Check out the Admin Help
Creating a security policy settings document (This answers your question)
Verifying user passwords during authentication (informatio)
Password-protection for Notes and Domino IDs (Domino Security)
If using Domino version 8.5.x you should be using ID Vault to make sure that the ID’s are kept up to date copies. This will means that ID’s do not need to be backed up or even recreated if lost…. all changes to the ID’s are kept and this also includes private keys etc. Everytime the ID is changes it is uploaded to the ID Vault.
ID Vault mangers can see the ID but unless they have the password they cannot get at the ID. This removes the Administrators god like powers that users and auditors hate. The only Roll in the DB that can extract the ID’s with the AUDITOR roll.
<b>Check out the Admin Help</b>
How an ID vault works