IRM Desktop Nov09
IRM Desktop Nov09
IRM Desktop Nov09
October 2009
Copyright 2007, 2009, Oracle and/or its affiliates. All rights reserved. Primary Author: Martin Wykes
This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited. The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing. If this software or related documentation is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable: U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S. Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, the use, duplication, disclosure, modification, and adaptation shall be subject to the restrictions and license terms set forth in the applicable Government contract, and, to the extent applicable by the terms of the Government contract, the additional rights set forth in FAR 52.227-19, Commercial Computer Software License (December 2007). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA 94065. This software is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications which may create a risk of personal injury. If you use this software in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure the safe use of this software. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software in dangerous applications. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. This software and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.
Contents
Preface ................................................................................................................................................................. ix
Audience....................................................................................................................................................... Documentation Accessibility ..................................................................................................................... Related Documents ..................................................................................................................................... Conventions ................................................................................................................................................. ix ix x x
5.1.1 5.1.2 5.1.3 5.1.4 5.2 5.3 5.3.1 5.3.2 5.4 5.4.1 5.4.2 5.4.3
About Creating and Sending Sealed Email...................................................................... Creating and Sending Sealed Email using an Integrated Email Application ............. Creating and Sending Sealed Email using an Existing Document Attachment......... Creating and Sending Sealed Email using Sealed Email Document Format.............. Opening Sealed Email ................................................................................................................ Creating Sealed Email Replies .................................................................................................. Creating a Sealed Reply to an Unsealed Message .......................................................... Replying to a Sealed Email................................................................................................. Forwarding Sealed Email........................................................................................................... Forwarding Sealed Email without Amendment ............................................................. Forwarding Sealed Email with Amendments ................................................................. Sealing and Forwarding an Email that was Received Unsealed ..................................
5-1 5-2 5-2 5-2 5-3 5-3 5-3 5-4 5-4 5-4 5-5 5-5
6-3
vii
I have heard that I can add distinctive watermarks and headers and footers to sealed documents, but I don't know how. What do I do? 8-4 8.2.12 How do I save changes I have made to VB code in a sealed document? .................... 8-4 8.3 Troubleshooting .......................................................................................................................... 8-5 8.3.1 Obtaining Technical Support ............................................................................................. 8-5 8.3.2 Proxy Issues .......................................................................................................................... 8-5 8.3.3 Sealed Documents Block Screen Captures ....................................................................... 8-6 8.4 Formats ......................................................................................................................................... 8-6 8.2.11
A User Interface
A.1 A.1.1 A.1.2 A.1.3 A.1.4 A.1.5 A.1.6 A.1.7 A.1.8 A.1.9 A.1.10 A.1.11 A.2 A.2.1 A.2.2 A.2.3 A.2.4 A.2.5 A.3 A.3.1 A.3.2 A.3.3 A.4 A.4.1 A.4.2 A.4.3 A.4.4 A.4.5 A.4.6 A.4.7 A.4.8 A.4.9 A.5 A.5.1 A.5.2 A.5.3 Oracle IRM Desktop Options Dialog ...................................................................................... General Tab.......................................................................................................................... Desktop Sealing Tab........................................................................................................... Servers Tab........................................................................................................................... Update Rights Tab .............................................................................................................. Search Tab ............................................................................................................................ Email Tab ............................................................................................................................. About Tab ............................................................................................................................ Add Server Dialog .............................................................................................................. Search Log Configuration Dialog................................................................................... Synchronization Log Configuration Dialog.................................................................. Indexing Service Configuration Dialog......................................................................... Sealed Email Options Dialog.................................................................................................. Signature Tab..................................................................................................................... Email Template Tab.......................................................................................................... Email Body Tab ................................................................................................................. Sealed Reply Settings Tab................................................................................................ Sealed Email Format Tab ................................................................................................. Oracle IRM Desktop Sealed Document Information Dialog ............................................. Properties Tab ................................................................................................................... Rights Tab .......................................................................................................................... Account Tab....................................................................................................................... General Features ...................................................................................................................... Oracle IRM Privacy Policy Dialog.................................................................................. Select Context Dialog ....................................................................................................... Change Item Code Dialog ............................................................................................... Status Page Dialog ............................................................................................................ File Report Dialog ............................................................................................................. Sealed File Properties (Oracle IRM) Tab ....................................................................... Oracle IRM Server Connection Test Dialog .................................................................. Oracle IRM Desktop Support Information Dialog....................................................... Change Password Dialog (10g only).............................................................................. Oracle IRM Desktop Toolbars................................................................................................ Oracle IRM Desktop Toolbar in Internet Explorer ...................................................... Oracle IRM Desktop Toolbar in Microsoft Office ........................................................ Oracle IRM Desktop Toolbar in Microsoft Office 2007 ............................................... A-1 A-1 A-2 A-4 A-5 A-6 A-7 A-8 A-9 A-10 A-10 A-11 A-12 A-13 A-13 A-14 A-15 A-16 A-16 A-17 A-17 A-19 A-19 A-20 A-20 A-21 A-22 A-23 A-24 A-25 A-26 A-27 A-28 A-28 A-28 A-29
viii
Preface
Oracle IRM Desktop is a small application that must be installed on every computer that will be used to seal documents using the Oracle IRM encryption technology. Oracle IRM Desktop must also be installed to read documents that have been sealed using this technology. Oracle IRM Desktop is the client software for Oracle IRM Server, which is installed and maintained centrally by organizations wanting to produce sealed documents. The Oracle IRM Desktop client must have access to the Oracle IRM Server installation so that the rights of users to read sealed documents can be ascertained. Access to Oracle IRM Server must be regular, but need not be continuous: Oracle IRM Desktop caches user rights locally and will allow access to sealed documents for a pre-determined period, usually a few days, before access to Oracle IRM Server is required. This user guide contains procedures for using the Oracle IRM Desktop client product. This guide also contains descriptions of the user interface for the product.
Audience
This document is intended for end users of Oracle IRM Desktop.
Documentation Accessibility
Our goal is to make Oracle products, services, and supporting documentation accessible to all users, including users that are disabled. To that end, our documentation includes features that make information available to users of assistive technology. This documentation is available in HTML format, and contains markup to facilitate access by the disabled community. Accessibility standards will continue to evolve over time, and Oracle is actively engaged with other market-leading technology vendors to address technical obstacles so that our documentation can be accessible to all of our customers. For more information, visit the Oracle Accessibility Program Web site at http://www.oracle.com/accessibility/. Accessibility of Code Examples in Documentation Screen readers may not always correctly read the code examples in this document. The conventions for writing code require that closing braces should appear on an otherwise empty line; however, some screen readers may not always read a line of text that consists solely of a bracket or brace. Accessibility of Links to External Web Sites in Documentation This documentation may contain links to Web sites of other companies or organizations that Oracle does not own or control. Oracle neither evaluates nor makes any representations regarding the accessibility of these Web sites. TTY Access to Oracle Support Services To reach AT&T Customer Assistants, dial 711 or 1.800.855.2880. An AT&T Customer Assistant will relay information between the customer and Oracle Support Services at 1.800.223.1711. Complete instructions for using the AT&T relay services are available at http://www.consumer.att.com/relay/tty/standard2.html. After the AT&T Customer Assistant contacts Oracle Support Services, an Oracle Support
ix
Services engineer will handle technical issues and provide customer support according to the Oracle service request process.
Related Documents
For more information, see the Oracle IRM Desktop Installation Guide, the Oracle IRM External User Support Guide, the Oracle IRM Quick Start Guide, and the Oracle IRM Server Administrators Guide.
Conventions
The following text conventions are used in this document:
Convention boldface italic monospace Meaning Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary. Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values. Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.
The notation <Install_Dir> is used to refer to the location on your system where Oracle IRM Server is installed. Forward slashes (/) are used to separate the directory levels in a path name. A forward slash will always appear after the end of a directory name.
"About Oracle IRM" on page 1-1 "About Sealed Documents" on page 1-1 "About Rights" on page 1-2 "About Contexts" on page 1-5 "About Connecting to Oracle IRM Server" on page 1-6 "About Synchronizing with Oracle IRM Server" on page 1-6 "About Sealed Document Item Codes" on page 1-6 "About Microsoft Office Templates" on page 1-8 "About Sealed Multimedia Files" on page 1-8 "About Oracle IRM Fields and Watermarks in Sealed Documents" on page 1-8
About Rights
The Oracle IRM solution supports a wide range of document formats, including Microsoft Word, Excel, and PowerPoint, PDF, HTML, RTF and text, and various image and movie formats. Supporting popular document formats enables the Oracle IRM solution to fit seamlessly into existing working practices, ensuring the security and confidentiality of critical business information. Your ability to work with a particular sealed document depends on the rights defined for you in the contexts to which the document is sealed. For example, your rights to work with documents in a Top Secret context and a Confidential context might be very different.
The "rights" available in Oracle IRM Desktop are created by assigning "features" and setting constraints within Oracle IRM Server. See the Oracle IRM Server Administrators Guide for full details.
About Rights
Some accessibility tools might work Relaxes protection of sealed files so even without this right. the use of accessibility tools and features is not blocked for sealed files. It does this by turning off program protection, screen capture protection, and keyboard protection in the file. Allows you to add comments in Microsoft Excel and Microsoft Word documents (DOC and RTF formats). The ability to add comments may be the only editing you can do on sealed documents. In Microsoft Word, the Annotate right negates the Interact right.
Annotate
Copy
Allows you unrestricted use of the clipboard while working on a sealed document.
Applicable only to Microsoft Office, email, and PDF. Use of the clipboard within a particular sealed document does not require any rights other than the Edit right. Use of the clipboard within a particular sealed document does not require any rights other than the Edit right.
Copy To
Allows you controlled use of the clipboard while working on sealed documents.
Allows you to copy information between documents that are sealed to Even with this right, you may the same context. sometimes not be able to use the clipboard (for example, in some Allows you to copy information multi-process environments). between documents in different contexts. If you have rights to copy to other contexts, you also need the relevant Allows you to change the context that rights in those contexts. For example, a document is sealed to. to copy to a document in another context, you need the right to open Allows you to make a copy of a and edit documents in that context. document in a different context. To change the context that a document is sealed to, you need the Copy To right for the current context and the Seal right for the destination context. Edit Allows you to edit Microsoft Office documents. The Edit right includes the Edit Tracked, Annotate, Interact, and Formulae rights.
Edit Tracked
Allows you to edit Microsoft Office The Edit right includes the Annotate, documents, but enforces the use of Interact, and Formulae rights. the track changes feature of Microsoft Word. Allows you to select and view formulae (formulas) in Microsoft Excel workbooks. Allows you to enter data into Form fields in Microsoft Word documents. Allows you to enter data into unprotected cells of Microsoft Excel documents. The Formulae right is included in the Edit and Edit Tracked rights. The Interact right is included in the Edit and Edit Tracked rights. In Microsoft Word, the Interact right is ineffective if the Annotate right has also been granted.
Formulae
Interact
About Rights
Table 11 (Cont.) Rights Right Open Description Allows you to open a sealed document and view it on screen. Usage notes The Open right might be the only right you have to a document. The Open right is a prerequisite for all other rights except Seal and Search. Print Print To File Allows you to print documents to create paper copies. The Print right is included in the Print to File right.
Print To File includes the Print right. Allows you save a document as a print file, or send documents to a virtual printer (for example, Acrobat). Allows you to use macros within a sealed document to manipulate the document's content. Allows you to edit a sealed email to create a reply. You also need Reseal to save your email edits. You do not need Edit when replying to sealed email. Reply does not allow you to create new sealed emails. That requires the Seal right.
Program
Reply
Reply Tracked
Allows you to edit a sealed email to create a reply, but enforces the track changes feature.
You also need the Reseal right to save your email edits. Reply Tracked does not allow you to create new sealed emails. That involves creating a new sealed document, and therefore requires the Seal right. When you save a sealed document, you can use a different filename, but the new file is subject to exactly the same licensing as its source document. The Reseal right is not associated with the Reseal To option available when right-clicking a sealed file in Windows Explorer. For an explanation of the Reseal To option, see the Copy To right.
Reseal
This right enables you to create an unprotected copy of a sealed document, so it is usually given only for relatively non-sensitive documents. An unsealed document can be created using the Save As option in applications. An unsealed document can also be created using the Unseal option when you right-click a sealed file in Windows Explorer.
About Contexts
Table 11 (Cont.) Rights Right Screen Capture Description Allows you to take screen captures of sealed documents. (See "Screen Capturing Sealed Documents" on page 4-9.) Usage notes Apart from its obvious use, you might be given this right if you have a legitimate reason to use an application that sends images from your computer to another computer, such as a web presentation product. Typically, if you have the Seal right, you also have the Edit right, so that you can edit the documents you create. However, if you have been given the Seal right so that you can use sealed email, it is possible that you will not have the Edit right. Sealed email usage requires the Seal right for email creation, and the Reseal and Reply (or Reply Tracked) rights for replying. Unless you have this right, searches will not include the content of sealed documents. Searching sealed PDF requires a search filter from Adobe as well as the Search right. Set Item Code Allows you to manually set the item code of a sealed document. Item codes are mostly allocated and updated automatically, and reflect the name of a sealed document and the time that it was sealed. Not all sealed documents have item codes. You might be given the right to allocate item codes manually. If so, you will see some extra options and messages when working with sealed documents, and you should be trained to understand what you need to do.
Seal
Search
Allows you to use Microsoft Windows search facilities to search the content of sealed documents.
To support such exceptions, every sealed document has an item code. For example, the auditor might be given the right to open Q3-sales-receipts.sxls, but none of the other secret sales documents. Item codes usually reflect a sealed document's file name and creation date, but not necessarily. For example, the illustration shows a sealed document called merger-proposal.sdoc that has an item code of 2009_06_10 14:10:49 merger.sdoc.
In this case, it appears that merger-proposal.sdoc is a renamed copy of a sealed document called merger.sdoc. Renaming a sealed document does not change the item code, so the copy is subject to exactly the same licensing as the original. In most cases, such a document's item code will be updated automatically the next time an authorized user changes its content. Even then, it will almost always be subject to the same licensing because it is sealed to the same context as the original, but the change of item code provides the option for the original document and the modified copy to be licensed independently of each other. In rare cases, some users might be authorized to allocate item codes manually. This, for example, enables a user to create several documents that have the same item code regardless of their file names, such that the documents can be handled as a unit for licensing purposes. However, in the vast majority of cases, the allocation and update of item codes is automatic.
Create and send sealed email. Open sealed email that you receive. Create and send sealed replies. Forward sealed emails.
Oracle IRM Desktop enables all of the above so that you can participate in sealed email threads. See "Using Sealed Email" on page 5-1. Your rights to create and reply to sealed email are managed separately from your rights to create and edit other types of sealed document. For example, you might find that you can create sealed email in a context in which you do not have the right to
create a new sealed Word document, or you might find that you can reply to sealed email, but not create new sealed email.
You can use sealed Microsoft Office templates to create Microsoft Word, Excel, and PowerPoint documents consistently. You can create sealed documents from regular Microsoft Office templates.
See "About Using Sealed Microsoft Office Templates" on page 4-12. In each case, your templates can contain Oracle IRM fields that help to remind users of the sensitive nature of the documents created from them. For example, a template might have headers and footers that contain fields that identify the context of the documents, and the name of the user who opens a particular copy.
For Microsoft Word, you can create a sealed Word template that contains the fields in headers and footers, and use that template to create a new sealed document. For PDF, you can create a PDF file that contains the fields, and then use it as a watermark file for other PDF files.
When viewing the unsealed source, the fields appear as field names or placeholder strings. However, when sealed and viewed with Oracle IRM Desktop available, the fields are transformed to contain the relevant data. For example, irm-account-name might be transformed to John.Smith, the name of the user who opens a particular copy of a sealed document.
"System Requirements" on page 2-1 "Installing Oracle IRM Desktop" on page 2-2 "Uninstalling Oracle IRM Desktop" on page 2-3 "Upgrading Oracle IRM Desktop" on page 2-2 "Silent and Unattended Installations" on page 2-3 "Interoperability Notes" on page 2-8
486 or Pentium PC-compatible computer 25 MB free disk space Microsoft Internet Explorer 6.0 or later
Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008
Supported Browsers Oracle IRM Desktop operates as a plug-in to the following browser versions:
Oracle IRM recommends using Internet Explorer 7.0 or later. Note that Internet Explorer does not need to be your default browser, it just needs to be available on the system. Installation Privileges The installation requires administrator privileges or elevated privileges.
If you are reading this section in the online help, then Oracle IRM Desktop is already installed.
Oracle IRM Desktop is typically downloaded and installed from a web page. The web page might be hosted by Oracle IRM, or by another organization. Typically, you will be told the address of the download site.
1. 2. 3. 4. 5.
