Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Status Needs Review
Workspace Domino
Categories Security
Created by Guest
Created on Jan 29, 2026

Allow "KEYMGMT" to display NEK key names

A NEK key is used to enhance Domino HTTP security. It is used in the context of Credstore.nsf.

The "KEYMGMT" command allows to create or delete a NEK key by name:

  • KEYMGMT CREATE nek <nekName>

  • KEYMGMT DELETE nek <nekName>

  • KEYMGMT SHOW nek [nekName|ALL]


Unfortunately, once a NEK key is created, the KEYMGMT command does not have a feature to display NEK key names.

In particular, "KEYMGMT SHOW nek ALL" will show all NEK keys, by fingerprint. But the names of the NEK keys are missing.

Example:

keymgmt show nek all
29.01.2026 16:31:14.27 NEK > DWANonceKey - Fingerprint AAAA BBBB [... ] FFFF
NEK all showed successfully

As a result, once a NEK key is created, it is impossible to delete it without knowing the exact NEK key name.

This can make administration more difficult, particularly in Domino clusters, where both Domino servers need to have the same NEK key.


This idea suggests to display NEK key names in "KEYMGMT SHOW nek ALL".


  • Attach files
  • Guest
    Jan 30, 2026

    Just tried on my 14.5 FP1 server... the name of the NEK is displayed:

    keymgmt show nek all
    01/30/2026 10:47:50.38 NEK > collabxxx - Fingerprint XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
    01/30/2026 10:47:50.38 NEK > DWANonceKey - Fingerprint XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
    NEK all showed successfully

    For me this is already shipped !