Chat now with support
Chat with Support

Migrator for Notes to Exchange 4.16 - Pre-Migration Planning Guide

About the Migrator for Notes to Exchange documentation Introduction Critical considerations Other strategic planning issues Appendix A: Known limitations of the migration process

Migrating encrypted data

Notes encrypted mail can be migrated by either MNE's Data Migration Wizard or the Self-Service Desktop Migrator (SSDM), but each method has its own advantages and disadvantages. The Data Migration Wizard (batch migrator) usually cannot decrypt messages because decryption requires per-user access credentials that usually are unavailable to the wizard. The wizard can migrate encrypted mail as Active Mail (see Migrating Notes “Active Mail” above), but in that case the messages are simply encapsulated and migrated in their encrypted state, and on the Exchange side the user must use a local copy of Notes to decrypt the message contents.

The SSDM, meanwhile, can apply individual users' credentials to decrypt Notes messages as they are migrated, but this method leaves the migrated messages unencrypted in the Exchange mailboxes.

So the batch-migrating Data Migration Wizard can migrate encrypted messages as Active Mail for collections of users, but the messages can be decrypted on the Exchange side only by users running their local copies of Notes. Whereas the SSDM can decrypt Notes messages and migrate them unencrypted to Exchange, but can only be applied to a single user's mail at a time, and the migrated messages remain unencrypted on the Exchange side.

NOTE: Encrypted mail in Notes is not decrypted by the SSDM before it is migrated to Exchange. Encrypted mail in Notes is kept in an encrypted state and then decrypted as it is migrated. At no time is encrypted mail left in a decrypted state in Notes. Even after the mail is migrated the encrypted email left in Notes remains in an encrypted state.

Alternatively, the Data Migration Wizard can be configured to not migrate encrypted messages as Active Mail (as described in Migrating Notes “Active Mail” above), and in that case will migrate an encrypted message’s unencrypted portions, and skip the encrypted portions, inserting a text notice in the message body to explain that the encrypted portions could not be migrated.

In most organizations, only the sender or recipient of an encrypted message is authorized to access the encrypted portion, and the wizard will not know those credentials unless the admin account running the wizard happens to be the sender or recipient of the encrypted message. It is possible, but uncommon, for an environment to be configured with broader or even universal access to the encrypted portions of encrypted messages, and in that case the wizard can freely migrate encrypted messages in their entirety, without using the Active Mail features. But in the more likely case where access credentials are much more restrictive, the wizard will be able to migrate the encrypted portions of encrypted messages only by Active Mail processing.

Organizations that opt to use the SSDM to migrate encrypted messages, typically do so after batch-migrating most everything else with the Data Migration Wizard. In any case, two related Migrator for Notes to Exchange program parameters let you tell the wizard how to handle encrypted messages:

These options are set independently for server and archive data, by different combinations of the MigrateEncryptedMessages and SkipEntireEncryptedMessage parameters, in the [ServerData] and [ArchiveData] sections (respectively) of Migrator for Notes to Exchange’s Task Parameters and Global Defaults. For more information these parameters, see the associated entries in the Migrator for Notes to Exchange Program Parameters Reference.

The MessageStats Notes Migration Report Pack report Migration Status by User can help you determine who has encrypted data. Use the filters in this report to narrow your search to users that have been migrated by the bulk migrator and who have Encrypted Data either skipped or migrated. Those users should run the Self-Service Desktop Migrator to migrate their own encrypted data. Since the Data Migration Wizard does not migrate encrypted messages, it will substitute placeholder messages for encrypted messages in your users’ Exchange mailboxes. The Self-Service Desktop Migrator will then replace the placeholder messages with the real messages as it decrypts and migrates them. (SSDM can do the same thing for encrypted messages that the Data Migration Wizard has processed as Active Mail, replacing the encapsulated-encrypted messages with the real messages as it decrypts and migrates them.)

The placeholder message content is configurable. If you set up a share for your users with an SSDM configured to just migrate the Mail file for your users, you can add the location to this package along with instructions for migrating encrypted messages. For more information see How Do I Customize the Placeholder Message ... for Encrypted Messages? in Appendix A of the Migrator for Notes to Exchange Administration Guide.

Migrating delayed delivery mail

As of Domino 10, Domino supports scheduling email to be sent at a future date and time. In this case, mail could still be in the Domino queue to be delivered after migration.

If you plan to shut down the Domino server after migration, you should send an message to your users before the migration date instructing them not to schedule email delivery after the Domino server shut down date. Emails scheduled for delivery after the Domino server is shut down date will not be delivered.

Also, you should ensure that forwarding addresses are configured for all migrated users, even the last batch of users that are migrated, so that scheduled emails can be forwarded correctly to Exchange or Office 365.

MNE creates a DeferredEmails.tsv log file in the MNE or SSDM log folder. This file lists the deferred emails that are marked for delivery after a specific date which is configured in INI file. For information about setting the date used to include emails in the log file, see the setting [General] DeferredMailDate=<mm/dd/yyyy> in the Program Parameter Reference Guide.

This TSV file contains following columns:

The DeferredEmails.tsv file exists only if there are emails which were scheduled to be delivered after the date set in the [General] DeferredMailDate parameter. If the DeferredEmails.tsv file exists, it means there are delayed delivery (deferred) emails. You must decide whether to defer the date that the Domino server is to be shut down or notify the senders that these emails must be resent from Outlook.

Migrating Notes attachments

The Domino/Notes environment can be configured to handle message attachments by saving only one copy of the attachment on the Domino server, and then making the single attachment available to the sender and all recipients. This Domino Attachment and Object Service (DAOS) is transparent to end users and can save some storage space compared to the alternate method: replicating the attachment for each recipient. However, DAOS tends to slow down migration speed. If speed is critical, the replicated attachments method is preferred.

Migrator for Notes to Exchange will find and migrate Notes attachments saved by either method. For multiple Outlook recipients, an attachment will be replicated for each recipient.

Migrating mail-In databases

Mail-in databases in Notes work like shared folders in Outlook—as a repository for items that can be accessed by multiple users. Migrator for Notes to Exchange migrates Notes mail-in databases like resources. The Directory Export Wizard recognizes mail-in databases as distinct from other (user) mailboxes, and identifies them as "mail-in database"s in Notes Migration Manager, in the Object Type column of the Objects found table.

When migrating a mail-in database, verify that the source address in the TSV file matches the name associated with the mail-in database folder to be migrated. The name can be verified in the Notes admin account under the Mail-In Database section. The mail-in database will be matched up using either of:

SourceAddress: The Notes address for the resource.
TargetAddress: The SMTP address of the target account in Exchange.

Note that the application does not perform a lookup in the names.nsf file, but instead looks for the matching address in the mail-in-database NSF file.

NOTE: The Data Migration Wizard will set forwarding on a mail-in database if it is told to do so, by setting the ForwardingAddress attribute in Notes’ Document Properties for the mail-in database.
Related Documents