Close all instances of Microsoft Word, PowerPoint, Excel, and Outlook. Uninstall any previous version of Oracle IRM Desktop or the SealedMedia Unsealer or Desktop software. Go to the Oracle IRM Desktop download site. Follow any instructions on the Oracle IRM Desktop download site for downloading the installation file. Run the downloaded installation file and follow the installation wizard.
Do not attempt to install Oracle IRM Desktop on a mapped drive or on a drive defined using the subst command. Silent and unattended installations are also supported (see "Silent and Unattended Installations" on page 2-3).
To uninstall Oracle IRM Desktop from a computer, you need administrator rights for that computer. Use the Control Panel Add/Remove Programs dialog to uninstall Oracle IRM Desktop, if required. Alternatively, run the installer and you will be offered the option to uninstall. Uninstalling Oracle IRM Desktop does not delete your local rights database from your system. If you re-install, your existing rights will still be available.
"About Silent and Unattended Installations" on page 2-3 "Authentication Settings" on page 2-4 "Oracle IRM Desktop Settings" on page 2-4 "Desktop Sealing Settings" on page 2-5 "Synchronization Manager Settings" on page 2-6 "Search Settings" on page 2-7 "Email Settings" on page 2-7 "Legacy Setting" on page 2-8 "Extracting the MSI File from the Self-Extracting Executable" on page 2-8
The following shows how to achieve the same effect by passing arguments to the self-extracting executable:
The /v argument signifies that other arguments are to be passed to the MSI installer within the executable. The list of configurable settings relate to the functional subcomponents of Oracle IRM Desktop:
Oracle IRM Desktop - controls access to sealed documents Desktop sealing - integrates sealing options into Windows Explorer Synchronization manager - automates rights synchronization Search integration - integrates with search facilities Email integration - integrates with popular email applications such as Microsoft Outlook
The following sections provide information about the configurable settings for each subcomponent. All components have valid defaults that enable a user to open and work with sealed documents, subject to their rights, immediately after installation. Configuration of settings during installation is optional. After installation, most of the settings are accessible by right-clicking the Oracle IRM icon in the Windows tooltray and selecting Options. For further information about particular settings, see the Oracle IRM Desktop help.
0= 1 disabled 1= enabled
Property and description UNSEALER_SHOWTRAYICON Determines whether the Oracle IRM icon is shown in the system tray. UNSEALER_SHOWIRMBAR Determines whether the Oracle IRM information bar is displayed within Microsoft Office for sealed documents. UNSEALER_HIDEIETOOLBARS Determines whether the Oracle IRM toolbars are displayed when viewing sealed content (specifically PDF) within the Internet Explorer browser.
Default 1
These options relate to settings that appear on the Oracle IRM Desktop tab of the Oracle IRM Desktop Options dialog.
These settings relate to options on the Desktop Sealing tab of the Oracle IRM Desktop Options dialog.
Default None
the string to pass in the SYNCINITIALSERVERS property is: SYNCINITIALSERVERS="https://irm1.example.com/i rm_desktop|1,https://irm2.example.com/irm_ desktop|1,https://irm3.example.com/irm_desktop|0"
<url1>|<value1>[,<url2>|< value2>,<url3>|<value3>,... where the value 1 means that synchronization for the ] server is enabled and the value 0 means that synchronization for the server is disabled. SYNCLOCKEDSERVERS Determines a set of servers that are locked from user modification. If a locked server appears in the list of synchronized servers, the user cannot disable synchronization for that server, nor remove it from the list of synchronized servers. The presence of a server in this set does not add it to the list of synchronized servers. Locked servers will appear in the list of synchronized servers only because they have been added through the SYNCINITIALSERVERS property or because a user has added it. For example, to lock the following servers:
None
irm1.example.com irm2.example.com
the string to pass in the SYNCLOCKEDSERVERS property is: SYNCLOCKEDSERVERS ="https://irm1.example.com/irm_ desktop|1,https://irm2.example.com/irm_desktop|1" where the value 1 means the server is locked. A value of 0 would mean that the server is unlocked, but this has the same effect as simply not listing the server.
These settings relate to the server list on the Synchronization tab of the Oracle IRM Desktop Options dialog.
Property and description SYNC_LOGLEVEL Determines the level of logging of synchronization messages to the Windows event log. The messages are categorized as low-level, standard, and detailed. UI option Values Default 8
Synchronization 0 = no messages Messages 2 = low-level 4 = detailed 6= detailed and low-level 8 = standard 10 = standard and low-level 12 = standard and detailed 14 = standard and detailed and low-level
These settings relate to the checkboxes on the Synchronization Log Configuration dialog.
These settings relate to the option on the Search tab of the Oracle IRM Desktop Options dialog, and to the checkboxes on the Search Log Configuration dialog.
0 = deactivated 0 1 = activated
0 = do not use custom template 1 = use custom template path and filename
none
none
Property and description EMAIL_BODYTYPE Determines the type of the unsealed body text of sealed emails.
Default 1
EMAIL_BODYTEXT Specifies the unsealed body text of sealed emails. EMAIL_SEALEDFORMAT Determines the format that sealed emails will be sent as.
Specify Text
string
none
Seal Format
These settings relate to options on the Email tab of the Oracle IRM Desktop Options dialog, and on the Sealed Email Options dialog you can access by clicking the Settings button on the Email tab.
This setting relates to the authentication dialog that is shown for legacy servers.
On a test box, run the Oracle IRM Desktop installation executable, but click Cancel on the first installation screen. Runing the executable extracts the MSI file to a subfolder of the current user's temporary area. For example: C:\Documents and Settings\Fred\local settings\temp\_isNNN where NNN is a number. This is a subfolder of the folder defined by the %TEMP% environment variable.
2.
You can now use the MSI file for your corporate roll-out.
documents. The following sections describe application requirements for some formats. Oracle IRM recommends that you install Oracle IRM Desktop after installing the relevant rendering applications. For example, if you want to use sealed Microsoft Word documents, install Oracle IRM Desktop after installing the Microsoft Office software. This ensures that the sealable file formats are registered with Windows before the Oracle IRM Desktop installation. Sealed Microsoft Office Files (Word, PowerPoint, Excel) The following releases of Microsoft Office are supported:
In Microsoft Office 2000, when you open a sealed Microsoft PowerPoint file, auto-save is disabled for all open PowerPoint files, whether sealed or unsealed. Within Microsoft Powerpoint, the auto-save option remains shown as enabled, if it has been set that way by a user.
You can install Adobe Reader before or after installing Oracle IRM Desktop. Oracle IRM Desktop displays a warning if you are using an unsupported version of Adobe Reader. Sealed Video Video is supported through QuickTime, as follows:
QuickTime 4 or later. QuickTime 5.02 or later, if you want to view sealed MPEG-1 movies. QuickTime 6 or later, if you want to view sealed MPEG-4 movies.
10
"Opening sealed documents" on page 3-1 "Sealing an existing document" on page 3-2 "Creating a new blank sealed document" on page 3-3 "Enabling Microsoft Office integration" on page 3-4
Microsoft Office integration provides sealing functionality on toolbars within the Microsoft Office applications you select. For information about other tasks, see the Oracle IRM Desktop online help. The help is accessible from the Windows Start menu, or from the Oracle IRM Desktop icon on your system tray.
3-1
The first time you open a sealed document, you might be challenged for the username and password of your Oracle IRM Server account, and you might be required to change your password. If you are challenged for a password, you might be offered a Save my passord option, which you can use to ensure that you are not challenged next time. Having authenticated, the Oracle IRM software checks to see whether you have the right to open the sealed document. Typically, the administrator will make sure you have rights for the first document you receive. Once opened, your ability to interact with the document is controlled by your rights, and can range from read-only access, through the ability to add comments or make tracked changes, to full edit rights. If you do not have the right to open the document, you are redirected to a web page that explains why not.
Right-click on the document in Windows Explorer, select Seal To and then Select Context.
The dialog lists security contexts to which you have the right to seal documents. If you think the list is incomplete, you can use the Refresh Contexts button to update it.
2.
Select the context that you want to use and click OK. A sealed document is created in the same folder as the selected document.
Alternatively, integrated Microsoft Office support provides sealing options within Microsoft Office applications. In each case, the option requires the selection of a context as shown above.
In Windows Explorer, select the folder in which you want to create the new sealed document. Select the File menu, then select New, then select Sealed Word Document.
3-3
Select a context for the new sealed Word document and click OK. Use the Save As dialog to name the new document. The new document is opened immediately for you to start working with.
Alternatively, Microsoft Office integration provides toolbars for creating new sealed documents within the Microsoft Office applications.
From the Windows Start menu, select Programs, then Oracle IRM Desktop, then Options. This opens the Oracle IRM Desktop Options dialog. Alternatively, you can right-click the Oracle IRM icon in the Windows system tray and select Options.
