Home
Welcome to the HCL Domino 11.0.1 documentation
Welcome to the HCL Domino® 11.0.1 documentation. Here administrators can find information about planning, installing, configuring, and administering Domino 11.0.1.
What's new in Domino® 11?
Learn about all of the new features for administrators in HCL Domino® 11.
What's new in Domino® 11.0.1?
HCL Domino® 11.0.1 introduces the following new features.
Domino Web server support for Server Name Indication (SNI)
Domino 11.0.1 Web servers now support the Server Name Indication (SNI) extension to the Transport Security Layer (TLS) protocol.

Welcome to the HCL Domino 11.0.1 documentation
Welcome to the HCL Domino® 11.0.1 documentation. Here administrators can find information about planning, installing, configuring, and administering Domino 11.0.1.
- Translated documentation
  The HCL Domino 11.0.1 documentation is currently available in the following languages.
- What's new in Domino® 11?
  Learn about all of the new features for administrators in HCL Domino® 11.
  - What's new in Domino® 11.0.1?
    HCL Domino® 11.0.1 introduces the following new features.
    - New command to run Domino Server Setup from Windows for IBM i
      On IBM i, Flexera InstallAnywhere 2018 is the platform used for the Domino Server Setup wizard on a Windows computer. As a result, the command to run setup from a Windows computer on IBM i is now domwzd.bat. Previously it was domwzd.exe. In other respects, installation and setup on IBM i remain the same as in Domino 11.0.
    - Domino for Linux Docker container
      HCL Domino 11.0.1 includes a Docker-compatible Red Hat Universal Base Image (UBI) of Domino that is part of your entitlement and available for download through the HCL Licensing Portal. HCL Domino 11.0.1 is pre-installed on this image, allowing you to deploy Domino servers as containers with just a few commands.
    - Auto Update (AUT) supports future HCAA upgrades
      Domino 11.0.1 Auto Update (AUT) servers support future upgrades of HCL Client Application Access (HCAA) clients.
    - Configuration enhancements for DAOS tier 2 storage
      Domino 11.0.1 introduces the following enhancements to DAOS tier 2 storage.
    - Support for Subject Alternative Name (SAN) field in X.509 certificates
      Domino 11.0.1 now supports the use of X.509 certificates that contain a Subject Alternative Name (SAN) field. Certificates with a SAN field (extension) no longer require a Subject field containing a distinguished name for TLS connections.
    - Domino Web server support for Server Name Indication (SNI)
      Domino 11.0.1 Web servers now support the Server Name Indication (SNI) extension to the Transport Security Layer (TLS) protocol.
    - New Notes IDs must have 1024-bit or stronger RSA keys
      When you register new Notes users, you must select at least a 1024-bit RSA key size for their Notes IDs.
    - Register multiple Active Directory users in Domino
      When you use the Directory Sync feature, in Domino 11.0.1 you can now select multiple Active Directory users to register in Domino. Previously you needed to select and register each Active Directory user individually.
    - Configuring a custom image for the Notes Workspace background
      Use the notes.ini setting Load_Workspace_image to deploy a custom image to display in your users' Notes Workspace background.
    - Disabling SwiftFile
      SwiftFile is integrated with HCL Notes starting in Notes 11.0.1. However, you can use the notes.ini setting DisableSwiftFile=1 to prevent your users from using it.
    - MarvelClient Essentials version 11.0.3
      The version of MarvelClient Essentials from panagenda that comes with Notes and Domino has been updated. The installer is version 11.0.3 which contains template version 20200204 and binary version 11.0.6.
    - New Java Runtime Environment
      The Java Runtime Environment (JRE) that comes with Domino 11.0.1 and Domino Designer 11.0.1 is updated from that provided in release 11.0.
    - Documentation updates article on the Support site
      See the article Domino 11 documentation updates for any significant corrections or other updates to this documentation.
  - What's new in Domino 11.0?
    HCL Domino 11.0 introduces the following new features.
- Overview
  Welcome to HCL Domino® Administrator Help.
- Domino trial
  A trial version of HCL Domino® 11.0.1 is available free of charge.
- Installing
  Use this documentation to install the HCL Domino® server and subsequently deploy the HCL Notes®client.
- Planning
  Use this topic as an overview of planning task.
- Configuring
  Use this information to configure your network, users, servers (including Web servers), directory services, security, messaging, widgets and live text, and server clusters.
- Securing
  This section describes security features, including execution control lists, IDs, and SSL.
- Administering
  This documentation provides information about the administration tools for managing and monitoring servers and databases.
- Tuning
  Use this information to improve HCL Domino® server, Domino Web server, and messaging performance through the use of resource balancing and activity trends, Server.Load commands, advanced database properties, cluster statistics, and the Server Health Monitor.
- Troubleshooting
  This section describes how to find and solve problems with HCL Domino® server and Administrator client.
- Notices

Domino Web server support for Server Name Indication (SNI)

Domino 11.0.1 Web servers now support the Server Name Indication (SNI) extension to the Transport Security Layer (TLS) protocol.

SNI enables a Domino server to support multiple virtual host(s) (Web sites) over HTTPS where multiple host names can be configured to map to a single IP address. To enable SNI support, add the notes.ini setting ENABLE_SNI=1 to the server and restart the HTTP task.

Note the following things to consider before enabling SNI support:

SNI is supported only for inbound HTTP requests.
To use SNI, there must be either a default Web site configured or at least one Web site with an IP address configured to use as the starting point for the TLS hand shake. If the server receives the TLS SNI extension, it attempts to switch to the site that matches the host name in the SNI extension after the TLS handshake is complete.
Enabling SNI may require you to adjust Web site configurations (rules and other settings). With SNI enabled, the server can map from the default or IP address Web site to another site by host name after the TLS handshake. This can cause a change in behavior in existing configurations where there may be one Web site with just an IP address configured and others with just the host name(s) configured. Old configurations would continue to use the IP address site. With SNI enabled, the request can switch to use a host name site which may have a different configuration than the IP address site.
On IBM i, SNI is supported natively on IBM i enabled for SSL Plus for HTTP and not for System SSL API.