ID102 Best Practices for Upgrading IBM Lotus Notes and Domino Servers to 8.5.

x Real World Analysis

John Paganetti | Senior Engineer | IBM Jon Champlin | Senior Engineer | IBM

Note:
Information regarding potential future products is intended to outline our general product direction and it should not be relied on in making a purchasing decision. The information mentioned regarding potential future products is not a commitment, promise, or legal obligation to deliver any material, code or functionality. Information about potential future products may not be incorporated into any contract. The development, release, and timing of any future features or functionality described for our products remains at our sole discretion.

2011 IBM Corporation

Session abstract:

Get a head start on your upgrade plans by listening to the development team share their experiences when upgrading servers in their production domain to Lotus Domino 8.5.2. We'll cover general best practices when upgrading from Lotus Notes and Domino Release 5.x, 6.x, 7.x or 8.x to Release 8.5.2. We'll discuss the upgrade processes utilized by each and share lessons learned by all along the way. We'll also riddle the presentation with FAQs we've come across concerning upgrading and finally, we'll discuss the enablement of some of the new exciting features in Lotus Notes and Domino release 8.5.x (e.g. DAOS, IDVault, & Managed Mail Replicas) sharing lessons learned to help you expedite your own deployment plans.

Past Lotusphere Presentations

Lotusphere 2006 ID104 Best Practices Upgrading to IBM Lotus Notes & Domino 7 in your Production Environment Lotusphere 2008 ID108 Best Practices for Deploying IBM Lotus Notes & Domino 8 Lotusphere 2009 ID202 Release the Power Again! Best Practices Deploying New Features in Notes/Domino 8.5 Lotusphere 2010 ID615 Best Practices for Upgrading IBM Lotus Notes and Domino Servers to 8.5.1

http://www-10.lotus.com/ldd/dominowiki.nsf/dx/UC1_TableofContents.htm
5

Agenda

Before You Begin Best Practices Upgrading to Release 8.5.2 Small & Medium Businesses Enterprise Best Practices Upgrading to ODS51 Release 8.5.2 Deployment Experiences

Before You Begin

What's New in Lotus Notes 8.5.x Client? What's New in Lotus Notes 8.5, 8.5.1 and 8.5.2? Technical Resources for Lotus Notes, Domino and iNotes 8.5.2 Supported configurations for Notes/Domino 8.0.x and 8.5.x Table of new features and requirements for Notes 8.5.x Release 8.5.x Readiness Lotus Notes Companion Products 3rd Party Products Other Considerations

What's New in Lotus Notes 8.5.x client?

http://www-01.ibm.com/software/lotus/products/notes/whatsnewinnotes.html

What's New in Lotus Notes 8.5, 8.5.1 and 8.5.2?

http://publib.boulder.ibm.com/infocenter/domhelp/v8r0/index.jsp? topic=/com.ibm.notes85.help.doc/fram_what_new_85_r.html
9

Technical Resources for Lotus Notes, Domino and iNotes 8.5.2

http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Technical_Resources_for_Lotus_Notes_Domino_and_iNotes_8.5.2

10

Technical Resources for Lotus Notes, Domino and iNotes 8.5.2

http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Technical_Resources_for_Lotus_Notes_Domino_and_iNotes_8.5.2

11

Technical Resources for Lotus Notes, Domino and iNotes 8.5.2

http://www-10.lotus.com/ldd/dominowiki.nsf/dx/Technical_Resources_for_Lotus_Notes_Domino_and_iNotes_8.5.2
12

Supported configurations for Notes/Domino 8.0.x and 8.5.x

http://www-01.ibm.com/support/docview.wss?uid=swg21358406
13

Supported configurations for Notes/Domino 8.0.x and 8.5.x

http://www-01.ibm.com/support/docview.wss?uid=swg21358406
14

Table of new features and requirements for Notes 8.5.x

http://www-10.lotus.com/ldd/dominowiki.nsf/dx/05192009011756PMJFRN8P.htm

15

Table of new features and requirements for Notes 8.5.x

http://www-10.lotus.com/ldd/dominowiki.nsf/dx/05192009011756PMJFRN8P.htm

16

Release 8.5.2 Readiness Compatibility

Lotus Notes Companion Products

IBM IBM IBM IBM

Lotus Lotus Lotus Lotus

Notes Traveler - 8.5.2 Sametime - 8.5.1.1 Quickr - Not Supported on Domino 8.5.2 Notes Connections Plug-in