2. 3.
Select the General tab. If the Enable Microsoft Office support box is not already checked, check it, then click OK.
The next time you start a Microsoft Office application, it will show sealing-related options in an Oracle IRM toolbar. For example, you can use the Save As Sealed button on the Oracle IRM toolbar to seal a document:
3-4 Oracle IRM Desktop User Guide
Similar integrations for email applications are provided on the Email tab of the Oracle IRM Options dialog.
3-5
"Opening Sealed Documents" on page 4-1 "Editing Sealed Documents" on page 4-2 "Creating New Sealed Documents" on page 4-3 "Saving Changes to Sealed Documents" on page 4-5 "Changing the Contexts that Documents are Sealed to" on page 4-6 "Unsealing Sealed Documents" on page 4-7 "Searching Sealed Documents" on page 4-7 "Printing Sealed Documents" on page 4-9 "Screen Capturing Sealed Documents" on page 4-9 "Sharepoint Behavior" on page 4-10 "Using Sealed Microsoft Excel Spreadsheets" on page 4-10 "Using Sealed Microsoft Office templates" on page 4-12
"About Opening Sealed Documents" on page 4-1 "Opening a Sealed Document in Windows Explorer" on page 4-1 "Opening a Sealed Document in a Microsoft Office Application" on page 4-2
To open a sealed document, you need the Open right. See "About Rights" on page 1-2.
Double-click the document name. Select the document name, then select Open from the File menu.
4-1
To open a sealed document, you need the Open right. See "About Rights" on page 1-2.
If you have enabled Microsoft Office support (see "General Tab" on page A-1), you can use the Oracle IRM Desktop toolbar to open a sealed document. Use the following procedure to open a sealed document in a Microsoft Office application:
1. 2.
Open the Microsoft Office application. On the Oracle IRM Desktop toolbar, click the Open Sealed button. This opens the Open Sealed dialog, which lists sealed documents of the type shown in the Files Of Type drop-down list.
3. 4. 5.
In the Files Of Type drop-down list, select the type of sealed file to open (for example, Sealed Word Document). In the files area, select the sealed file to open. Click Open.
You can also open sealed documents in the same way as other documents. For example, you can click the Open button in the Microsoft Word toolbar, and then select a sealed document from the familiar Open dialog. In this case, you can use the All Files option in the Files Of Type drop-down list to show any type of file, whether sealed or not.
"About Editing Sealed Documents" on page 4-2 "About Using the Clipboard while Editing Sealed Documents" on page 4-3
If you have been given the Program right, you are able to use macros that process or modify sealed content.
You might be allowed to paste within the same sealed document, but to no other document. You might be allowed to paste to a document of the same type, for example from one Microsoft Word document to another Microsoft Word document, but not from a Microsoft Word document to a Microsoft Excel spreadsheet. You might be allowed to paste anywhere you want, including to unsealed documents.
If you attempt to paste sealed content to an unauthorized destination, Oracle IRM Desktop displays a message explaining that you cannot.
Note:
Copying and pasting from sealed HTML is always disabled regardless of your rights and permissions.
"Using Windows Explorer to Create a New Document that is Sealed from the Outset" on page 4-3 "Using Microsoft Office to Create a New Document that is Sealed from the Outset" on page 4-4 "Creating a Sealed Version of an Existing Unsealed Document" on page 4-5
Note:
It is also possible to use the Oracle IRM programming tools to create other methods of sealing.
4.3.1 Using Windows Explorer to Create a New Document that is Sealed from the Outset
Rights: To seal a document, you need the Seal right. See "About Rights" on page 1-2.
Use the following procedure to create a new document that is sealed from the outset:
1.
In Windows Explorer, select the File menu and choose New, then choose the Sealed menu item for the document type that you want to create. For example, to create a new sealed Word document, choose Sealed Word Document.
4-3
2.
In the Select Context dialog, select the context to which you want to seal the new document. If the context that you want to use is not shown, try the following, in the order given:
Refresh the list by clicking the Refresh Contexts button. Manually synchronize with the server by right-clicking the Oracle IRM icon in the system tray and selecting Synchronize (or by using the Update Rights page of the Oracle IRM Desktop Options dialog). Manually connect to the server hosting the context that you want to use. See "Connecting to Oracle IRM Server Manually" on page 7-2.
3.
Select a location and enter a name for the new document. If you have been authorized to allocate item codes manually (see "About Sealed Document Item Codes" on page 1-6), you will see an Options section on the dialog for naming a document. To set the item code, check the Update Item Code box (if not already set), select the Use This Item Code option, then enter an item code in the accompanying text box.
4.
The new sealed document is opened in the appropriate application, if available. You can then work on the sealed document to the extent that your rights allow.
4.3.2 Using Microsoft Office to Create a New Document that is Sealed from the Outset
Rights: To seal a document, you need the Seal right. See "About Rights" on page 1-2.
If you have enabled integration with Microsoft Office, use the following procedure to create a new document that is sealed from the outset:
1.
In the Microsoft Office application, select the New Sealed icon on the Oracle IRM toolbar, then, on the resultant menu, select the context to which you want to seal the document. If the required context is not shown, select the Select Context menu item instead. If you have opened the Select Context dialog, select the context to which you want to seal the new document. If the context that you want to use is not shown, try the following, in the order given:
2.
Refresh the list by clicking the Refresh Contexts button. Manually synchronize with the server by right-clicking the Oracle IRM icon in the system tray and selecting Synchronize (or by using the Update Rights page of the Oracle IRM Desktop Options dialog). Manually connect to the server hosting the context that you want to use. See "Connecting to Oracle IRM Server Manually" on page 7-2.
3.
Select a location and enter a name for the new document. If you have been authorized to allocate item codes manually (see "About Sealed Document Item Codes" on page 1-6), you will see an Options section on the dialog for naming a document. To set the item code, check the Update Item Code box (if
not already set), select the Use This Item Code option, then enter an item code in the accompanying text box.
4.
The new sealed document is opened. You can then work on the sealed document to the extent that your rights allow.
Use one of the following procedures to create a sealed version of a document that already exists:
In Windows Explorer, select the unsealed document, select the File menu, select Seal To, then select Select Context. In the Select Context dialog, select the context, then click OK. If you have enabled integration with Microsoft Office, open the unsealed document in the Microsoft Office application and select the Save As Sealed button in the Oracle IRM toolbar.
If you have been authorized to allocate item codes manually (see "About Sealed Document Item Codes" on page 1-6), you will see an Options section on the dialog for naming a document. To set the item code, check the Update Item Code box (if not already set), select the Use This Item Code option, then enter an item code in the accompanying text box.
"About Saving Changes to Sealed Documents" on page 4-5 "Saving Changes to A Sealed Document" on page 4-6
You may want to make changes to a sealed document but save the changes in an unsealed copy of the document. See "Unsealing Sealed Documents" on page 4-7.
Working with Sealed Documents 4-5
To save changes to a sealed document, you need the Reseal right. See "About Rights" on page 1-2.
To save a copy of a sealed PDF document, use Internet Explorer's Save As option: the Save buttons on the Acrobat and Oracle IRM Desktop toolbars are not available for this operation.
"About Changing Contexts" on page 4-6 "Changing the Context that a Document is Sealed To" on page 4-6
To change the context that a document is sealed to, you need the Copy To right for the current context and the Seal right for the destination context. See "About Rights" on page 1-2. You may be limited to changing to certain trusted contexts. If this is the case, the trusted contexts are listed at the bottom of the Rights tab of the Oracle IRM Desktop Control Panel, in the Allowed Destinations section.
Use the following procedure to change the context to which a document is sealed:
1. 2. 3. 4.
Right-click the sealed document in Windows Explorer. From the menu, select Reseal To. In the Select Context dialog, select the context that you want to seal the new version to, then click OK. Do one of the following:
To create a copy of the document sealed to the new context, change the directory or the file name, then click Save.
"About Unsealing Sealed Documents" on page 4-7 "Unsealing a Sealed Document" on page 4-7
To unseal a sealed document, you need the Save Unsealed right. See "About Rights" on page 1-2.
Either: Open the sealed document in its normal application and, from the File menu, select Save As. Or: Right-click the document in Windows Explorer and select Unseal.
2. 3.
In the Files of Type drop-down box, select an unsealed file type. If required, change the location and name of the document, then click Save.
