Secure mail for Verse
To allow HCL Verse® users to encrypt and digitally sign email messages, you must enable both the Encrypted mail support and the Name Resolution and Validation fields on the HCL Verse tab of the server's configuration settings document.
S/MIME is supported in Verse®. Users can verify an S/MIME signature on a received message. Users who have an X.509 certificate in HCL Notes® ID in their mail file or in ID Vault can decrypt received S/MIME messages as well as S/MIME sign messages they send. Outgoing messages can be S/MIME encrypted for recipients who have an X.509 certificate in the HCL Domino® directory or in Verse contacts. To allow an X.509 certificate to be used by Verse, an Internet cross-certificate must be issued from the user's organizational certifier to the certificate authority that issued the X.509 certificate. This Internet cross-certificate must be present in the Domino directory.
When both Notes® and S/MIME sign and encryption are
possible, Verse uses S/MIME sign and encryption by default. Use the
notes.ini file setting
iNotes_wa_SecMailPreferNotes to turn on Notes sign and encryption
when both S/MIME and Notes sign and encryption are possible.
Deployment differences between Notes and Verse
- Recovery authority -- Verse does not support recovery authority unless it is already in the ID mailed to the user.
- Imported Notes IDs -- Notes IDs cannot be Smartcard enabled.
- Certificates -- Verse looks for certificates first in the Domino directory and then in the contacts.
- Cross certificates -- Verse looks for cross certificates only in the Domino directory. If you are using Verse, you must create any required cross certificates in the Domino directory.
- Multiple domains -- If you are administering multiple domains, use directory assistance for an extended directory catalog on the server. Do not use a condensed directory catalog on the server.