ibm verse im eigenen rechenzentrum · ibm verse on-premises cloud & mobile first…aber nicht...

Notes & Domino –> the Power of Past & PresentAdminCamp 2017 – Sept. 18-20

IBM Verse im eigenen Rechenzentrum

Track 4 - Session 1

Montag 14:00 -15:30

Manfred LenzIBM Collaboration [email protected]

IBM Verse On-Premises Update


Please note:

IBM’s statements regarding its plans, directions, and intent are subject to change or withdrawal without notice at IBM’s sole discretion.

Information regarding potential future products is intended to outline our general product direction and it should not be relied on in making a purchasing decision.

The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to deliver any material, code or functionality. Information about potential future products may not be incorporated into any contract. The development, release, and timing of any future features or functionality described for our products remains at our sole discretion.

Performance is based on measurements and projections using standard IBM

benchmarks in a controlled environment. The actual throughput or performance that any

user will experience will vary depending upon many factors, including considerations

such as the amount of multiprogramming in the user's job stream, the I/O configuration,

the storage configuration, and the workload processed. Therefore, no assurance can be

given that an individual user will achieve results similar to those stated here.


Dieses Bild sollten Sie kennen…!

Private Cloud Hybrid Connections Cloud


Mehrwert durch Integration…in allen Clients

Private Cloud Hybrid Connections Cloud

Outlook

Notes

Connections

ICAA

MobiliNotes

Verse

IBM Collaboration Plattform

Watson Workspace


Feature Packs ersetzen Fixpacks und major releases

─ Bug Fixes, Security Fixes und Updates / neue Funktionen für bisherige Plattformen

Kürzere Releasezyklen

Aktuell: Feature Pack 9

➢ Release Notice http://www-10.lotus.com/ldd/fixlist.nsf/8d1c0550e6242b69852570c900549a74/12d957b7c277fc728525816300434c53?OpenDocument

➢ Interim Fixes http://www-01.ibm.com/support/docview.wss?uid=swg21657963

Kontinuierliche Verbesserungen durch Feature Packs


Plattform Support und Template Updates

Plattformen

─ IBM Domino 32bit Server auf AIX und Linux erhalten keine Updates und Funktionserweiterungen,

Wechsel auf Domino 64bit empfohlen.

─ Der Notes Client für Linux wird weiterhin unterstützt, erhält aber keine neuen Funktionen und

Feature Packs.

─ Microsoft Windows Server 2016 wird ab Feature Pack 8 unterstützt.

─ Windows und Red Hat Enterprise Linux als Plattformen für neue Komponenten

─ Zukünftige Feature Packs werden abgestimmt mit Updates für IBM Notes auf MacOS und

IBM Verse On-Premises.

Templates

─ Aktualisierte Templates werden nicht in Feature Packes sondern als separate Downloads auf Fix Central bereitgestellt, abgestimmt auf Änderungen und Fixes in den Feature Packs

─ Eine zip Datei für Englisch, weitere zip Dateien für andere Sprachen. Unterstützt auch Multilinguale

Templates.

─ FP9 Templates enthalten bereits die Verse On-Premises Gestaltungselemente


➢http://www-10.lotus.com/ldd/fixlist.nsf/8d1c0550e6242b69852570c900549a74/26aa7417bb60f7df852580b40072af2d?OpenDocument

IBM Empfehlung: Aktuelle Updates nutzen !

Beginning with 9.0.1 FP8, fix packs have been renamed to feature packs. To ensure quality, these feature packs still

have a high focus on addressing high impacting defects. Where possible, these features are optional enabled to

minimize risk. The same packaging, architecture and install kits used in previous fix packs remain in use for feature

packs.

All Feature Packs are language independent and may be applied on any language version of Notes/Domino 9.0.1.

Notes/Domino 9.0.1 Feature Pack 8 includes new features that benefit our customers. Some of these features have

been in development for years and we are excited to make them available. Please refer to the "New Features" section

below for more details.

9.0.1 Feature Pack 8 includes all of the content and supersedes the following deliverables:

• Notes: 9.0.1 FP7, 9.0.1 FP7IF1, 9.0.1 FP7IF2

• Domino: 9.0.1 FP7, 9.0.1 FP7IF1, 9.0.1 FP7IF2

• iNotes 9.0.1 FP7, 9.0.1 FP7IF1, 9.0.1 FP7IF2, 9.0.1 FP7IF3

Decision to upgrade

Customers are urged to upgrade to the latest Release and Feature Packs (in this case, 901FP8) to benefit from

later features and fixes made to the product. By providing a number of features and fixes, customers are able to accept

fewer code changes with lower risk, allowing them to "patch" an older Maintenance Release.