"About Searching Sealed Documents" on page 4-7 "Enabling Windows Search Integration" on page 4-8 "Configuring for the Microsoft Indexing Service" on page 4-8 "Configuring Search Logging" on page 4-9
You can use the search facility provided within any application that displays a sealed document that you have the right to open. For example, you could use the search facility provided by Microsoft Word to search a sealed Word document that you are viewing. This type of search does not require a specific right - you can search any sealed document that you can open.
4-7
You can use the Windows Explorer search facility to search folders that contain sealed documents. If you have the Search right, search results may then include matches in sealed documents as well as unsealed documents.
Searching in Windows Explorer requires you to enable Microsoft Windows search integration. Search integration supports sealed Microsoft Office formats, sealed HTML, sealed XML, sealed email, and sealed PDF. You will usually be given the Search right for any documents for which you have the Open right. However, you may be given only the Search right, in which case you will be able to search for the content of sealed documents but not open those documents. Searching any PDF, including sealed PDF, requires a PDF filter. If the computer from which the search is implemented has Adobe Reader installed, it will probably already have the necessary filter. If the search is to be implemented from a computer that does not normally have Adobe Reader installed, the required filter is, at the time of writing, freely downloadable from Adobe. If your organization stores large numbers of sealed documents on a file share, it is possible to enable the Microsoft Indexing Service to create indexes that include sealed documents. Searches of the file share can then find sealed documents more efficiently.
Open the Oracle IRM Desktop Options dialog. You can do this either:
from the Windows Start menu, by selecting Programs, then Oracle IRM Desktop, then Options; or by right-clicking the Oracle IRM icon in the notification area (system tooltray) and selecting Options.
2.
On the Search tab, make sure that the Enable Search box is checked.
Open the Oracle IRM Desktop Options dialog. You can do this either:
from the Windows Start menu, by selecting Programs, then Oracle IRM Desktop, then Options; or by right-clicking the Oracle IRM icon in the notification area (system tooltray) and selecting Options.
2. 3. 4.
On the Search tab, click Advanced. On the Indexing Service Configuration dialog, click New. On the Oracle IRM Server URL page, specify the address of the Oracle IRM Server that issues licenses for the sealed documents that you want to be able to index. You can find a list of addresses and port numbers on the Servers tab of the Oracle IRM Desktop Options dialog.
Open the Oracle IRM Desktop Options dialog. You can do this either:
from the Windows Start menu, by selecting Programs, then Oracle IRM Desktop, then Options; or by right-clicking the Oracle IRM icon in the notification area (system tooltray) and selecting Options.
2. 3.
On the Search tab, click Settings. On the Search Log Configuration dialog, select the message categories that you want written into the Windows event log, then click OK.
"About Printing Sealed Documents" on page 4-9 "Printing a Sealed Document" on page 4-9
To send a sealed document to a printer, you need the Print to File right or the Print right. To print a sealed document to a file, you need the Print to File right. The Print to File right includes the Print right. See "About Rights" on page 1-2.
Using the usual application for the document type, open the document that you want to print. Use the usual method for printing a document. For example, select the File menu, then select Print.
"About Screen Capturing Sealed Documents" on page 4-10 "Sharing a Sealed Presentation During a Web Conference" on page 4-10
Working with Sealed Documents 4-9
Sharepoint Behavior
To start a web conference and share a sealed presentation, you need the Screen Capture right. See "About Rights" on page 1-2.
Start the web conference. Share the sealed presentation as if it were an unsealed presentation.
If you do not have the Screen Capture right, remote observers will see a blanking image comprising numerous Oracle IRM logos.
To capture the image of a sealed document from the screen, you need the Screen Capture right. See "About Rights" on page 1-2.
Use the following procedure to capture an image of a sealed document from the screen:
1. 2.
Capture the image in the usual way. For example, Alt+PrintScreen. Paste the captured image into the destination application. For example, in Microsoft Word, select the point at which you want the image to be inserted, then select the Edit menu and select Paste.
If you do not have the Screen Capture right, an image comprising numerous Oracle IRM logos will be pasted into the destination application instead of the captured image.
"About Sealed Microsoft Excel Spreadsheets" on page 4-11 "Linking Sealed Microsoft Excel Spreadsheets" on page 4-11 "Updating Links Between Previously Unsealed Spreadsheets" on page 4-12
If the pasted content is derived from data in cells in the same document (for example, a chart created from nearby data cells), the pasted content will not show in the destination document.
Oracle IRM will prevent unauthorized access to data. This means that if a link is created to a sealed workbook from an unsealed one, or if the user of one sealed workbook is not authorized to see the content of a sealed workbook linked to it, the content of a linked cell will be shown as "#REF". Just as with other types of document, you can use Oracle IRM fields (see "Working With Oracle IRM Fields and Watermarks" on page 6-1) to help reinforce the confidential nature of a Microsoft Excel spreadsheet.
Rights:
To open a sealed spreadsheet, you need the Open right. To seal a spreadsheet, you need the Seal right. To see formulas on a sealed spreadsheet, you need the Formulae right. See "About Rights" on page 1-2.
Use the following procedure to update existing links in spreadsheets that were previously unsealed:
1. 2.
Seal both the source and the destination spreadsheet files. Open the sealed destination spreadsheet file. You will see the Microsoft Excel message telling you that there are links to other data sources.
3.
Only if you have already sealed the source spreadsheet file, accept the option to update the links. You will see the Microsoft Excel message telling you that there are links that cannot be updated. (This is because the file extensions have been changed from .xls to .sxls.)
4.
Accept the option to edit the links. You will see a list of links with the status "Error: Source not found".
5. 6.
Use the dialog's change source facility to search for the sealed source file (with a .sxls extension). If prompted to, log in to the sealed source file.
"About Using Sealed Microsoft Office Templates" on page 4-12 "Creating a Sealed Microsoft Office Template from within Microsoft Office" on page 4-13 "Creating a Sealed Microsoft Office Template using Windows Explorer" on page 4-13 "Editing Sealed Microsoft Office Templates" on page 4-14
sealed template, the new document is sealed to the same context as the template. For example, if a template is sealed to the Top Secret context, then all documents created from it are sealed to the Top Secret context too.
4.12.2 Creating a Sealed Microsoft Office Template from within Microsoft Office
Rights:
To open a sealed template or document, you need the Open right. To seal an unsealed template or document, you need the Seal right. To edit a sealed template, you need the Edit right, or an associated right. To save changes made to a sealed template, you need the Reseal right. See "About Rights" on page 1-2.
Use the following procedure to create a sealed template from within Microsoft Office (this uses Microsoft Word as an example):
1.
Right-click the Oracle IRM icon in the system tooltray and select Options. On the Oracle IRM Desktop Options dialog, select the General tab. Make sure that the Enable Microsoft Office support checkbox is checked.
2. 3. 4.
Open a Microsoft Word template that you want to seal, or open a Microsoft Word document that you want to save as a sealed template. On the Oracle IRM Desktop toolbar, click the Save as Sealed icon . Select a context for the sealed template. After selecting a context, Microsoft Office displays a dialog to enable you to name the file and specify its type.
5.
Specify Save as Type: Sealed Word Template (*.sdot), if present. For Microsoft Office 2007, select *.sdotx or *.sdotm as appropriate.
6.
Specify an appropriate name and location for the template, and save it. The document is saved as a sealed template, and immediately opened with Oracle IRM Desktop for you to continue editing if required.
To seal an unsealed template, you need the Seal right. See "About Rights" on page 1-2.
Use the following procedure to create a sealed template using Windows Explorer:
1. 2. 3.
In Windows Explorer, select an unsealed template (.dot, .xlt, or .pot). Right-click the selected template. Select Seal To and the context that you want documents created from this template to be associated with.
To open a sealed template, you need the Open right. To edit a sealed template, you need the Edit right, or an associated right. To save changes to a sealed template, you need the Reseal right. See "About Rights" on page 1-2.
In Windows Explorer, select the sealed template, select the File menu, select Open, edit the document, then save it. While using the relevant Microsoft Office application, select the File menu, then select Open. You can then use the Files of Type field on the Open dialog to specify that you want to open a sealed template. Edit the document, then save it.
"Creating and Sending Sealed Email" on page 5-1 "Opening Sealed Email" on page 5-3 "Creating Sealed Email Replies" on page 5-3 "Forwarding Sealed Email" on page 5-4
"About Creating and Sending Sealed Email" on page 5-1 "Creating and Sending Sealed Email using an Integrated Email Application" on page 5-2 "Creating and Sending Sealed Email using an Existing Document Attachment" on page 5-2 "Creating and Sending Sealed Email using Sealed Email Document Format" on page 5-2
The recipient of a sealed email will be able to read it only if he has Oracle IRM Desktop installed on his computer and he has been given sufficient rights. It is recommended that you insure intended recipients have Oracle IRM Desktop installed or know how to obtain it, especially if you send emails outside your own organization.