Third Party Products

Backup, Anti-Virus, SPAM, Monitoring... Blackberry Enterprise Server - 5.0.2

BlackBerry Enterprise Server for IBM Lotus Domino Compatibility Matrix http://us.blackberry.com/support/software/server_domino_ver_oct_22_10.pdf

17

Other Considerations

Test. Test and lastly Test Mission Critical Applications If you customize, update the 8.5.2 templates with your changes ahead of time Ensure integrity of recent backups
Verify recent backups taken and retrievable Save copy of notes.ini and server id file

New Hardware? Move to new hardware Before or After the upgrade, not recommended at the same time

18

Best Practice Upgrading to Release 8.5.2

Small & Medium Businesses

# of Users 10,000 or less # of Servers 50 or less

19

Real World Upgrade Small Business

Notes & Domino Business Partner had their Domino Admin/Consultant leave the company on short notice Domino Developer was tasked with upgrading Domino for one of their existing customers Referred the Domino Developer to read through the Upgrade Cookbook in the Domino Wiki and follow-up with any questions

20

Real World Upgrade Small Business

Upgrade Eight Domino Servers to Release 8.5.2 6 Domino Servers were running Release 7.0.4 2 Domino Servers were running Release 6.5.6 Approximately 550 Users geographically dispersed Locations in India, Germany, Canada and US Notes Clients running 7.0.2 or 7.0.4 and a few still on 6.5x XP, Vista and Win7 At the end of the day, [or night, as we'll do this off hours], what I want to have is my administration server, then subsequently all my other servers, running 8.5.2 and the 8.5.2 address book and admin4.nsf designs Notes Clients deployed using Wolcott Automated Deployment Toolkit (ADT)

21

Real World Upgrade Small Business

Suggest: Upgrade Admin Server of your Domino Directory to 8.5.2 at off hours on a Friday Evening and let the design of names.nsf and admin4.nsf replicate out freely After upgrading the Admin Server I would first run design task and then updall task and then restart the server Result: Upgrade of Admin server went well [last Wednesday night], and NAB design is replicated and running across domain [but ODS to stay at 43 for a while] Upgrading second server tonight after hours and preparing upgrade instructions to pass along to remote locations [Canada, Germany, India] for their use in doing the upgrades at the appropriate time

22

Domino Server Upgrade Checklist

Backup Domino Server Preparation tasks Evening before upgrade if possible

Fixup -j on all databases Make your server unavailable for your users >set conf SERVER_RESTRICTED=2 >drop all Clear all administration requests Replicate admin4.nsf with US Admin Server > tell adminp process all Replicate admin4.nsf with US Admin Server >tell adminp quit

23

Real World Upgrade Small Business Domino Server Upgrade Checklist (continued)
Ensure that all mail has been transferred or delivered

>tell router show Shutdown Domino Server Modify Lotus Domino Service to start manually instead of automatically Restart OS/Reboot to clear memory segments Install R8.5.2 code (lotus_domino852_w32_en.exe) Screen shots of all install steps and selections

24

Real World Upgrade Small Business Domino Server Upgrade Checklist (continued)
Modify notes.ini

SERVER_UPGRADE_NO_DIRECDTORY_REDESIGN=1 SetupLeaveServerTasks=1 Will keep Domino Setup from changing the ServerTasks lines back to their defaults (e.g.. ServerTasksAt1=Catalog, Design) thus keeping the Design Task out that was previous removed (i.e. ServerTasksAt1=Catalog) CREATE_R85_DATABASES=1 CREATE_R85_LOG=1 Start Domino Server and let Domino 8.5.2 Setup processing run to update system databases Verify that there are no errors or problems. Be patient, upgrading of system databases can take a while Shutdown Domino server

25

CREATE_R85_LOGS=1

Transactional Logging notes.ini setting ONLY recommended if you are having I/O issues with the Trans Logs Long Held Locks and Semaphore Timeouts everywhere Bring Domino Server down cleanly Set CREATE_R85_LOGS=1 in notes.ini Delete existing Transactional Logs Restart Server (Most likely need to do this twice) Reduces unnecessary reads on certain platforms If it ain't broke don't fix it! Ask for Steve Watts in the Meet the Developer's Lab

