Welcome
Securing your data
HCL Notes® security enables you to protect your workspace and data at all times, so only you and the people you designate have access to your data.
Restricting execution access with the Execution Control List
You can protect your workstation by specifying different types of execution access for different people or organizational certifiers who run HCL Notes® scripts and formulas. For example, you may give all types of execution access to your HCL Domino® administrator, but allow no execution access to unsigned scripts or formulas.
To view a name's effective access in the ECL
The effective access a person or a group has to the workstation ECL is not always apparent. For example, you may have granted temporary access to a group that designed a database application that you are working in. This access is valid for the duration of a session, but if that session lasts all day, you may want to refresh your memory of who has been granted ECL rights on your workstation. With one click, you can determine a person's, or group's, effective access in your ECL.

What's new in HCL Notes 14.5
Learn about the many new features and enhancements in HCL Notes 14.5.
About HCL Notes
The following topics provide information about HCL Notes.
Elements of Notes®
The HCL Notes® user interface is comprised of views menus, toolbars, navigation panes, and a sidebar that you can use for easy access to some frequently used applications.
Using the Discover page
HCL Notes® opens to the Discover page by default, unless you set up Notes to open to an application, such as Mail or Calendar, or to a customized home page. The default Discover page is a central location from which you can find targeted Notes client information more quickly and easily, including new features in the release, introductory material for new users, and helpful hints and tips. There is also a Quick Links tab that allows you to launch your workspace, Mail, Calendar, and other Notes applications you have recently used.
Using the Notes workspace
The HCL Notes® workspace, the legacy user interface for Notes, displays pages containing Notes application icons.
Using bookmarks
Bookmarks are links that point to HCL Notes® applications, views, documents, or Internet elements, such as Web pages and news groups. Bookmark folders organize your bookmarks. They can contain bookmarks or more folders.
Notes views and folders
Views display specific documents with similar criteria. For example, your Mail has an All Documents view that displays every document contained in the mail application, and a Sent view that displays only documents that you sent.
Printing
You print a single document or multiple documents at the same time. You can also print views (lists of documents in an HCL Notes® application) and the framesets found in both Notes and the Web.
Getting Started - Advanced
The topics in this section have been written for more advanced Notes users.
Tasks
The following topics provide details for common tasks in HCL Notes.
Mail
You can send and answer email, create signatures, and customize the look of your Inbox. You can also do things, like cancel an email sent by mistake or set up out of office notifications.
Calendar
You can schedule meetings, manage your schedule, add other calendars, and more.
To Do
You can keep track of what you need to do, and assign tasks to others.
Contacts
You can save information about people, such as title, addresses, birthdays, and more. You can also do things such as create groups to use as mailing lists, or print contacts as labels.
Notes applications
An HCL Notes® application contains information about a particular area of interest, such as the forms and policy documents for a department, or it might contain documents of a similar type, such as email messages. In addition, some companies create "discussion applications," where employees can post responses to particular topics.
Blogs (web logs)
You can create your own personal Web logs (blogs) using the Notes® blog template (dominoblog.ntf). After you create a blog application, you can then open it as you would any other Notes® application (NSF) file. From your blog application, you can create and manage content and blog discussions.
Locations and accounts
This topic describes connections to servers, ways to connect to servers, and things you should know before setting up a server connection.
Automating tasks using simple agents
You can program Notes® to perform tasks automatically using agents (also known as macros). Agents can help you perform repetitive tasks, such as managing documents and sending memos.
Sharing information with other applications
You can share files and graphics between HCL Notes® and other applications using a number of different techniques.
Notes roaming user
As a Notes® roaming user, you can log in to and use Notes from any computer in your organization on which Notes is installed, and use your personal data while doing so. Your personal data includes many of your Notes preferences and personal information such as your contacts, bookmarks, notebook, feeds subscriptions, and optionally your Notes workspace. Notes widgets also participate in roaming.
Replication
You can create an offline (local) duplicate of any HCL Notes® application you use. Such a duplicate is called a replica.
Search
You can use search to find documents, text in a document, applications, and people. You can also set search preferences for type of search query syntax and scope of search.
Securing your data
HCL Notes® security enables you to protect your workspace and data at all times, so only you and the people you designate have access to your data.
- Your Notes User ID and how to store it
- Changing passwords
  Passwords prevent others from using your User ID. When your administrator creates your User ID, he or she decides whether it needs a password, and what type of password is required. Once you access HCL Notes® for the first time, you should change your password to something that you can remember but is hard for others to guess.
- Using Notes shared login to eliminate Notes password prompts
  Notes® shared login (hereafter shared login) allows you to start HCL Notes and use your User ID without having to provide a Notes password. You only need to log in to Microsoft® Windows® using your Windows password. Your administrator controls whether you can use shared login.
- Locking the Notes ID
  Locking your HCL Notes® ID prevents others from using Notes when you are away from your computer. Locking your ID clears your Notes credentials and drops all connections to Notes servers. You must log in again in order to take any new action using Notes.
- Enabling Smartcards for Notes® login