There are two main ways to create sealed email, subject to your rights and the software that you have installed on your system:
If you use Microsoft Outlook or Lotus Notes, powerful sealing options can be integrated directly into your email application. You can mark an email to be sealed as it is sent. This allows the very easy sealing of new emails, replies, and forwarded emails. Replying and forwarding of sealed emails are handled very much like regular replying and forwarding, enabling you to participate in email threads where all the messages are sealed. You can use any email application to send any sealed document as an attachment. The attachment can be any sealed document, including one that has been created specially as a sealed email document using the facility added to Windows Explorer. The advantage of using the special sealed email document format is that your message will look and behave more like a regular email for any recipients who use Oracle IRM Desktop.
5-1
5.1.2 Creating and Sending Sealed Email using an Integrated Email Application
Rights:
To create a new sealed email and send it, you need the Seal right. See "About Rights" on page 1-2.
Use the following procedure to create and send sealed email using an integrated email application (Microsoft Outlook or Lotus Notes):
1.
Open the Oracle IRM Desktop Options dialog (either from the Windows Start menu or from the Oracle IRM icon in the notification area). Select the Email tab. Select the checkbox against the name of your email application, then click OK.
2. 3. 4.
In your email application, click the New Sealed Email button. In the message creation window of your email application, make sure that the Seal on Send button is in the pressed down position. Write your email and go to send it in the usual way. You will be asked to select a sealing context before the message is sent.
5.1.3 Creating and Sending Sealed Email using an Existing Document Attachment
Rights:
To seal a document, and to send it by sealed email, you need the Seal right. See "About Rights" on page 1-2.
Use the following procedure to send sealed email using an existing document that contains the information to be sent:
1. 2.
If the document to be sent is unsealed, seal it in the usual way. In your email application, create a message, attach the sealed document, and send it in the usual way.
5.1.4 Creating and Sending Sealed Email using Sealed Email Document Format
Rights:
To create a document in sealed email format, you need the Edit right. To send a sealed email, you need the Seal right. See "About Rights" on page 1-2.
Use the following procedure to create and send a sealed email using an attachment in the sealed email document format:
1. 2. 3.
Open Windows Explorer, select the File menu, select New, then select Sealed Email Message. In the Context Selection dialog, select the context in which the message will be sealed. In the Save As dialog, select the name and location for the sealed document. Make sure that the Open new sealed document box is checked.
4. 5. 6.
Write the message into the document application that is opened (usually Microsoft Word). Save and close the document. In your email application, create a message, attach the sealed document, and send it in the usual way.
To open a sealed email, you need the Open right. See "About Rights" on page 1-2.
A sealed email message always reaches the recipient as an attachment to a regular email. Use one of the following procedures to open a sealed email message:
In the email application, open the sealed attachment in the same way that you would open a regular attachment. Save the sealed attachment to disk, then open it from Windows Explorer by double-clicking it.
"Creating a Sealed Reply to an Unsealed Message" on page 5-3 "Replying to a Sealed Email" on page 5-4
To create a sealed reply to an unsealed email message, you need the Seal right. See "About Rights" on page 1-2.
Use the following procedure to create a sealed reply to an unsealed email message:
1. 2. 3.
In your email application, click the Reply button. In the message creation window, make sure that the Seal on Send button is in the pressed down position. Write your reply and go to send it in the usual way. You will be asked to select a sealing context before the reply is sent.
5-3
To reply to a sealed email, you need the Reply right or the Reply Tracked right. To save changes that you make to a sealed email, you need the Reseal right. See "About Rights" on page 1-2.
Use the following procedure to reply to a sealed email (that is, an email with a sealed attachment):
1. 2. 3.
In your email application, open the sealed email attachment. Click the Oracle IRM Reply button or Reply to All button. In the document application that is opened, write your reply. The original sealed text will be visible in the document application, and will be indented, as will the text of any subsequent sealed replies.
4.
To save the reply text and send it immediately, click the Send Now button. To save the reply text and attach it to an outgoing email, ready for sending later, click the Save and Attach button.
The reply will be sealed to the same context as the original sealed email.
"Forwarding Sealed Email without Amendment" on page 5-4 "Forwarding Sealed Email with Amendments" on page 5-5 "Sealing and Forwarding an Email that was Received Unsealed" on page 5-5
To forward a sealed email without amendment, you need the Open right. See "About Rights" on page 1-2.
Use the following procedure to circulate a sealed email to other recipients (this uses Microsoft Outlook as an example):
1. 2.
Select or open the sealed email. Click Forward. Outlook opens the sealed email so that you can specify the addresses that you want to forward it to. The sealed email is displayed as an attachment.
3. 4.
Specify the recipients, and optionally amend the unsealed introductory text that forms part of all sealed email. Click Send.
The message is forwarded to the specified recipients with its sealed attachment unaltered. The recipients can open the sealed attachment subject to their rights, as usual.
To forward a sealed email with amendments, you need the Seal right and a reply right (Reply or Reply Tracked). See "About Rights" on page 1-2.
Use the following procedure to add some comments to a sealed email before forwarding it to other recipients (this uses Microsoft Outlook as an example):
1.
Open the message and open its sealed attachment. Outlook opens a window to display the sealed attachment. This window is read-only (just as regular email windows are read-only).
2.
Click Forward in the window of the sealed attachment. Outlook creates a new window to display an editable version of the sealed attachment (just as it opens a new, editable window when you click Forward on a regular message).
3.
Edit the sealed email as required. The original sealed email message is indented, just as Microsoft Outlook usually indents forwarded messages in email threads. You can add some text to the top of the message, or amend the text of the original message, as usual.
4.
Microsoft Outlook attaches the amended message to an email that you can address and send as usual.
To seal and forward an email that was received unsealed, you need the Seal right. See "About Rights" on page 1-2.
This option is useful if someone sends you a message that you think should be sealed, or if you want to add some confidential remarks to a message before forwarding it. Use this procedure to forward and seal an email that you received unsealed (this uses Microsoft Outlook as an example):
1. 2. 3. 4.
With the unsealed message open or selected, click Forward. In the message editing window, click the Seal on Send button at any time before sending the message. When you have finished adding any additional text and inserted the addressees, send the message (select the File menu and select Send). From the Select Context dialog, select a context and click OK.
5-5
"About Oracle IRM Fields and Watermarks" on page 6-1 "Adding Oracle IRM Fields in Microsoft Word" on page 6-1 "Adding Oracle IRM Fields in Microsoft Excel" on page 6-3
"Adding an Oracle IRM Field to a Microsoft Word Document" on page 6-1 "Registering Oracle IRM Fields as Microsoft Word Document Properties" on page 6-2 "Using Oracle IRM Fields that have been Registered as Microsoft Word Document Properties" on page 6-2
To complete this procedure you will need the Seal right, and to see transformed fields in sealed documents you will need the Open right as a minimum. See "About Rights" on page 1-2.
Use the following procedure to add an Oracle IRM Field to a Microsoft Word document:
Working With Oracle IRM Fields and Watermarks 6-1
1. 2. 3. 4. 5.
Open an unsealed Microsoft Word document and position the cursor in the document to indicate where you want the field to appear. Select the Insert menu, then select Field. Select Document Information from the list of categories. Select DocProperty from the list of field names. Edit the text field beneath the two lists so that it identifies the Oracle IRM field you want to use. For example: DOCPROPERTY "irm-account-name" For the complete list of Oracle IRM fields, see "List of Oracle IRM Fields" on page 8-1.
6.
Click OK. The string Error! Unknown document property name appears at the cursor. This is not a problem, but can be avoided as described in "Registering Oracle IRM Fields as Microsoft Word Document Properties" on page 6-2.
7. 8.
Save and close the Microsoft Word document. Seal the Microsoft Word document.
When you open the sealed Microsoft Word document, the Oracle IRM field is transformed.
Open an unsealed Microsoft Word document. Select the File menu, then select Properties. Select the Custom tab. Type the name of an Oracle IRM field, for example, irm-account-name. For the complete list of Oracle IRM fields, see "List of Oracle IRM Fields" on page 8-1.
5. 6.
Specify a value, for example, "This field will be updated when sealed". Click OK.
6.2.3 Using Oracle IRM Fields that have been Registered as Microsoft Word Document Properties
Having registered the field, it is available as an option next time you use the Field item on the Insert menu. The specified value appears in the Word document instead of the placeholder string.