26

Real World Upgrade Small Business Domino Server Upgrade Checklist (continued)
Prepare New Domino Directory and Administration Databases

nfixup.exe -j names.nsf nfixup.exe -j admin4.nsf nupdall.exe -R names.nsf nupdall.exe -R names.nsf Re-enable Domino Server to run automatically as a service on OS Recycle the server OS and confirm that Domino starts automatically Re-enable user connectivity >set conf SERVER_RESTRICTED=0

27

Real World Upgrade Small Business Domino Server Upgrade Checklist (continued)
Test Server

Client connects to server File database open on server Send/receive Notes Mail Send/receive Internet Mail Name lookup is working Stop and start server See that server loads scheduled tasks

Infrastructure upgrades so simple and rock-solid that even a developer can do it!

28

Notes & Domino Development Production Domains

Two Domains (Iris & Notes) ~700 Users ~110 Servers

29

Notes & Domino Development Production Domains

Domino Versions Release 6.5.6FP3 Release 7.0.4FP2 Release 8.0.2FP6 Release 8.5.1FP5 Release 8.5.2FP1 & FP2 Beta Release 8.5.3 Beta

30

Notes & Domino Development Production Domains

Operating Systems Windows Windows 2003 R2 Standard Edition Windows Server 2003 R2 Enterprise Edition SP2 & x64 Edition SP2 Windows Server 2008 Enterprise SP2 & R2 Enterprise SP1 UNIX AIX 5.3, 6.1 & 7.1 Linux SuSE Linux Enterprise Server 10 & 11 Red Hat Enterprise Linux Server 5.5 & 6 Solaris 9 & 10 IBM i (aka AS400, iSeries, System I) V5R4 & V6R1

31

Notes & Domino Development Production Domains

Mail Servers Clustered (Single & Partitioned), DAOS & Non-DAOS Application Servers Clustered (Single & Partitioned), DAOS & Non-DAOS Directory Servers Clustered, Extended Directory Catalogs SMTP Servers ID Vault Servers Clustered ODS (On-Disk-Structure) Versions R5(41), R6(43), R8(48), and R85(51)

32

Notes & Domino Development Production Domains

Admin Servers of Domino Directories are kept at most recent Domino Version that is being run in the Domain, presently 8.5.3 Beta

Domino Directory Design is kept at most recent Template Version available for most recent Domino Version being run in the Domain, presently Template Version is 8.5.3 (12/16/2010) Domino Directory Design replicates freely to all Domino Servers in both Domains (Includes servers running down-level versions of Domino)

33

Typical daily Domino Server Upgrade

Shutdown the Domino Server to be upgraded cleanly Install Release 8.5.x of Domino Run multiple Design Tasks via batch file utilizing Indirect Files Refreshes design of databases with inheritance enabled Run Design Task against entire server Remove all templates (*.ntf) from the Domino Data Directory Run multiple Updall Tasks via batch file utilizing Indirect Files Rebuilds existing views with design or collation changes Restart the Domino Server Proceed to Next server

34

Sample Indirect Files utilized on a Mail Server Created\located in the Domino Data Directory

mail1.ind mail\aical.nsf mail\bical.nsf mail\cical.nsf mail\dical.nsf mail2.ind mail\besuser1.nsf mail\besuser2.nsf mail\besuser3.nsf mail\besuser4.nsf mail3.ind .......

35

Run Multiple Design Tasks via batch file utilizing Indirect Files

designmail.cmd start "/Iris Design mail8.ind" ndesign.exe -i mail8.ind choice /T 3 /D Y start "/Iris Design mail7.ind" ndesign.exe -i mail7.ind choice /T 3 /D Y start "/Iris Design mail6.ind" ndesign.exe -i mail6.ind choice /T 3 /D Y start "/Iris Design mail5.ind" ndesign.exe -i mail5.ind choice /T 3 /D Y start "/Iris Design mail4.ind" ndesign.exe -i mail4.ind choice /T 3 /D Y start "/Iris Design mail3.ind" ndesign.exe -i mail3.ind choice /T 3 /D Y start "/Iris Design mail2.ind" ndesign.exe -i mail2.ind choice /T 3 /D Y start "/Iris Design mail1.ind" ndesign.exe -i mail1.ind

