHUGHQ GLH 9RUJDEHZHUWH I U GDV )HQVWHU %(67b7,*7( & /,(17=(57,),.$76$1)25'( 581* HLQJHWUDJHQ %HL GHU %HVWlWLJXQJ HLQHV =HUWLILNDWV N QQHQ GLHVH :HUWH JHlQGHUW ZHUGHQ )HOG 66/)h5= (57,),.$76 75$16$.7,21(19(5:(1'(1" $ 16&+/ (5'(6 = (57,),.$766(59(56 % (67b7,*81*'(66,*1,(57(1 = (57,),.$76$1'(1 $ 175$*67(//(56(1'(1" 6 2//(16,*1,(57(= (57,),.$7(,1'$6' 20,12 9 (5=(,&+1,6 (,1*(75$*(1:(5'(1" 9 25*(*(%(1(5 * h/7,*.(,76=(,75$80 (LQJDEH :lkohq 6LH - $ 9RUJDEH ZHQQ 6LH IHVWOHJHQ ZROOHQ GDVV I U HLQH VLFKHUH (QWJHJHQQDKPH GHV =HUWLILNDWV HLQ 9HUZHLV DXI GHQ 66/$QVFKOXVV LQ GHU (0DLO1DFKULFKW DEJHOHJW ZLUG GLH ZlKUHQG GHV =HUWLILNDWVDQIRUGHUXQJVSUR ]HVVHV JHQHULHUW ZXUGH :lkohq 6LH 1 (,1 ZHQQ 6LH 66/ QLFKW YHUZHQGHQ P FKWHQ 'HU 3RUW I U GHQ 7&3,3$QVFKOXVV GHV 6HUYHUV GLHVHQ 3RUW YHUZHQGHW 'RPL QR XP HLQH (0DLO1DFKULFKW DQ GLH &OLHQWV ]XU (QWJHJHQQDKPH GHU =HUWLILND WH ]X VHQGHQ 'LH 9RUJDEH LVW :lkohq 6LH - $ XP HLQH %HVWlWLJXQJ DQ GHQ $QWUDJVWHOOHU I U GLH $QIRUGHUXQJ HLQHV VLJQLHUWHQ =HUWLILNDWV ]X VHQGHQ :lkohq 6LH 1 (,1 9RUJDEH XP NHLQH %HVWlWLJXQJ ]X VHQGHQ :lkohq 6LH - $ 9RUJDEH GDPLW 'RPLQR GLH $QIRUGHUXQJ HLQHV VLJQLHUWHQ =HU WLILNDWV DQ GHQ $GPLQLVWUDWLRQVSUR]HVV VHQGHW XP GLHVHV =HUWLILNDW LP 'RPLQR 9HU]HLFKQLV VSHLFKHUQ ]X ODVVHQ :lkohq 6LH 1 (,1 XP GDV =HUWLILNDW QLFKW LP'RPLQR 9HU]HLFKQLV VSHLFKHUQ ]X ODVVHQ +LHU ZXUGH HLQH 9RUJDEH YRQ -DKUHQ JHZlKOW 6LH N QQHQ GLHVHQ :HUW HQW VSUHFKHQG lqghuq

18 3 Notes Domino R5 - Systemadministration 2 Verwalten der Zulassungs- und Registrierungsanforderungen 'DPLW,KQHQ LP =HLWDEODXI QLFKW GHU hehueolfn YHUORUHQ JHKW ZHOFKH =XODVVXQJHQ XQG 5HJLVWULHUXQJHQ YRQ =HUWLILNDWHQ HLQJHJDQJHQ VLQG VWHOOW,KQHQ GLH 'DWHQEDQN '20,12= (57,),=,(581*667(//( ZHLWHUH $QVLFKWHQ ]XU 9HUI JXQJ )ROJHQGH $QVLFKWHQ VLQG DEUXIEDU : 6HUYHU=XODVVXQJVDQIRUGHUXQJHQ : &OLHQW=XODVVXQJVDQIRUGHUXQJHQ : &OLHQW5HJLVWULHUXQJVDQIRUGHUXQJHQ 0LWWHOV GLHVHU $QVLFKWHQ N QQHQ 6LH GLH DQJHQRPPHQHQ XQG DEJHZLHVHQHQ $QIRUGHUXQJHQ DQVFKDXHQ CA-Schlüsselringdatei administrieren (LQH ZHLWHUH 0 JOLFKNHLW LQQHUKDOE GHU 'RPLQR =HUWLIL]LHUXQJVVWHOOH LVW GLH 9HUZDOWXQJ GHU &$6FKO VVHOULQJ GDWHL 6LH KDEHQ KLHU GLH 0 JOLFKNHLW YHUVFKLHGHQH $NWLRQHQ PLW GHU 6FKO VVHOULQJGDWHL GXUFK]XI KUHQ giiqhq 6LH LQQHUKDOE GHU 'DWHQEDQN ' 20,12= (57,),=,(581*667(//( &&$16) GLH $QVLFKW = 8/$6681*6$8725,7b766&+/h66(/5,1*$1=(,*(1 %HWlWLJHQ 6LH GLH 6FKDOWIOlFKH &$6&+/h66(/5,1* $1=(,*(1 XP GHQ 6FKO VVHO DQ]HLJHQ ]X ODVVHQ %HWlWLJHQ 6LH GLH 6FKDOWIOlFKH 6 &+/h66(/5,1*.(11:257b1'(51 ZHQQ 6LH GDV.HQQZRUW GHV 6FKO VVHOULQJV lqghuq ZROOHQ %HWlWLJHQ 6LH GLH 6FKDOWIOlFKH &$6&+/h66(/5,1*,0 7 (;7)250$7 ZHQQ 6LH GHQ 6FKO VVHO LQ )RUP HLQHU 7H[WGDWHL H[SRUWLHUHQ ZROOHQ Ansicht für den CA-Schlüsselring 3.4 Einschränkung der Benutzerzugriffe 0LW GHU 9HUZHQGXQJ YRQ :HE%URZVHUQ DOV &OLHQWV KDEHQ 6LH GLH 0 JOLFKNHLWHQ EHVWLPPWH.ULWHULHQ I U GHQ =XJULII IHVW]XOHJHQ )ROJHQGH.ULWHULHQ N QQHQ GDEHL EHU FNVLFKWLJW ZHUGHQ : =HLWUDXP LQ GHP HLQ %HQXW]HU NHLQH $NWLRQ DXI GHP 6HUYHU GXUFKI KUW : $Q]DKO DQ %HQXW]HUQ GLH VLFK JOHLFK]HLWLJ DP 6HUYHU DQPHOGHQ G UIHQ Festlegen eines Zeitraums 6LH KDEHQ DXI GHP 'RPLQR 6HUYHU GLH 0 JOLFKNHLW IHVW]XOHJHQ GDVV HLQH $EPHOGXQJ HLQHV :HE&OLHQWV DXWR PDWLVFK YRUJHQRPPHQ ZLUG ZHQQ HU ZlKUHQG HLQHV YRQ,KQHQ YRUJHJHEHQHQ =HLWUDXPV NHLQH $NWLRQHQ PHKU GXUFKJHI KUW KDW 'LHVH (LQVWHOOXQJ YHUKLQGHUW HLQHQ XQEHIXJWHQ *HEUDXFK HLQHV :HE&OLHQWV ZHQQ GHU HLJHQWOLFKH %HQXW]HU VHLQHQ 5HFKQHU YHUOlVVW RKQH VLFK YRUKHU DE]XPHOGHQ 'DPLW HLQ %HQXW]HU VLFKHUJHKHQ NDQQ GDVV VHLQH $EPHOGXQJ GXUFKJHI KUW ZXUGH NDQQ HU DP (QGH HLQHV 85/V "ORJRXW DQKlQJHQ 'LH 6LW]XQJ ZLUG GDPLW JHVFKORVVHQ %HLVSLHO +WWS659B17VHVVLRQQVI"ORJRXW