Rights:
To complete this procedure you will need the Seal right, and to see transformed fields in sealed documents you will need the Open right as a minimum. See "About Rights" on page 1-2.
Open an unsealed Microsoft Word document and position the cursor in the document to indicate where you want the field to appear. Select the Insert menu, then select Field. Select Document Information from the list of categories. Select DocProperty from the list of field names. Click the Options button, select the Oracle IRM field from the list of properties, then click the Add to Field button. Click OK to close the Field Options dialog. Click OK to close the main Field dialog. The value of the field appears at the cursor.
8. 9.
Save and close the Microsoft Word document. Seal the Microsoft Word document.
When you open the sealed Microsoft Word document, the field is transformed.
To complete this procedure you will need the Seal right, and to see transformed fields in sealed documents you will need the Open right as a minimum. See "About Rights" on page 1-2.
Use the following procedure to add an Oracle IRM field to a cell on a Microsoft Excel spreedsheet:
1. 2. 3. 4. 5. 6.
Open the Microsoft Excel spreadsheet and select the cell in which you want the field to appear. Select the Insert menu, then select Function. From the Function category list, select Oracle IRM Add-in. From the Function name list, select OracleIRM_IRMProp. Click OK. In the Name box of the entry panel, enter the distinguishing portion of the field name. For example, to insert the field irm-account-name, enter "account-name". For the complete list of Oracle IRM fields, see "List of Oracle IRM Fields" on page 8-1.
7. 8.
"About Obtaining and Managing Your Rights" on page 7-1 "Connecting to Oracle IRM Server Manually" on page 7-2 "Synchronizing Your Rights Manually" on page 7-2 "Checking In Your Rights Manually" on page 7-3
Because Oracle IRM Server will store data that allows you to be personally identified, on first contact with the server you will see a dialog asking you to confirm that you have read and accept the privacy policy associated with the sealed document. To use the sealed document, you must accept the privacy policy. You can cancel at this stage, in which case the document will not be shown, and no information about you will be stored on the server. This applies to 11g servers only and differs from previous releases of Oracle IRM.
Depending on how Oracle IRM has been configured, you might be prompted for your Oracle IRM credentials (user name and password). Having requested your rights for the particular document you wanted to open, the software also sets up periodic rights synchronization. This automatic process means that you typically have all of your rights available to you even if Oracle IRM Server is temporarily unavailable. This enables you to work offline without further preparation.
Note:
For offline working, you will usually not be asked for a username and password when accessing a sealed document. This is because authentication for offline working is based on your Windows login.
In some circumstances, you might want to manage your rights manually. For example:
If you are about to disconnect from the network and you want to be sure that your cached rights are as up-to-date as possible, you can synchronize manually.
If you want to change the computer on which you are reading sealed documents (for example, to work on a home PC), you may need to check in your rights to Oracle IRM Server. This is because a license can be used by only one computer at a time, unless Oracle IRM Server has been specifically configured to allow the use of multiple computers. When you check in, any open documents using your rights are closed. Another computer can then synchronize to the server, with the same account, and obtain those rights.
Note:
You will have to synchronize your rights manually if you choose not to save your credentials at the initial login dialog, or if you use form-based authentication.
From the Windows Start menu, select Programs, then Oracle IRM Desktop, then Options. This opens the Oracle IRM Desktop Options dialog. Alternatively, you can right-click the Oracle IRM icon in the notification area (system tray) and select Options.
2. 3.
On the Servers tab, select New. On the Add Server dialog, enter the URL of the server. The URL will be in the form https://irm.example.com/irm_desktop although you will probably have to obtain the exact URL from the administrator of the server. The /irm_desktop extension is required.
4. 5.
To check that the connection can be made, select Validate. To connect to the server, select OK.
If the connection details are valid, the server will be added to the list on the Servers tab.
By following this procedure, your rights will be synchronized on servers where the Update Rights box is checked on the Servers tab of the Oracle IRM Desktop Options dialog. If there are servers that you do not want to synchronize with, uncheck the box on the Servers tab first.
From the Windows Start menu, select Programs, then Oracle IRM Desktop, then Synchronization and Check In. This opens the Oracle IRM Desktop Options dialog.
2.
Alternatively, you can right-click the Oracle IRM icon in the Windows system tray and select Synchronize.
By following this procedure, your rights will be checked in on servers where the Update Rights box is checked on the Servers tab of the Oracle IRM Desktop Options dialog. If there are servers that you do not want to check your rights into, uncheck the box on the Servers tab first.
From the Windows Start menu, select Programs, then Oracle IRM Desktop, then Synchronization and Check In. This opens the Oracle IRM Desktop Options dialog.
2.
Alternatively, you can right-click the Oracle IRM icon in the Windows system tray and select Check In.
"List of Oracle IRM Fields" on page 8-1 "Frequently Asked Questions" on page 8-2 "Troubleshooting" on page 8-5 "Formats" on page 8-6
irm-account-name irm-classification-name
The complete list of Oracle IRM fields that you can consider using is as follows:
irm-time All fields that end with -time will show Coordinated Universal Time (UTC).
irm-time-local All fields that end with -time-local will show the local time, with the number of hours ahead or behind UTC included in parentheses.
irm-locale irm-location irm-mime irm-extension irm-account-uuid irm-account-name irm-creation-time irm-creation-time-local irm-edit-time irm-edit-time-local irm-schema-version irm-classification-name irm-classification-description irm-classification-xml
irm-classification-keyset irm-classification-system irm-classification-time irm-classification-time-local irm-classification-uri irm-host irm-context-itemcode-value irm-context-itemcode-time irm-context-itemcode-time-local irm-context-uuid
Fields with the former SealedMedia_ and OracleIRM_ name prefixes will continue to be recognized for the foreseeable future.
"I have been prompted to log in manually, and I have forgotten my credentials. What do I do?" on page 8-3 "I have logged in successfully but Oracle IRM Desktop says I do not have the rights to access a document. What do I do?" on page 8-3 "When I log in I get a "Cannot connect to server" message. What do I do?" on page 8-3 "I had a sealed document open and it just disappeared. What's happened?" on page 8-3 "I am no longer able to edit the document I am working with. What's happened?" on page 8-3 "I have got two sealed documents from the same originator, but I can access only one of them. Why?" on page 8-4 "Why has my account been locked out?" on page 8-4 "Why can't I work with sealed Microsoft Office documents in the same way I work with normal ones?" on page 8-4 "I have heard that email messages and threads can be sealed, but I don't know how. What do I do?" on page 8-4 "I have heard that I can use templates to create sealed documents, but I don't know how. What do I do?" on page 8-4 "I have heard that I can add distinctive watermarks and headers and footers to sealed documents, but I don't know how. What do I do?" on page 8-4 "How do I save changes I have made to VB code in a sealed document?" on page 8-4
8.2.1 I have been prompted to log in manually, and I have forgotten my credentials. What do I do?
If you have access to a password reset page, browse to that page and use it to reset your password. Otherwise, contact an Oracle IRM Server administrator for assistance. See "Obtaining Technical Support" on page 8-5.
8.2.2 I have logged in successfully but Oracle IRM Desktop says I do not have the rights to access a document. What do I do?
Oracle IRM Desktop usually redirects you to a web page that provides contact details for the person who can give you the rights you need. Contact that person and explain which document you are trying to open, and why you need access to it. They will decide whether it is appropriate to give you any rights. If you see a message saying that your rights are already checked out to another computer, you need to check in your rights from that computer, or wait for the rights to expire.
8.2.3 When I log in I get a "Cannot connect to server" message. What do I do?
If you cannot connect to the Oracle IRM server, there may be a problem with your network connection. If you connect to the Internet from a corporate network, you may need assistance from your network administrator to resolve the problem. Use the Oracle IRM Server Connection Test dialog to diagnose the problem. (Open this dialog from the Test link on the page that reported the error.) If you see this message for only some documents, but can open others, then it is possible that you are being served by multiple Oracle IRM servers, one of which is temporarily unavailable.
8.2.4 I had a sealed document open and it just disappeared. What's happened?
Your rights have expired and you have been redirected to a web page. If you are working offline, then go online and try to open the document again. It is possible that your locally cached rights have expired and that more rights can be obtained as soon as you go online. If your rights have expired permanently, then the web page should provide contact details for the administrators who are authorized to grant you more rights. If you were editing a sealed document online when your rights expired or were revoked, you will lose any unsaved changes. If your rights were downgraded, or if your locally cached rights expired, you are given an opportunity to save changes.