  Smartcards resemble credit cards, but instead of containing a magnetic strip they contain a microprocessor and memory. You can use a Smartcard with your User ID to login to HCL Notes®, provided you have a Smartcard reader installed on your computer. Once your User ID is enabled for Smartcard login, you are prompted for your Smartcard Personal Identification Number (PIN) in place of your Notes password.
- Requesting a new user name
  If you want to request a new User Name - for example, if you got married and you want to change your name - you must contact your administrator.
- Your Notes® and Internet names
  You can view all the names that identify you in Notes®.
- Sending mail to your administrator
- Accessing servers using certificates
  A certificate is an electronic stamp, like a stamp on a passport, which verifies to a server that you are who you say you are. Certificates are stored in your User ID. When you first receive your User ID from your administrator, it contains a Notes® certificate. You may decide to use Internet certificates as well. (You may see Internet certificates being referred to as X.509 certificates.)
- The Access Control List
  Every database includes an access control list (ACL), which HCL Notes® uses to determine the level of access users and servers have to a database. Levels assigned to users determine the tasks that users can perform on a database. Levels assigned to servers determine what information within the database the servers can replicate.
- Restricting access to local databases
  When you enable encryption for a local database, HCL Notes® encrypts the database using your public key from your User ID. You are the only one who can then decrypt the database because you have the corresponding private key in your User ID. Nobody else's User ID can open the database.
- Notes data
  You can restrict access to applications you have stored locally or encrypt a document in an application.
- Three click support
  Three click support adds a level of security when a user opens an attachment within an email.
- Preventing others from reading or viewing specific documents
  You can protect your documents, so that only you and the people you designate can read them, even if others have access to the database your documents are in.
- Encrypting documents using secret keys
  Using a secret encryption key that is stored in your User ID, you can encrypt a document that you are posting in a public database, provided the document contains fields that are encryptable.
- How Notes® uses public and private keys for encrypting and signing mail
  HCL Notes® uses a public and private key set to encrypt and decrypt data, as well as to validate digital signatures. The public and private key in a set are mathematically related to each other and are unique to your User ID. Your public key is stored in your Notes certificate. Your certificate is stored in your User ID and the HCL Domino® Directory. Your private key is stored only in your User ID.
- Restricting execution access with the Execution Control List
  You can protect your workstation by specifying different types of execution access for different people or organizational certifiers who run HCL Notes® scripts and formulas. For example, you may give all types of execution access to your HCL Domino® administrator, but allow no execution access to unsigned scripts or formulas.
  - ECL security access options
    You can set access options in HCL Notes® for Workstation security, Java™ applet, or JavaScript™.
  - To view a name's effective access in the ECL
    The effective access a person or a group has to the workstation ECL is not always apparent. For example, you may have granted temporary access to a group that designed a database application that you are working in. This access is valid for the duration of a session, but if that session lasts all day, you may want to refresh your memory of who has been granted ECL rights on your workstation. With one click, you can determine a person's, or group's, effective access in your ECL.
  - Execution security alert
    The Execution Security Alert dialog box is a warning message. It lets you know that someone has requested an action that he or she is not allowed to execute because of what you specified in your Execution Control List.
- Securing your POP3, IMAP, or LDAP accounts
  HCL Notes® supports Secure Sockets Layer (TLS), which makes communication secure for your POP3, IMAP, or LDAP accounts. TLS encrypts the data that is sent between your Notes client and the server you specify for your account. Notes supports TLS versions 2.0 and 3.0. By default, Notes negotiates the best TLS version to use with a particular server.
- Signed plug-ins
  Your administrator may have selected plug-ins to be installed automatically with your client software. These plug-ins are signed with a certificate that is trusted by your client, and verified that the data they contain is not corrupted. Plug-ins signed in this way can then be installed without having to prompt you to accept them.
Widgets and Live Text
Widgets and Live Text enables end users to see and act on Live Text in a document, including mail, using widgets (.XML files) created for their use. Power users and administrators can create and edit widgets, and deploy them to users to engage a Notes® form, view, XPage, document or Composite Application, or third party services such as Web page, feed, or Google Gadget™, or automatically install or update a client plug-in for specific Notes users.
Error messages
Notices

To view a name's effective access in the ECL

The effective access a person or a group has to the workstation ECL is not always apparent. For example, you may have granted temporary access to a group that designed a database application that you are working in. This access is valid for the duration of a session, but if that session lasts all day, you may want to refresh your memory of who has been granted ECL rights on your workstation. With one click, you can determine a person's, or group's, effective access in your ECL.

Procedure

Click File > Security > User Security (Macintosh OS X users: Notes > Security > User Security).
Click What Others Do, and select either Using Workstation, Using Applets, or Using JavaScript.

Note: You need to be in the appropriate ECL pane to see the effective access for that ECL. For example, to see who has access in the JavaScript™ ECL, you would need to select the JavaScript™ ECL.
Click the Effective Session ECL button.
- The listbox on the left shows the users and groups who have access to this ECL, both permanently and for the duration of this session.
- Select a name to see the user or group access rights. The check boxes on the right side of the dialog box indicate the access rights for the selected name.

Results

Note: If your administrator has restricted your ability to change your ECL, the Effective Session ECL button will be greyed out.