Feature Packs provide important fixes and IBM strongly recommends applying the latest Feature Pack available for

a Maintenance Release to receive the broadest set of fixes available.


IBM Verse On-PremisesCloud & mobile first…aber nicht “cloud only”

Mehrwert und Investitionsschutz:

IBM Domino Kunden können IBM Verse

jetzt auch On-Premises betreiben.

Verse On-Premises bietet dieselbe User

Experience wie Verse On-cloud.

Verse On-Premises beinhaltet

Komponenten für die facettierte Suche

und den API-basierten Zugriff auf

Connections.

➢ IBM Verse testen oder produktiv nutzen ohne die eigenen

Mailfiles in die IBM Cloud zu verschieben und ohne eine

Hybrid Infrastruktur aufbauen zu müssen.


Verse UI (Für Mail und Kalender,

läuft auf Domino unter

Windows oder Linux)

IBM Verse On-Premises High-Level Architektur

APIs for populating “Important to

Me” bar, social content, etc.

Domino 9.0.1 / FP7+(Domino Mail Infrastruktur)

Connections 5.5 / 6(Files, Profiles, Preview, Business

Card, Team Analytics, etc.)

Search Index

(on Domino)

Neue KomponentenBestehende Komponenten

Entitlement für Connections 5.5 Files & Profiles enthalten

(auch unabhängig von Verse nutzbar)


Verse ohne IBM Connections ist weniger schön…


IBM Verse On-Premises – Plattformen und Lizenzen

Download der Software wie üblich über Passport Advantage

Aktuell: IBM Verse On-Premises 1.0.2 (Partnumber CJ13YML)

Voraussetzung: Aktive N/D Softwarewartung für…

✓ CEO or IBM Domino Messaging / Enterprise CAL+PVU

✓ IBM Domino Messaging / Collaboration Express

✓ All Dual Entitlement (DE) Licences

Entitlement für IBM Connections Files & Profiles kann genutzt werden

Browser:• Google Chrome, aktuelles Release (keine Beta)• Mozilla Firefox ESR, aktuelles Release (keine Beta)• Apple Safari 8, 9• Microsoft Internet Explorer 11• Microsoft Edge

Domino Server 9.0.1 FP7+ auf:• Red Hat Enterprise Linux (RHEL) Server 6 oder 7 • Windows Server 2008 R2 Standard oder Enterprise• Windows Server 2012 / 2012 R2 Standard Edition• Windows Server 2012 / 2012 R2 Datacenter Edition


IBM Verse On-Premises – weitere Vorteile

Einfache, intuitive Benutzeroberfläche => geringere Kosten für Schulung der Anwender

Sichere Offlinenutzung im Browser ohne Zusatzsoftware

Optional: Desktop Clients wie Notes oder Outlook für Email nicht mehr erforderlich

Investitionsschutz für vorhandene Domino Infrastruktur

─ Zugriff auf Notes Anwendungen von Verse über ICAA oder IBM Notes Client

Verteilte Domino Server als effiziente Alternative zur Cloud in Umgebungen mit niedriger Bandbreite und

hohen Netzwerk-Latenzen

Verse On-Premises (VOP) erhält regelmäßig Feature Updates von Verse On-Cloud.

─ Neuer Verse Kalender

─ Actions in Compose message menu, extending business card, actions while reading mail

─ Zukünftige Optionen für Integration und Erweiterbarkeit

Leichter Umstieg für Endanwender in die IBM Connections Cloud


IBM Verse On-Premises Roadmap

VOP V1.0.1

High Availability:

Performance & Scalability

UI refresh

Threads:

Message List and Preview

Facet for filtering

messages with

attachments

VOP V1.0.2

Calendar Inbox

Attachment preview

Profile pictures

Important to me

Mobile enhancements

Support for IBM Connections

6.0 and IBM Docs 2.0 CR2

Extensibility

VOP V1.0.3

Sametime rich client integration

(ST 9.0.1 FP1)

Delegation for mail and calendar

SAML support

Compose attachment preview

Support for iCAL/.ics in Calendar

Inbox

Close iteration gap between cloud

and on-premises

Q2 2017 Q3 2017

All roadmap information subject to change

planned for Q4 2017


Neu in 1.0.2 für Administratoren

Verse On-Premises 1.0.2 läuft auf Domino 9.01 FP9 (Domino 9.0.1 FP9 muss vorVerse On-Premises installiert werden)

─ Ab FP9 enthälten das Mail-Template die Gestaltungselemente für Verse On-Premises. Kein mauelles Kopieren von Gestaltungselementen notwendig.