36

Run Multiple Updall Tasks via batch file utilizing Indirect Files

updallmail.cmd start "/Iris Updall mail8.ind" nupdall.exe mail8.ind choice /T 3 /D Y start "/Iris Updall mail7.ind" nupdall.exe mail7.ind choice /T 3 /D Y start "/Iris Updall mail6.ind" nupdall.exe mail6.ind choice /T 3 /D Y start "/Iris Updall mail5.ind" nupdall.exe mail5.ind choice /T 3 /D Y start "/Iris Updall mail4.ind" nupdall.exe mail4.ind choice /T 3 /D Y start "/Iris Updall mail3.ind" nupdall.exe mail3.ind choice /T 3 /D Y start "/Iris Updall mail2.ind" nupdall.exe mail2.ind choice /T 3 /D Y start "/Iris Updall mail1.ind" nupdall.exe mail1.ind

37

Notes & Domino Development Production Domains upgrade their Notes Clients utilizing Smart Upgrade

Smart Upgrade Enhancements in 8.5.2

Once Smart Upgrade initiated, if after 1 minute the Notes Client fails to shutdown, an NSD -kill will be launched. (Windows only) Once Notes Clients are at Release 8.5.2, code has been added so Smart Upgrade can be configured to run an install that does not update the Notes Core Version String and if successful does not Prompt the end user again to perform the same upgrade a day later

ID202 Deploy in Style: Make your IBM Lotus Notes Client Perform
Jeff Mitchell | Software Engineer | IBM Mehjabin Kapasi | Software Engineer | IBM

01/31/2011 5:00PM-6:00PM SW Mockingbird

2011 IBM Corporation

Notes & Domino Development Production Domains Managed Mail Replicas (MMRs) deployed via Policy in 8.5.2

Some confusion for old workspace chicklet users - If they double-click a tile with a specific server specified, it will still open the local MMR. Work around is to use CTRL-O and Open Server and Database directly

IBM Domino Administrator Client Files Panel Space Used column removed in Release 8.5 is back in 8.5.2

42

Lotus Notes ID Vault

User entry in IDVault password digest not being updated properly

Problem: After changing their passwords, certain users receiving You have a different password on another copy of your ID file and you must change the password on this copy to match Reason: Users who are a combination of two or more of - Roaming, iNotes, Traveler, BES and are vaulted with password checking turned on - are eventually getting the following error after a couple of months of general use. Work around: Clear the password digest in user's person record Solution: Upgrade Notes Clients and Domino Servers (Traveler & BES included) to Release 8.5.2FP1 SPR # RPAI88DGMY

44

ID105 DAOS Deployment and Best Practices

Patrick Mancuso | Senior Software Engineer | IBM Gary Rheaume | Senior Software Engineer | IBM

02/01/2011 3:30PM-4:30PM DL S Hemisphere III

2011 IBM Corporation

Upgrading the Enterprise

46

Best Practice Upgrading to Release 8.5.2

Enterprise Businesses

# of Users 10,000 or greater # of Servers 50 or greater

47

Real World Enterprise Company

Large Global Financial Company 4 Main Regional Domino Domains (NA, LATAM, EMEA and APAC), ~320K Notes Users ~1800 Domino Servers Windows 2003 migrating to Windows 2008 AIX 6.x 64 Bit Kernel running 32 Bit Domino ~2000 Users per Domino Mail Partition Group Email CoE Manager read through Upgrade Cookbook in Domino Wiki and generated Standard Procedure for Domino 8.5.x Upgrade

48

Real World Enterprise Company Standard Procedure for Domino 8.5.x Upgrade

Index 1) Objective
2) Background Information 3) Scope 4) Evaluate OS and Hardware requirements for 8.5.x 5) How to download the Company Certified version of 8.5.x? 6) Coexistence Considerations for 8.5.x 7) Recommendations for Initial Upgrades 8) Overall Upgrade Plan on General Terms 9) Standard Procedure for Domino 8.5.x Upgrade 10) Company Standards to be applied after the 8.5.x Upgrade 1) Company Standards for SMTP Servers 11) Using Domino Configuration Tuner to optimize your Domino Environment 12) Standards for New 8.5.x Domino Server Features 13) Know issues 14) Additional Information

49

Real World - Enterprise Company 2) Background Information

Reviewed the certification strategy and decided to put 8.5.1 certification on hold, because on 24th of August IBM Made the Domino 8.5.2 version available for download. The Domino 8.5.2 has been considered to be more established and firm. North American Collaboration Team finished the certification work

While doing the test almost all the functionality of Lotus Notes and Domino has been tested on the 8.5.2 enterprise server in a thorough way.