19 Notes/Domino Sicherheitsmodell II 3 Anzahl der Benutzer :HQQ 6LH YHUKLQGHUQ P FKWHQ GDVV VHKU YLHOH :HE&OLHQWV JOHLFK]HLWLJ DXI GLH 'DWHQEDQNHQ,KUHV 6HUYHUV ]X JUHLIHQ N QQHQ 6LH GLH PD[LPDOH $Q]DKO DQ DNWLYHQ 6LW]XQJHQ HLQVWHOOHQ Einrichten des Server-Dokuments 'DPLW 6LH GLH (LQVWHOOXQJHQ I U GHQ =HLWUDXP GHU $QPHOGXQJ XQG GLH $Q]DKO GHU %HQXW]HU HLQVWHOOHQ N QQHQ P VVHQ 6LH HQWVSUHFKHQGH bqghuxqjhq LP 6HUYHU'RNXPHQW GXUFKI KUHQ RGHU 5XIHQ 6LH GHQ 0HQ SXQNW $'0,1,675$7,21.21),*85$7,21 DXI.OLFNHQ 6LH LP 'RPLQR $GPLQLVWUDWRU DXI GDV 5HJLVWHU. 21),*85$7,21 :lkohq 6LH GDV 6HUYHU'RNXPHQW DXV XP GLH HQWVSUHFKHQGHQ (LQVWHOOXQJHQ GXUFK]XI KUHQ.OLFNHQ 6LH DXI GDV 5HJLVWHU ' 20,12: (%6(59(5 $NWLYLHUHQ 6LH GLH 6LW]XQJVDXWKHQWLIL]LHUXQJ LP )HOG 6,7=81*6$87+(17,),=,(581* /HJHQ 6LH HLQ =HLWOLPLW I U LQDNWLYH 6LW]XQJHQ LP )HOG = (,7/,0,7)h5,1$.7,9(6,7=81*(1 IHVW /HJHQ 6LH GLH $Q]DKO DNWLYHU %HQXW]HU LP )HOG 0 $;,0$/($ 1=$+/$.7,9(56,7=81*(1 IHVW %HWlWLJHQ 6LH GLH 6FKDOWIOlFKH 6 3(,&+(5181'6&+/,(66(1 XP GDV 'RNXPHQW ]X VSHLFKHUQ Server-Dokument Notizen

20 3 Notes Domino R5 - Systemadministration Schnellübersicht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lKOHQ $'0,1,675$7,21 3(5621(1 81' *5833(1 3(5621(1 $'0,1,67$7,21 '$7(,(1 'DWHQEDQN 6 (59(5 = (57,),.$76$'0,1 &( ) IIQHQ $'0,1,675$7,21 '$7(,(1 'DWHQEDQN ' 20,12 = (57,),=,(581*667(//( &&$16) IIQHQ 3.6 Übung %HDUEHLWHQ 6LH LP 6LQQH HLQHU DOOJHPHLQHQ 1DPHQV XQG.HQQZRUWDXWKHQWLIL]LHUXQJ GDV 6HUYHU'RNXPHQW XQG GLH 3HUVRQHQGRNXPHQWH %HDUEHLWHQ 6LH GDV 6HUYHU'RNXPHQW GDPLW 6LH GHQ %HQXW]HUQ QXU HLQJHVFKUlQNW GLH 0 J OLFKNHLW ELHWHQ VLFK EHU GDV,QWHUQHW DXI,KUHP 6HUYHU DQ]XPHOGHQ 5LFKWHQ 6LH 66/ DXI,KUHP 'RPLQR 6HUYHU HLQ (UVWHOOHQ 6LH GDEHL GLH 'DWHQEDQN I U GLH 'RPLQR =HUWLIL]LHUXQJVVWHOOH (UVWHOOHQ 6LH GLH 6FKO VVHOULQJGDWHL XQG GDV =HUWLILNDW

21 Notes/Domino Sicherheitsmodell II 3 Notizen