Verbesserte Skalierbarkeit und Geschwindigkeit (Faktor 2 – 5)

Integration mit IBM Connections 6 (oder 5.5 CR2) und IBM Docs 2.0 CR2 für die Vorschau von Dokumenten

Notes ID Passwort und HTTP Passwort müssen nicht synchronisiert werden. Es ist aber einfacherfür den Endanwender wenn sie es sind.

Verse Erweiterungen werden unterstützt und können vom Administrator ausgerollt warden.


Neu in 1.0.2 für Entwickler

Verse On-Premises unterstützt LiveText (für Web-Widgets)https://www.ibm.com/support/knowledgecenter/SSL3JX/whatsnew_2017_05/live_text.html

Die Senden-Schaltfläche kann deaktiviert werden.https://www.ibm.com/support/knowledgecenter/SSL3JX/whatsnew_2017_05/verse_ext_hookb4send.html

https://www.ibm.com/support/knowledgecenter/SSL3JX/whatsnew_2017_05/live_text.html

https://www.ibm.com/support/knowledgecenter/SSL3JX/whatsnew_2017_05/verse_ext_hookb4send.html


Neu in 1.0.2 für Endanwender 1/5

Mail Threads sind im Standard eingeschaltet



Neue Kalender Inbox



Vorschau von Anhängen wie Bildern, PDFs und Microsoft Office Dateien beim Lesen und Erstellenvon Nachrichten


Neu in 1.0.2 für Endanwender 4.1/5

Teilen von Anhängen über Connections Dateien beim Lesen. “Add to Files” Icon anklicken um einen Anhang in Connections Dateien zu speichern.


Neu in 1.0.2 für Endanwender 4.2/5



Verschlüsselte Nachrichten können auch dann gelesen oder gesendet werden wenn das HTTP Passwort nicht mit dem Notes ID Passwort synchronisiert ist. Verse On-Premises zeigt dann einenDialog für die Eingabe des Notes ID Passwortes an.

Remote Images (verlinkte Bilder) können automatisch angezeigt warden (Sicherheitseinstellung)

“Antworten an” und “Weiterleiten” Icons in der Anzeige der Nachrichten

Installing IBM Verse On-PremisesPart 1: Mail


Enable IBM iNotes on the Domino server

Make sure that you run the HTTP server task

Configure iNotes settings (see Configuring iNotes in the iNotes documentation)

Register users as iNotes users (see Registering iNotes users in the iNotes documentation)

25

http://www.ibm.com/support/knowledgecenter/en/SSULMR_9.0.1/admin/conf_configuringinotes_m.html

http://www.ibm.com/support/knowledgecenter/SSULMR_9.0.1/admin/conf_registeringlotusinotesusers_t.html


International characters - UTF-8

In the Domino Directory, open the Server document in edit mode.

Click the Internet Protocols tab and then the Domino Web Engine tab.

In the Character Set section, for Use UTF-8 for output, select Yes.

Or, if you use a Web Site document, see the procedure Specifying the character set to use when retrieving Web pages in the Domino documentation.

26

https://www.ibm.com/support/knowledgecenter/SSKTMJ_9.0.1/admin/conf_specifyingthecharactersettousewhenretrievingwebp_t.html?view=kc


Heap space

Configure the following notes.ini settings on the Domino server:

HTTPJVMMaxHeapSize=1024M

HTTPJVMMaxHeapSizeSet=1

27


Enable SSL

Verse On-Premises requires HTTPS and a valid certificate. How to create a Domino SHA-2 self-signed certificate using Certreq.nsf and the CA process

Generating a keyring file with a third party CA SHA-2 cert using OpenSSL and KYRTool on a Windows workstationhttps://www-10.lotus.com/ldd/dominowiki.nsf/dx/3rd_Party_SHA-2_with_OpenSSL_and_kyrtool

28

http://www-01.ibm.com/support/docview.wss?uid=swg21972274

https://www-10.lotus.com/ldd/dominowiki.nsf/dx/3rd_Party_SHA-2_with_OpenSSL_and_kyrtool


ID Vault

Make sure that you configure the ID vault on the Domino server and that you assign Verse users to the vault.