Important Note: Company have only certified the Domino 8.5.x 32-Bit version. There will be a separate initiative to test/certify Domino 8.5.x 64-Bit

50

Real World - Enterprise Company 4) Evaluate OS and Hardware requirements for 8.5.x
........

Overview of all the core applications running on the 8.5.x environment

RIM's Blackberry Server (BES) supports 8.5.x Link EMC SourceOne 6.5 supports 8.5.x Link Permessa supported version for Domino 8.5.x Link ZipMail/DB Server supported version for Domino 8.5.x Link GSX Monitor v9.2 ++ supports 8.5.x Link ScanMail supported version for Domino 8.5.x Link LaneFax supported version for Domino 8.5.x Link

Important Note: Regional Domino Administrators are requested to investigate the compatibility of vender-supplied applications and companion products with Domino 8.5.x

51

Real World Enterprise "Company" 6) Coexistence Considerations for 8.5.x

Clustered Servers

Upgrading your clustered servers at different times is supported, so you can have a mixed 6.5.x, 7.x and 8.x cluster during the coexistence period of the project Keep in mind however that the cluster replication task will not restrict the replication of any design elements. The Domino 8 design is backward compatible with Notes & Domino 6.5.x. Other databases may, however, cause issues on earlier Domino Servers and Notes clients. If you want to keep design elements at the same version of the server, do not put Domino 6.5.x or 7.0 in the same cluster with the Domino 8 servers

52

Real World Enterprise "Company" 7) Recommendations for Initial Upgrades

The Group Email CoE recommends choosing a single or small number of servers for the first step of the process. The server(s) should be chosen based on the tradeoff between representative of your production environment and also involving less business risk, if possible This allows you to ensure configuration and tuning of the upgraded environment is optimal for the broader deployment. Criteria for success should be set for this and each subsequent step. It is recommended that one of the criteria be delta change in key parameters you monitor routinely, but especially these parameters should include CPU, virtual memory usage, and storage operations (reads and writes). Compare CPU, virtual memory and storage operations for a period of several days before and after upgrade and investigate significant differences unaccounted for by component changes in the upgrade.

53

Real World Enterprise "Company" 8) Overall Upgrade Plan on General Terms

As per IBM recommendations this is the general order for the 8.5x upgrade

Upgrade Administrator clients Upgrade Administrator server of Domino Directory Replicate Domino Directory to other servers Upgrade Hub servers Upgrade Mail servers Upgrade SMTP servers Upgrade Application/Web servers Upgrade 3rd party/companion product servers Upgrade Notes clients Replace design of client mail files Upgrade applications

54

Real World Enterprise "Company" 9) Standard Procedure for Domino 8.5.x Upgrade

Before you start, make sure the target Domino Server is running the latest NAB and Admin4 8.5.x Company designs 1. Before you shutdown the Domino Server please implement the following notes.ini settings using the individual Server Configuration Document (Notes.ini Tab) in the NAB:

SERVER_UPGRADE_NO_DIRECTORY_REDESIGN=1 SETUPLEAVESERVERTASKS=1 NLCACHE_SIZE=67108864 VIEW_REBUILD_DIR=<your path here e.g. D:\ViewTemp\> UPDATE_NO_FULLTEXT=1 DISABLE_BCC_GROUP_EXPANSION=1 ENFORCE_PERSONAL_AGENTS=1 DEBUG_SCR_DISABLED=1 SECURE_DISABLE_FULLADMIN=1

55

Real World Enterprise "Company" 9) Standard Procedure for Domino 8.5.x Upgrade (cont)

