HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
0 likes•152 views
The document outlines the new licensing model for HCL Domino, focusing on the Complete Collaboration Business edition (CCB) and Complete Collaboration External user (CCX) licenses, which aim to simplify user licensing and improve collaboration. It introduces the Domino License Analysis Utility (DLAU), a tool designed to help administrators track and manage their licenses, providing important insights for compliance and optimization. The presentation also covers how organizations can optimize their licensing and security through various scenarios and technologies.
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
- 1. Upgrade your time HCL Notes and Domino License Cost Reduction in the World of DLAU June 11th, 2024
- 2. Franz Walder Product Manager [email protected] Christoph Adler Head of Solution Consulting [email protected] Host & Speaker Marc Thomas Senior Solution Architect [email protected]
- 3. Before We Start All attendee lines are muted This is to prevent interruptions during the presentation. X The webinar is being recorded After the webinar, we will send you a mail to give access to the recording and presentation slides. Please submit questions via the Chat or Q&A panel Your questions will be addressed directly during the webinar or in the Q&A section after the presentation. Share your feedback with us Use the link provided at the end to let us know what we can do better.
- 4. • Licensing Overview (CCB / CCX) • Introduction to DLAU • Optimization Scenarios • How panagenda can help • Questions & Answers Agenda
- 5. Licensing Overview (CCB / CCX)
- 6. CCB and CCX first appearance "Introducing HCL Domino Complete Collaboration Business Edition (CCB) – Simplifying Licensing, Amplifying Collaboration! First released with HCL Domino 11.0.1 March, 2020." 6
- 7. Domino Licensing model as of June 2023 • End of Jun 23 HCL announced the new licensing model for HCL Domino – EOM and EOS for Domino Utility Server and Domino Utility Express – CCB (complete Collaboration Business Edition) – CCX (complete Collaboration eXternal User) – CCB is the only license entitling customers to all Domino’s features, updates, and supporting programs. – Following an adoption rate of over 70% for CCB licensing and with many more planning to move to CCB, we are making the Domino License Analysis Utility (DLAU) tool available to enable customers to perform a baseline count of the needed CCB/CCX entitlements for any Domino configuration and, at the same time, to perform a security “health check” on your Domino deployment. From: https://www.hcl-software.com/blog/domino/product-announcement-hcl-domino-license-simplification
- 8. Domino Licensing model as of June 2023 – Away from server-only licensing (based on PVU)to user based licensing – EOM (End of Marketing) for the part numbers in table: June 2023 – EOS (End of support) for the part numbers in table: June, 30 2024 From: https://www.hcl-software.com/blog/domino/product-announcement-hcl-domino-license-simplification
- 9. CCB License • HCL Domino Complete Collaboration Business Edition (CCB) for B2E and B2C users • A simple “Per User everything model” – use any client and any protocol for any server capacity to run all applications – including enterprise e-mail. • Transparent license compliance management by simple user counting • All new Domino features are only included with CCB entitlements – e.g., from V12.0.2 Nomad for Web Browsers and Domino REST APIs • Internal – CCB user (all employees or contractors in the enterprise) • External – Guest user (unlimited anonymous browser access users) – Known Guest (unlimited registered users with read-only access) From blog post Uffe Sorensen , Global Director of DS Strategy, HCL Software https://www.hcl-software.com/blog/domino/all-you-ever-wanted-to-know-about-domino-ccb-licensing-and-dlau-tool/
- 10. CCX License • For B2B (Business-to-Business) or advanced B2C scenarios, where the external users must fully engage in applications beyond the read/only access permitted for Known Guests, HCL introduced the CCX entitlement as an add-on for CCB-only environments. • CCX users have full functionality (up to ACL level of “author”) to use Domino and Domino Leap (if installed) applications and workflows but cannot create applications themselves. CCX users do not have a personal mailbox but can use task/functional mail for workflow routing or applications generating mail. From blog post Uffe Sorensen , Global Director of DS Strategy, HCL Software https://www.hcl-software.com/blog/domino/all-you-ever-wanted-to-know-about-domino-ccb-licensing-and-dlau-tool/
- 11. Where to find details Good to know; ressources about HCL License Agreements License Agreements • https://www.hcl-software.com/resources/license-agreements?referrer=www.hcl- software.com Master Agreements • https://www.hcl-software.com/resources/master-agreements 11
- 12. Introduction to DLAU – Domino License Analysis Utility (by HCL)
- 13. DLAU Overview • This new utility will assist HCL Domino Administrators in determining your Authorized User Count within their HCL Domino environment • Comes as a Notes template • First Release 1.0.x from early 2023 • Latest Release 1.2.4 from April 2024 • New releases quite frequently(22)
- 14. DLAU: From an HCL Slide deck https://opensource.hcltechsw.com/domino-license-analysis-utility-DLAU/assets/pdf/what-Is-the-domino-license-analysis-utility.pdf
- 16. DLAU Scan Results • Runs from a Notes client • Results in 45-120 minutes (depending on environment size)
- 18. DLAU Summary The Domino License Analysis Utility (DLAU) is a tool designed to help organizations track and manage their HCL Domino software licenses. It provides reports on license usage, ensuring compliance with HCL's licensing policies. DLAU supports both Complete Collaboration Business (CCB) and External User (CCX) licenses, helping administrators optimize license allocation and avoid over-purchasing. • “It is important to note that DLAU is not conducting a license audit, which is always an in-depth hindsight analysis. Instead, DLAU is creating a baseline to help you and HCLSoftware have a meaningful forward-looking conversation for your renewal or restart or move to CCB or Volt MX Go.”* • Since Domino 14.0 license agreement: * https://www.hcl-software.com/blog/domino/all-you-ever-wanted-to-know-about-domino-ccb-licensing-and-dlau-tool
