How to enable Lotus Notes Traveler security settings for Apple devices by using Lotus Notes Traveler Default Device Settings

Using the Domino Administrator client, connect to the Traveler server and navigate to Messaging -> Mail -> IBM Lotus Notes Traveler -> Device Settings. Open the Default document found in the main panel.



This document is also accessible by opening LotusTraveler.nsf, located in the Domino data directory on the Traveler server.

Navigate to Preferences -> Security Settings -> Apple and choose the desired security settings. In the screenshot below, a 4 character password with a mix of letters and numbers is required, the password must be re-entered if 30 minutes passes, the password must be changed every 90 days, and the device will be wiped if 7 incorrect passwords are entered in a row.



For more information on the available settings, refer to the table describing Apple security options in the product documentation wiki article Default device preference and security setting values.

After selecting the desired settings, save and close the document. Once the document is saved, these settings will be pushed to all Apple device users, unless the user is excluded from the settings via the Assignment tab.

How to include or exclude users and groups from the security settings

Users can be included or excluded from the default settings using the Assignment tab of the Lotus Traveler Device Settings document. For example, a Domino group called "travelerVIPs" could be used to exclude a group of Domino users from the settings so that these users are not required to set device passwords. Any user not belonging to this group would be required to comply with the security settings in the document.



Alternatively, a group of users could be placed in the Include users field to apply these settings to the users and require them to meet security requirements. Any users not in this group (or in the Exclude users field) would not be forced to comply with the settings in the default document.

How the security settings effect a new Notes Traveler user

A new Traveler Apple user will be prompted to set the device passcode during the profile installation.

For example, after generating an Apple profile from the Traveler servlet, the user will select to Install the profile.



Select Install Now to confirm installation of the unsigned profile.



Enter the Domino internet password for the user's Domino email account.



At this point, the user is prompted to set the required device passcode.



Once a passcode is selected that meets the requirements, the user will re-enter the passcode for confirmation.



At this point, the Apple profile installation is complete.

How the security settings effect a current Notes Traveler user

After the security settings have been saved by the administrator, a current Traveler Apple user will see the following message on the device when the Apple sync apps connect to the Traveler server, stating that new data will not be downloaded until a passcode is set. Select Continue to set a passcode.



The New passcode dialog will display the number of characters needed, as well as whether a mix of letters and numbers is necessary.



If an alphanumeric password has been required by the admin (as above) and the user attempts to use only letters or numbers, a message is displayed to inform the user that a mix of characters must be used.



Once a passcode is chosen that meets the requirements, the user is prompted to re-enter the passcode for verification.



Once the passcode is activated, the Apple sync apps will begin downloading data again and sync will continue as normal.

How the device password displays on an Apple device

When the device lock is activated, the user will be prompted to enter the passcode in order to access the device.