2. As per Domino Configuration Tuner Recommendations please add the following notes.ini settings

SERVER_NAME_LOOKUP_NO_UPDATE=1 CONSOLE_LOG_ENABLED=1 CONSOLE_LOG_MAX_K BYTES=204800 DEBUG_THREADID=1 DEBUG_SHOW_TIMEOUT=1 DEBUG_CAPTURE_TIMEOUT=1 GROUP_CACHE_SIZE=15360 NSF_BACKUP_MEMORY_CONSTRAINED and NSF_BACKUP_MEMORY_LIMIT

56

Real World Enterprise "Company" 9) Standard Procedure for Domino 8.5.x Upgrade (cont)

3. Remove the following notes.ini parameters Because Domino 8 is scaled to hangle more users concurrently, you may be able to remove or comment out any stabilizing notes.ini parameters, such as the following

SERVER_SESSION_TIMEOUT=1 SERVER_MAXSESSIONS SERVER_MAXUSER SERVER_FAST_RESTART & SERVER_FAST_RESTART_INSTANCE

4) Also remove the following notes.ini parameters which became obsolete in 8.5.x

CLUSTER_NAME_CACHE_SIZE=xxx DEBUG_ENABLE_UPDATE_FIX=32767 NLCACHE_VERSION=4

57

Real World Enterprise "Company" 9) Standard Procedure for Domino 8.5.x Upgrade (cont)

5. Shutdown the Domino Server

Enable the maintenance status of GSX or disable individual server monitoring while shutting down and upgrading the server. (To avoid server alerts) Stop the router and SMTP tasks Shut down the Domino Server cleanly If server won't shut down cleanly, NSD -kill, restart, then immediately shut down cleanly If running Domino as a service on Windows change the startup type to Manual Disable the cron job on UNIX platforms for automatic restart and cleanup of shared memory segments Make a backup of the notes.ini, for UNIX platforms it is applicable for all DPARS

6. Upgrade the Domino Server to 8.5.2 (installing the server code)

Screen shots for AIX upgrade Screen shots for Windows upgrade

58

Real World Enterprise "Company" 9) Standard Procedure for Domino 8.5.x Upgrade (cont)

7. After the server code installation manually remove the IBM native Template Filees from the Domino Directory

admin4.ntf mail85.ntf pernames.ntf perweb50.ntf webadmin.ntf mailjrn.ntf If present from previous installations: iNotes5.ntf, iNotes6.ntf, iNotes60.ntf mail5.ntf, mail6.ntf, mail6ex.ntf , mail7.ntf, mail7ex.ntf mail8.ntf, mail8ex.ntf

59

Real World Enterprise "Company" 9) Standard Procedure for Domino 8.5.x Upgrade (cont)

8. Run UPDALL / FIXUP tasks before the 8.5.x Server launch

Before launching the 8.5.x Server for the first time, IBM recommends to run the offline maintenance tasks below again for the NAB and Admin4 databases: Rebuilds existing views because of design or collation changes [n]updall names.nsf -R Run fixup on system databases [n]fixup names.nsf -J -V (or -F -V) [n]fixup admin4.nsf -J -V (or -F -V) Windows After the off-line maintenance tasks complete, you can start-up the Domino 8.5.x server for the first time and check the logs for any errors/warnings AIX or UNIX platform Start the Domino DPAR's using the server ID, Log out of the Root (or sudo equivalent account) Log in with the server account, Start the Domino server, Repeat for other DPARs on the LPAR For Windows servers, reset your Domino server as a Windows service UNIX should reset cron job (It's a time based job scheduler)
60

9. Start the Domino server

Real World Enterprise "Company" 9) Standard Procedure for Domino 8.5.x Upgrade (cont)

10.Company Standards to be applied after the 8.5.x Upgrade After the upgrade is recommended that you review and apply (if not already) the Company standards for Domino Servers below:

Disable any unnecessary Ports (i.e. HTTP/HTTPS, LDAP, IMAP, POP, SMTP Inbound, DIIOP, Remote Debug Manager, ICM, etc) via Ports/Internet Ports tab. Security Settings : make sure Allow anonymous Notes connections is set to No and Check passwords on Notes Ids is set to Enable Increase security around HTTP, use in Deny Groups should not be allowed to connect to Domino HTTP servers. Go to NAB Server Document (per individual server basis) Ports\ Internet Ports\ Web Tab and change Enforce server access settings to Yes Make sure the Store Admin Process log entries when status of no change is recorded field is set to No in Server Tasks\ Administration Process tab. Make sure the Allow HTTP clients to browse databases field is set to No in Ineternet Protocols\HTTP tab.