- 19. DLAU: How to get it!? DLAU documentation: • https://opensource.hcltechsw.com/domino-license-analysis-utility-DLAU/ DLAU download and github repository • https://github.com/HCL-TECH-SOFTWARE/domino-license-analysis-utility-DLAU 19
- 21. Not a rare customer situation • Person documents in conjunction with functional mailboxes vs. • Mail-In Databases with no functional mailboxes in the person doc´s 21
- 22. Understanding Authorized Users Simplified: users who can authenticate • Have a valid certificate • Have an Internet Password set Therefore (again, simplified): remove the users’ ability to authenticate and they will not be counted by DLAU. 22 or
- 23. or Understanding Authorized Users Simplified: users who can authenticate • Have a valid certificate • Have an Internet Password set Therefore: remove the users’ ability to authenticate and they will not be counted by DLAU. 23
- 24. Identifying Optimization Candidates 24 • This is not about proving DLAU wrong or trying to replace it • This is not about “counting more accurately” • DLAU is improving rapidly, so any current issues might soon be resolved • Our goal is to provide transparency so our customers can verify they are only paying for what they are supposed to be paying for
- 25. Identifying Optimization Candidates Areas to consider: • Recursive Deny Access memberships • Person Document “Lockout ID” • Opportunity: Last user activity • Check: ACL Managers • Check: Agent Signers 25
- 27. Removing Authorization Remove Fields in Person Document • “HTTPPassword” • “Certificate” • Via agent, 3rd party dev tools or panagenda Document Properties Pro
- 28. How panagenda can help! (panagenda solutions)
- 30. • Environment Insights – Usage of applications (Notes Client / Web) – Design complexity and similarity – Source code analysis – Content analysis – License optimization iDNA Applications 30
- 31. iDNA Applications • Key Benefits – Consolidation & optimization potential – Basic information for effort estimates – Facts for risk assessments – Better decisions, based on facts
- 32. iDNA Applications • Virtual Appliance collects datapoints – includes Data Warehouse, Web Server, etc. – Turnkey solution (based on Docker-ized Containers) • Your data stays on prem!
- 36. Understand Your Licensing • You have to understand the new HCL Domino License Analysis Utility (DLAU) tool results – Why are some of my “external” users being counted as CCB instead of CCX? – Why are some of my Deny Access groups not being recognized? – Do I have databases with ACL settings that skew the results? • SecurityInsider has new scanning capabilities and views that can help DISCLAIMER: SecurityInsider is NOT a replacement for DLAU, but it can provide insights to help you understand your environment
- 37. • panagenda product (successor of GroupExplorer) • Domino application (comes as ntf) • Scans directory(ies) – Users – Groups • Resolves groups • Scans DB ACLs
- 38. Highest Access Levels for All Users • Easily see the highest access level for all users – Split between primary and secondary directory users, for CCX license checks – Highest access across all databases on the server – Opening an Endpoint document shows what group structure gives the user that access, and which database(s) it applies to
- 39. Default Database Access • Get a list of all the databases on a server with Default access at or above a certain level
- 40. Deny Access Groups • See which users are in Deny Access groups, and whether those groups are included on the Server document’s “Not Access Server” field – Also see which users are in both Deny Access groups AND other (regular) groups, you might want to remove those users from the regular groups
- 41. Deny Access Database Cleanup • See which users are properly in a Deny Access group, but who are still listed in a database ACL – You might want to remove those users from the ACL too
- 42. Differences Between SecurityInsider and DLAU • Secondary Directories (as of 5 Dec 2023) • Deny Access Groups/Users (as of 5 Dec 2023) SecurityInsider DLAU Secondary directory in Directory Assistance (da.nsf) marked “Enabled: Yes” and “Group Authorization: Yes” All directories in Directory Assistance (da.nsf), even those marked “Enabled: No” SecurityInsider DLAU All users, groups, and subgroups in the “Not Access Server” field of the server document Some combination of: • Groups in the “Not Access Server” field • Users without Internet passwords • Users with expired Notes certificates • “Enforce server access settings” fields (LDAP and HTTP) on the server document Does not include explicit users and wildcard groups in “Not access server” field
- 43. Security Insider Trial or Demodatabase https://www.panagenda.com/resources
- 44. Let´s summarize • Understand Licensing Requirements (CCB, CCX, Guests) • Person documents and mail-in documents (be aware of the impact of the differences, license wise) • Leverage the Domino License Analysis Utility (Utilize the DLAU tool to regularly analyze and report on license usage.)
- 45. Let´s summarize • Maximize Value with Included Supporting Programs (CCB) − HCL Domino − HCL Domino Designer − HCL Domino Leap (limited to five applications running in production) − HCL Domino REST APIs − HCL Nomad for iOS and Android − HCL Nomad for Web Browsers − HCL Notes − HCL SafeLinx − HCL Sametime Limited Chat − HCL Traveler − HCL Traveler for Microsoft Outlook − HCL Verse − OnTime Group Calender − MarvelClient Essentials
- 46. One last thing / „AI is all around“ 46
- 47. Franz Walder Product Manager [email protected] Christoph Adler Head of Solution Consulting [email protected] Q & A Marc Thomas Senior Solution Architect [email protected]
- 48. Franz Walder Product Manager [email protected] Christoph Adler Head of Solution Consulting [email protected] THANK YOU! Marc Thomas Senior Solution Architect [email protected]