An ID vault is required to enable Verse users to read and send signed or encrypted messages. For information, see the Notes ID vault section of the Domino documentation.

29

http://www.ibm.com/support/knowledgecenter/SSKTMJ_9.0.1/admin/conf_notesidvault_c.html


Valid internet addresses

Make sure that users have valid internet addresses in their Domino directory Person documents:

Open the Person document.

On the Mail tab, verify that there is a valid address in the Internet Address field, for example, [email protected].

30


Install the Verse On-Premises package

Extract the file from the package that you downloaded from Passport Advantage.

The file is downloaded and extracted at: C:\VoPInstall\

The zip file contains the following files:

IBM_Verse_On_Premises.zip

iwaredir.ntf

license.zip

readme.zip

VOPDesign.nsf

31


Extract contents

Extract the contents of IBM_Verse_On_Premises.zip

Copy the contents of the /eclipse/plugins directory to the directory

<Domino data directory>/domino/workspace/applications/eclipse/plugins

Also:

Copy the iwaredir.ntf template from the extracted package to your Domino Data Directory (make a Backup of the existing one)

32


Replace design of redirector database

Replace the design of the redirector database with the iwaredir.ntf template from the extracted package:

1. From IBM Notes®, open the redirector database on the server. The default file name is iwaredir.nsf.

2. Click File > Application > Replace Design.

3. Select the new iwaredir.ntf template that you copied in the earlier step.

4. Click Replace and click Yes.

Note: If there isn't a redirector database, create one before you complete this step. For information, see the topic Using iNotes Redirect to access mail in iNotes in the iNotesdocumentation.

33

http://www.ibm.com/support/knowledgecenter/SSULMR_9.0.1/admin/conf_usinginotesredirecttoaccessmailinlotusinotes_t.html


Create credential store

Start the Domino server

Run the following commands at the Domino console to create the credential store application that is used by Verse On-Premises.

• The first command creates a document encryption key to be used for authentication that is called credstore

• The second command creates the application credstore.nsf to store the encryption key

keymgmt create nek credstore

keymgmt create credstore credstore

Note: If the mail servers are in a cluster, do this step on one server in the cluster only.

34


Prepare mail files

From IBM Domino Designer, open the VOPDesign.nsf file that you copied in step 12.

Copy the following views from VOPDesign.nsf to your mail template on the server or to individual mail files:

($VerseLookup)($VerseTrashLookup)

Hinweise:Dieser Schritt ist nicht notwendig wennbereits das FP9 Mailtemplate verwendetwird.

35


Prepare mail files (cont.)

Run the design task on the server to distribute the design elements. From the server console, enter: load design

Run the updall task to build indexes on the mail files. From the server console, enter: load updall

Confirm that the mail files have full-text indexes that are enabled and created.

Give the Domino server Designer access to the mail files.

36

Installing IBM Verse On-PremisesPart 2: IBM Connections Integration


About this task

Integrating with Connections is optional. This integration leverages Connections profiles to enable business cards, photos, and electronic email signatures in Verse. It also enables Verse users to attach and download Connections files when composing and reading messages.

Requirements:

• IBM Connections 5.5 CR1 or later.

• The user email address in the Domino Person document Internet Address field must match the email address in the Connections profile. To retrieve information such as a photo, the Domino user address is encoded and a call is made to Connections. The Domino encoded address must match the Connections encoded address to retrieve the information.

38


Upgrading older profiles

If you upgrade from an IBM Connections release that is earlier than 5.5, complete this procedure in Connections 5.5 to upgrade older profiles so that they work in IBM Verse.

Upgrading older profiles on Linux

Upgrading older profiles on Windows

Note: Our server was installed with 5.5. We DO NOT need to perform this procedure.

39

https://www.ibm.com/support/knowledgecenter/en/SS4RQV_1.0.0/admin/topics/vop_upgrading_older_profiles_linux.html

https://www.ibm.com/support/knowledgecenter/en/SS4RQV_1.0.0/admin/topics/vop_upgrading_older_profiles_windows.html


Configure IBM HTTP Server

Configure the IBM HTTP Server that is used to access Connections.

See the Configuring IBM HTTP Server section of the IBM Connections 5.5 documentation.

Note: Depending on whether the IBM HTTP server was installed and configured during Connections installation, some of the these tasks might already have been performed. Configure IBM HTTP Server to manage web requests to IBM Connections by following these steps.

