How to enable Lotus Notes Traveler security settings for Android devices by using Lotus Notes Traveler Default Device Settings

Using the Domino Administrator client, connect to the Traveler server and navigate to Messaging -> Mail -> IBM Lotus Notes Traveler -> Device Settings. Open the Default document found in the main panel.



This document is also accessible by opening LotusTraveler.nsf, located in the Domino data directory on the Traveler server.

Navigate to Preferences -> Security Settings -> Android and choose the desired security settings. In the screenshot below, a 4 character password with a mix of letters and numbers is required, the password must be re-entered if 30 minutes passes, and the device will be wiped if 7 incorrect passwords are entered in a row. The Violation Action must be Enforce or Disable Synchronization to prevent data synchronization until a device password is set.



For more information on the available settings, refer to the table describing Android security options in the product documentation wiki article Default device preference and security setting values.

After selecting the desired settings, save and close the document. Once the document is saved, these settings will be pushed to all Android device users, unless the user is excluded from the settings via the Assignment tab.

How to include or exclude users and groups from the security settings

Users can be included or excluded from the default settings using the Assignment tab of the Lotus Traveler Device Settings document. For example, a Domino group called "travelerVIPs" could be used to exclude a group of Domino users from the settings so that these users are not required to set device passwords. Any user not belonging to this group would be required to comply with the security settings in the document.



Alternatively, a group of users could be placed in the Include users field to apply these settings to the users and require them to meet security requirements. Any users not in this group (or in the Exclude users field) would not be forced to comply with the settings in the default document.

How to activate the Lotus Traveler Security device administrator

After Notes Traveler client installation, Android 2.2+ users will be prompted to Activate the Lotus Traveler Security device administrator. The device administrator must be activated in order for security settings to be enforced on the Android device.



To prohibit devices that have not activated the Lotus Traveler Security device administrator, an administrator can select Prohibit devices incapable of security enablement on the Security Settings -> Android tab of the Lotus Notes Traveler Default Device Settings. When this option is selected, any Android device that has not activated the Lotus Traveler Security device administrator will not be allowed to synchronize with the Lotus Notes Traveler server. Additionally, Android devices below OS version 2.2 will not be allowed to synchronize when Prohibit devices incapable of security enablement is in effect because the device administrator functionality and other security APIs are unavailable in Android 2.1 and below.

How the security settings effect a new Notes Traveler user

A new Notes Traveler user will see the following message after installing Notes Traveler, stating that sync has been disabled due to a security violation and that the initial sync is not complete.



To comply with the security setting, select Menu -> Tools -> View Security.






Select Update Password to set a device password.



On the next screen, select Password. Password is the only Android screen lock supported with Notes Traveler.



Choose a password. As characters are entered, the message above the input field will inform the user of how many characters are required.



If an alphanumeric password has been required by the admin (as above) and the user attempts to use only letters or numbers, a message is displayed to inform the user that a mix of characters must be used.



When the password meets the length and complexity requirements, the Continue button can be selected.



Confirm the password to ensure the desired password was entered and select OK.



When complete, the security violation message will no longer appear in the Notes Traveler interface and the initial synchronization will be initiated.

How the security settings effect a current Notes Traveler user

After the security settings have been saved by the administrator, a Notes Traveler user will see the following message when the client connects to the Traveler server, stating that synchronization has been disabled due to a security violation. The same procedure as above can be used to set a device password.

How the device password displays on an Android device

When the device lock is activated, the user will be prompted to enter the password in order to access the device.