61

Real World Enterprise "Company" 9) Standard Procedure for Domino 8.5.x Upgrade (cont)

10.Company Standards to be applied after the 8.5.x Upgrade

Catalog.nsf: Restrict end-user access to the catalog.nsf database. Change the Default entry in ACL to No Access. The catalog.nsf can reveal a lot of sensitive information (i.e. MailFile CLSs) and should be restricted to Administrator access Enable TCPIP Port Encryption in you Domino Server; check the Compressing network data on a server port document in Lotus Domino Administrator 8.5.x Help database for more information. Make sure you enabled the Compress document data database property on all MAILFILES so it reduces the size of all document bodies (non-summary item data) in the database Compressing non-summary data reduces the size on disk of all rich text elements in documents, and savings can be significant, especially when a database contains lengthy documents including large graphic images. Consider enabling 'Compress database design' database property to reduce the size of all design elements Compressing design elements, especially those including rich text and graphics, reduces their size on disk, and savings can be significant

62

Domino 8.5.2 prohibits use of ShortName field in Group documents

Problem: You have nested groups contained within a database ACL, after upgrading to Domino 8.5.2, users of the nested group no longer have access to the database. Reason: All Groups with ShortName fields are being ignored Solution: The technote below provides script to help you identify which Group documents have a ShortName field so you can take further action and remove the ShortName field TECHNOTE # 1447661 SPR # SODY89JH84

63

Domino 8.5.1 & 8.5.2 performance degradation on person rename and delete requests in Adminp

Problem: After an upgrade to 8.51 and above, Domino Administrators may notice it takes a very long time to complete operations such as Adminp "Delete person" and "Rename Person". Reason: Adminp is searching for attributes that do not currently exist in a View in the Domino Directory Workaround: Full Text Index the Domino Directory. This Full Text Index is just needed on the Administration Server of the Domino Directory TECHNOTE # - In progress SPR # JXBI8AUA6X

64

IBM Global Services Internal Deployment

IBM Global Services

Client Deployment

480,000+ Lotus Notes clients deployed 279,000+ running Notes 8.5x (mostly 8.5.1) 157,000+ running Notes 8.0x 44,000+ running Notes 7.0x Breakdown by Operating System ~1,000 MAC ~16,000 Linux ~463,000 Windows with 99% XP SP3 some Vista some WIN7 Standard vs. Basic Majority Standard but Clients with <1GB of memory using the Basic client IBM Lotus Sametime ~200,000 using embedded Sametime Rest using stand-alone Sametime or other clients

IBM Global Services upgrades Notes Clients using IBM Standard Software Installer (ISSI)

IBM Global Services

Server Deployment

36 Hosting sites worldwide Contain Mail and Application servers Mail Environment 81 Mail Domains (one per country)

~600,000 Lotus Notes IDs Lotus Notes & SMTP mail

65M inbound SMTP messages/day

Mail file quota determined by Geographies and Business Units

Average mail file size is 325MB

Users encouraged to use local mail replica and local Directory Catalog for addressing

IBM Global Services

Mail Environment (continued) ~350 mail server instances deployed

58% zLinux, 41% pSeries and 1% iSeries

All mail servers are clustered

Clustered in 2:1 primary to failover ratio Reduces effect of server outages Allows for greater flexibility for hardware/software upgrades and maintenance

Network and LZ1 compression enabled Full backups occur three times a week during offshift hours

IBM Global Services

Application Environment 145,000+ applications in the environment

80,000+ custom applications Rest built off standard templates (Teamroom, Document Library, Discussion, etc.) Databases based on standard templates can be created instantly by IBM tool Database-O-Matic

One application domain per delivery center ~520 Application server instances

Running Domino 8.5.1

IBM Global Services

Deployment Strategy

Early Deployment target servers Post-GA Domino stability milestones must be met before general deployment Ensure all prerequisites are understood with plan to ensure they are in place Sequence of upgrades: Mail servers and cluster mates Infrastructure servers (ie. Mail routing hubs) Application Servers Domino 8.5.1 Deployment Tested on 10 mail servers (20,000 user mail files) running on pSeries Provided feedback to development on features before GA release

