Enterprise Vault™ Installing and Configuring

Enabling TOTP on the Enterprise Vault Domino Server

1. Navigate to the Configuration tab, expand the Server drop-down list, and select Configurations > Edit Domino Server configuration.

   • Step a: Select Security > Multi Factor Authentication > Set TOTP for web authentication to Enable.

   • Step b: From the Basics tab, select Use these settings as the default settings for all servers under Basics.

2. Navigate to the Configuration tab, expand the Server drop-down list, and select All Server Documents.

   • Step a: Select GatewayServer/Domain > Edit Server.

   • Step b: From the Ports tab, select Internet Ports tab > Web tab. In the Name & Password setting, set value to Yes with TOTP (if you do not use the HTTPS protocol with TLS port 443, do not update the Name & Password value to Yes with TOTP. )

   • Step c: From the Internet Protocols tab, select the Domino Web Engine tab. Under Domino Access Services > Enabled services set value to TOTP.

3. Run following command on Domino server

   mfamgmt create trustcert */O=YOURDOMAINNAME cert.id YourCertIdPassword

4. Create an ID Vault on the Domino server (if not already present).
5. Add any existing users to this new ID Vault which must use TOTP authentication. Any new users created will automatically be added to the ID Vault which was already created in the previous step.
6. Create a Domino Web Server Congiguration database (DOMCFG.nsf) that uses custom login form for accepting TOTP MFA Token $$LoginUserFormMFA.

   If you do not have a DOMCFG.nsf, you can create it from the File > New Application menu option. Set Title=DOMCFG and Filename = DOMCFG.nsf. Server must be Domino Server. Click Show advance templates and select Domino Web Server Configuration. Select Inherit future design changes > OK.

7. Replicate your changes to domino gateway using the command rep YourDominoGatewayServerName.
8. Run the command load updall names.nsf on both the Domino server and the Domino Gateway server.
9. Exit from both the servers and restart those.
10. Open any user's mailbox in a Web browser.

    In the first time, it shows you the user login screen for without the MFA Token text box. Subsequently, it will ask you to setup MFA for the first time using TOTP URI & QR Code.

11. Scan the QR code using any TOTP authenticator, such as Google Authenticator.

    It will generate a token. Pass the token in the MFA Token text box and click Validate.

    This will complete the TOTP MFA setup for the user. In the subsequent login sessions, the user will see the login page with username, password and MFA Token text box.

Enabling TOTP Multi Factor Authentication in Domino Gateway Server

• Navigate to the Configuration tab, expand the Server drop-down list, and select All Server Documents.

  • Step a: Select GatewayServer/Domain > Edit Server.

  • Step b: From the Ports tab, select Internet Ports tab > Web tab. In the Name & Password setting, set value to Yes with TOTP (if you do not use the HTTPS protocol with TLS port 443, do not update the Name & Password value to Yes with TOTP. )

  • Step c: From the Internet Protocols tab, select the Domino Web Engine tab. Under Domino Access Services > Enabled services set value to TOTP.