Lotus Notes and Domino Support of Title V of the Italian Personal Data Protection Code

http://www.interlex.it/testi/dlg03196.htm

http://www.garanteprivacy.it/garante/doc.jsp?ID=1030925

It is the customer's sole responsibility to obtain advice of competent legal counsel as to the identification and interpretation of relevant sections of the Code that may affect the customer's business, and any actions the customer may need to take to comply with such laws. IBM does not provide legal advice.

Notes/Domino 6.0.5 and 6.5.4 Features
Custom Password Policies

The ability to implement Notes.id password restrictions on a policy basis is being added to Lotus Domino. The new feature is designed to help administrators prevent passwords from being trivial or predictable.

Through a custom password policy, administrators can restrict or prohibit the use of the following in user passwords:

- user name as part of the password
- repeating characters
- use of special characters, such as punctuation

While custom password policies can be applied to all users, it should be noted that a requirement to change password on first login can only apply to new users who have had the policy applied to them at registration. Users who are already registered will not be required to change their passwords when they log in after the policy has been applied.

Note: Even if a customized password policy is established, users must still enable "Check passwords on Notes IDs" in the Server document in order for Domino to check password history.

Set up a customized password policy:

1. In the Configuration tab of the Domino Administrator client, click Create Policy.
2. Set up the policy as required.
3. Click New next to Security to add security settings to the policy.
4. On the Password Management tab, under Password Management Options, select "Use Custom Policy."
5. On the Custom Password Policy tab, configure the custom options as shown in the table below. (Note: An enhancement request to improve the setting descriptions has been submitted to Quality Engineering as SPR# CSMH697SPS.)
   

   Setting	Specify
   Change password on first use	Enable this to require users to change their passwords after the first time they log in using the Notes client
   Allow common name in password	Enable this to allow users to incorporate their name in their passwords. For example: John232Doe
   Password length minimum	The minimum number of characters that users can have in their passwords
   Password length maximum	The maximum number of characters that users can have in their passwords
   Password quality minimum	The minimum password quality value that users can have for their passwords
   Minimum number of alphabetic characters allowed	The minimum number of alphabetic characters that users are allowed to have in their passwords
   Minimum number of upper case characters allowed	The minimum number of uppercase characters that users are allowed to have in their passwords
   Minimum number of lower case characters allowed	The minimum number of lowercase characters that users are allowed to have in their passwords
   Minimum number of numeric characters allowed	The minimum number of numeric characters that users are allowed to have in their passwords
   Minimum number of special characters allowed	The minimum number of special characters, namely punctuation, that users are allowed to have in their passwords
   Maximum number of repeated characters allowed	The maximum number of repeated characters, of any kind, that are allowed in user passwords.
   Minimum number of unique characters allowed	The minimum number of characters that appear only once in a password
   Password may not begin with	The type of characters with which users cannot begin their passwords
   Password may not end with	The type of characters with which users cannot end their passwords

7. Assign the policy and save it.

Note: While Notes and Domino offer a set of features in support of certain provisions of the Code, it is the responsibility of each enterprise to determine the relevance of the Code and take the necessary steps -- with IBM Lotus products, with partner products, with custom applications or a combination -- to comply.