64-bit Domino ID Vault Domino Attachment and Object Service (DAOS)

IBM Global Services

Plans for 2011*

Client Finish up deployment of Notes 8.5.1 to the environment Slip-stream in Notes 8.5.2 (some users already using) and Notes 8.5.3 as available Begin early adopter program for Notes Next Server Project Green

Consolidate server images to virtualized mainframes to save floor space and energy consumption

64-bit Domino deployment Deploy Domino 8.5.2/8.5.3 as available Transition to Lotus Protector for Anti-Spam Upgrade to new version of Anti-Virus software

These plans are subject to change by IBM Global Services at any time

Sneak Peek 8.5.3 Purge Interval Replication Control - PIRC

New replication setting designed to prevent old documents which may have been deleted from replicating back into a database after their deletion stubs have been purged. Most common case occurs when an old version of a NAB is brought back online after several months or years. Previously deleted person documents, group documents, server documents, and other design elements can replicate back into the environment because the deletion stubs have already been purged. When enabled, PIRC prevents these documents from replicating back into the environment.

Sneak Peek 8.5.3 Updall improved updating of Unread Table

Initial updall after upgrading to Release 8.5.3 may take longer Code enhanced to bring Unread Tables up to date so failover more seamless Databases need to be Transactionally Logged and at ODS51 for this occur Setting DEBUG_UPDATE_UNREAD_TABLE=1 will give you extra-output

updating unread table database for user 'username' (n out of x) Skipping unread table update for database due to downlevel ODS(41), minimum ODS level supported is R85 (51)

Ask for Steve Watts in the Meet the Developers Lab

Open Mic Q&A:

Domino Server 8.5.1 Upgrade Deployments & Best Practices April 7, 2010
http://www-01.ibm.com/support/docview.wss?uid=swg21425912&ca=notesdominofaq

Lotus Domino Server Upgrade Best Practices Sept 15, 2010

http://www-01.ibm.com/support/docview.wss?uid=swg21433026q

75

Replace Design to deploy new 8.5.x pubnames.ntf

Q: When I upgraded to 8.5.x I pushed out the new names.nsf template. I did a replace design, however it didn't add the new policy settings document types. I had to go back and upgrade a server and select "upgrade the domino directory." Will I have to take that approach always in the future to avoid missing new design elements? A: When you upgrade the Domino server, documents that specify things like the extended policy settings types are copied down by the server upgrade task. Only replacing the design of the Domino Directory will not get you there completely. In general, if you want to use new features the server needs to go through the proper upgrade path so that the admin code knows to copy any new/modified documents over

76

How to force 8.5.2 Domino Server Code Upgrade Path

On Admin Server of Domino Directory with 8.5.2 installed Shutdown Domino Server Make sure following 8.5.2 templates are installed

pubnames.ntf, events4.ntf, admin4.ntf, log.ntf, mailbox.ntf, da.ntf ServerSetup=1 TemplateSetup=1 SERVER_UPGRADE_NO_DIRECTORY_REDESIGN=0 or not present

Modify following notes.ini

Restart Domino Server

77

Legal Disclaimer
IBM Corporation 2011. All Rights Reserved. The information contained in this publication is provided for informational purposes only. While efforts were made to verify the completeness and accuracy of the information contained in this publication, it is provided AS IS without warranty of any kind, express or implied. In addition, this information is based on IBMs current product plans and strategy, which are subject to change by IBM without notice. IBM shall not be responsible for any damages arising out of the use of, or otherwise related to, this publication or any other materials. Nothing contained in this publication is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software. References in this presentation to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and/or capabilities referenced in this presentation may change at any time at IBMs sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. Nothing contained in these materials is intended to, nor shall have the effect of, stating or implying that any activities undertaken by you will result in any specific sales, revenue growth or other results. All customer examples described are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics may vary by customer. IBM, the IBM logo, Lotus, Lotus Notes, Notes, Domino, and Lotusphere are trademarks of International Business Machines Corporation in the United States, other countries, or both. Microsoft and Windows are trademarks of Microsoft Corporation in the United States, other countries, or both. UNIX is a registered trademark of The Open Group in the United States and other countries. Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both.

78