40

http://www.ibm.com/support/knowledgecenter/en/SSYGQH_5.5.0/admin/install/c_add_ihs_over.html


Enable SSL

Enable SSL on the IBM HTTP Server. See the topic Configuring IBM HTTP Server for an encrypted connection in the IBM Connections 5.5 documentation.

Note: To support an encrypted connection, create a self-signed certificate and then configure IBM HTTP Server for encrypted connection traffic. If you use this certificate in production, users might receive a warning messages from their browsers. In a typical production deployment, you would use a certificate from a trusted certificate authority.

41

http://www.ibm.com/support/knowledgecenter/en/SSYGQH_5.5.0/admin/install/t_configure_ihs.html


Enable single sign-on for Domino

Enable single sign-on for Domino. See the topic Enabling single sign-on for Domino in the IBM Connections 5.5 product documentation.

Single sign-on enables users to log into one IBM Connections application and switch to other applications without needing to authenticate again.

Note: Before you can enable SSO, verify that you can access the installed IBM Connections applications from a web browser.

• Start your Domino server.

• Ensure that you have a user ID with administrative access to the Domino server.

42

http://www.ibm.com/support/knowledgecenter/SSYGQH_5.5.0/admin/secure/t_secure_domino.html


Update httpd.conf (cont.)

Edit the IBM HTTP Server httpd.conf file. This file is typically in the <IHS_ROOT>/confdirectory.

This step enables cross-origin resource sharing (CORS) so that Verse can access IBM Connections APIs.

─ Make a backup copy of httpd.conf. (Not needed on our lab server)

─ Remove any comment symbols (#) from the following lines (if needed): LoadModule headers_module modules/mod_headers.so

LoadModule rewrite_module modules/mod_rewrite.so

43


Update httpd.conf

Copy the integration data to the httpd.conf behind SSLEnable

Edit this line:

• Replace vop_server_hostname with the host name portion of the Verse On-Premises mail server name.

• Replace domain_name with the domain of the Verse On Premises mail server.

Escape with a backslash (\) any periods in the names. Add a separate line for each of your mail servers.

44


Update httpd.conf (cont.)

Locate the appropriate <directory>, <location> , <files> or <virtualhost> block.

On our lab server we find the <virtualhost> block and replace the text for:

SetEnvIf Origin "^http(s)://(-+\.)?(ibmcollabcloud\.com)$" origin_is=$0

to the following:

SetEnvIf Origin "^http(s)://yourserver]\.)?(ibmcollabcloud\.com)$" origin_is=$0

Note: This should be set to the domain you are allowing to make the cross-origin requests. You can have several mail servers by separating them with new lines.

Security note: This could be set to allow any host to make remote calls, however that will allow any host to access IBM Connections programmatically and is NOT advised.

45


Update httpd.conf - Restart HTTP server

4. Restart the IBM HTTP Server service on the Connections server

46


Enable Verse users to connect to Connections server

To enable Verse users to connect to the Connections server, add the following line to the notes.ini file in the Domino data directory on the Domino server:

VOP_LLN2_BSSUIServer_URL=https://wwts-vop-c[xx].ibmcollabcloud.com

Note: If the setting is the last line in the notes.ini file, press ENTER after the line.

Note: Do not forget to restart the Domino server

47


Confirm that Verse On-Premises works with Connections integration

To confirm that Verse On-Premises works, have a user with a mail file on the server complete these steps:

Before using Verse, you may have to except the certificate into the browser from Connections.From a browser, go to https://wwts-vop-c[xx].ibmcollabcloud.com

From a browser, go to https://wwts-vop-d[xx].ibmcollabcloud.com/verse

Log in as

a) User: Frank Adams

b) Password: passw0rd

Verify that you see the Verse user interface together with images in the “Important to me” bar

48

Extra: Tips


Password Options when creating new uses

Make sure you click on Password Options to set the checkmark at Set internet password. Otherwise user will be able to log into Connections.

50

Extra: Using IBM Verse On-Premises


See mail from people important to you

52


Turn a suggested person into one of your favorites


Pin people of interest to stay of aware of what's new


Mark mail as Needs Action


Business card


Manage the items that need follow up

57


Change profile picture


Add signature to mail messages


Verse without an internet connection


Folders to keep it organized


How do I find what I’m looking for?


Refine your search


Track who owes you a response and when


See all messages marked Waiting For


Happiness is a clean inbox

ibm verse im eigenen rechenzentrum · ibm verse on-premises cloud & mobile first…aber nicht...

Documents