8.2.5 I am no longer able to edit the document I am working with. What's happened?
This is rare, but it is possible that your rights have been reduced since you started working on the document. If you think this might be the case, contact the owner of the context to which the document is sealed. Contact details are usually available by clicking the Online Information icon on the Oracle IRM Desktop toolbar.
8.2.6 I have got two sealed documents from the same originator, but I can access only one of them. Why?
It is quite usual for documents to be sealed to different contexts even if they come from the same originator. For example, you might receive documents sealed to a "Company Confidential" context and others sealed to a "Board Matters" context. It is likely that your rights for these two contexts will be different, such that you can only open one, or you can open them both, but edit only one.
8.2.8 Why can't I work with sealed Microsoft Office documents in the same way I work with normal ones?
The purpose of sealing documents is to control who has access, and who has edit rights. Edit rights are fine-grained, so you might find that you cannot use all of the Microsoft Office features you are familiar with. For example, you might find that you cannot print a sealed document, or that you are prevented from pasting information from one sealed document to another, or that the track changes option is always on. Oracle IRM's goal is that using sealed documents should be very similar to using unsealed documents, if you have the necessary set of rights. Where rights are granted, you should be able to do what you usually do in most cases. In some cases, the need to protect a document might mean that options you are familiar with need to be disabled because they provide security loopholes.
8.2.9 I have heard that email messages and threads can be sealed, but I don't know how. What do I do?
See "Using Sealed Email" on page 5-1. To use sealed email to full advantage, you need to use enable email integration in Oracle IRM Desktop.
8.2.10 I have heard that I can use templates to create sealed documents, but I don't know how. What do I do?
See "Using Sealed Microsoft Office templates" on page 4-12.
8.2.11 I have heard that I can add distinctive watermarks and headers and footers to sealed documents, but I don't know how. What do I do?
See "Working With Oracle IRM Fields and Watermarks" on page 6-1.
Troubleshooting
Use the following procedure to save changes that you have made to VB code in a sealed document:
1. 2.
Select the container document for the VB code document that you have changed. Select Save in the container document.
8.3 Troubleshooting
This section covers the following topics:
"Obtaining Technical Support" on page 8-5 "Proxy Issues" on page 8-5 "Sealed Documents Block Screen Captures" on page 8-6
Close the Oracle IRM Desktop Control Panel, if necessary, using the Cancel button. On the Oracle IRM Desktop toolbar, click the Online Information button.
A browser window opens and provides information about how to get technical support relating to the sealed document you are currently viewing, or trying to view, and the Oracle IRM Server that provides the licenses for that document. The contact information can be different for different sealed documents, especially if the documents come from different servers.
Proxy servers Your network might require Oracle IRM Desktop communications to pass through a particular computer, known as a proxy server. If so, then your browser also needs to use a proxy server, and should already have the required proxy server settings. Oracle IRM Desktop uses the same settings, so proxy servers should not cause problems. However, if your Oracle IRM Desktop is failing to communicate with Oracle IRM Server, and Oracle IRM Desktop tests report that there is a proxy server, report the problem to your network administrator. The use of proxy servers with indexed search integration will be problematic and is not advised.
Firewalls
Formats
A firewall monitors all communications between your local network and remote networks, and prevents any communications that it considers a security risk. Oracle IRM Desktop uses standard web browsing protocol. If your firewall allows you to browse the world wide web, you should also be able to communicate with Oracle IRM Server. If browsing the web is not permitted, you need to talk to your network administrator to arrange to allow communications to Oracle IRM Server. The firewall needs to allow outbound connections to the Oracle IRM Server address and port, and allow responses to such connections. You can use the Oracle IRM Desktop test facility to find out what address and port Oracle IRM Desktop is trying to contact, and then configure the firewall to allow the communication to succeed.
8.4 Formats
Sealed documents have file icons and extensions that are slightly different to their unsealed counterparts. The table below shows the icons and extensions for the supported types of sealed document.
File icon Unsealed extension Sealed extension pdf spdf
html | htm
stml
png
spng
gif
sgif
Formats
File icon
doc
sdoc
ppt
sppt
xls
sxls
dot
sdot
xlt
sxlt
pot
spot
docm
sdocm
dotx
sdotx
dotm
sdotm
Formats
File icon
pptm
spptm
potx
spotx
potm
spotm
xlsx
sxlsx
xlsm
sxlsm
xltx
sxltx
xltm
sxltm
mov
smov
mpeg | mpg
smp1
Formats
File icon
xml
sxml
txt
stxt
rtf
srtf
csv
scsv
doc
seml
rtf
seml
txt
seml
Formats
User Interface
This section contains information about the user interface for Oracle IRM Desktop. The following features are described in this chapter:
"Oracle IRM Desktop Options Dialog" on page -1 "Sealed Email Options Dialog" on page -12 "Oracle IRM Desktop Sealed Document Information Dialog" on page -16 "General Features" on page -19 "Oracle IRM Desktop Toolbars" on page -28
"General Tab" on page -1 "Desktop Sealing Tab" on page -2 "Servers Tab" on page -4 "Update Rights Tab" on page -5 "Search Tab" on page -6 "Email Tab" on page -7 "About Tab" on page -8 "Add Server Dialog" on page -9 "Search Log Configuration Dialog" on page -10 "Synchronization Log Configuration Dialog" on page -10 "Indexing Service Configuration Dialog" on page -11
Open the Oracle IRM Desktop Options dialog by right-clicking the Oracle IRM icon in the system tooltray and selecting Options, or by opening the Microsoft Windows Control Panel and double-clicking the Oracle IRM Desktop Options icon.
User Interface
A-1
Description Normally checked. Unless you are a Citrix user, uncheck to remove the Oracle IRM icon from the row of icons in the bottom right corner of the screen. When double-clicked, this icon opens the Oracle IRM Desktop options dialog. You can also open this dialog from the Windows Control Panel. Citrix users must not uncheck this box. Normally checked. Uncheck to disable the integration of sealing options directly into your Microsoft Office applications. Unchecking this option disables the opening of sealed Microsoft Office files. Normally checked. Uncheck to never show the Oracle IRM messages area in Microsoft Office documents. If checked, the information bar for a particular document can be closed by clicking the black cross on the right of the bar in that document.
Seal To, Reseal To and Unseal options are added to the File menu, and options to create new sealed documents are added to the New submenu. Oracle IRM information is added to the file properties available through Windows Explorer. If you select a file and open its Properties dialog, there is an Oracle IRM tab that shows, for example, which context the document is sealed to. A pop-up description is displayed when you move your mouse pointer over the name of a sealed document (if Windows Explorer is configured to show such pop-ups).
Open by selecting the Desktop Sealing tab on the Oracle IRM Desktop Options dialog.
Description Normally checked. Uncheck to disable desktop sealing. Max Entries: Default value is 5. Enter a number (between 0 and 20) to specify how many recently used contexts are offered when you use the Seal To and Reseal To menu options. When you seal or reseal a file, you need to specify which context you want to seal to. The recently used context list makes it easier to complete this task. Use the Clear button to remove the current value.
User Interface
A-3
Description Use to determine what happens to the original files when sealed versions of them are created. The default is that such files are retained in an unprotected state.
Retain after sealing The original files will not be removed after a sealed version has been created. The original files will be in an unprotected state. This is the default. Move to Recycle Bin The original files will be moved to the Windows Recycle Bin after a sealed version has been created. The moved files can be recovered from the Windows Recycle Bin until the bin has been emptied. The file in the Windows Recycle Bin is in an unprotected state. If selected, the Prompt for confirmation checkbox becomes available and is unchecked. Do not retain The original files will be removed after a sealed version has been created. This is a normal file system deletion, not a complete destruction of the file, so if you are concerned that this does not provide adequate security, you may want to consult your system administrator about further action. If selected, the Prompt for confirmation checkbox becomes available and is checked. Prompt for confirmation Available if the Move to Recycle Bin option or the Do not retain option has been chosen. Select this checkbox if you want to see a prompt before an original file is deleted or moved after a sealed version has been created. The default status changes depending on which of the above options has been selected.
Description Lists the servers that are available for your sealed documents to be synchronized with. Server: The address (URL) of the server. Update Rights: Normally checked. Any checked servers will be affected if you manually check in your rights. See "Update Rights Tab" on page -5. Uncheck a server if you do not want your rights to be checked in for that server. Clear Password For the highlighted server, clears the stored username and password entered from this instance of Oracle IRM Desktop. You will need to clear the password if you have more than one user identity on the server and you wish to change from one identity to another (perhaps because the different identities have different document access rights associated with them). This is applicable only if you selected the Remember My Password checkbox on the Oracle IRM Server Credentials dialog. When you select the Clear Password button, you see a message that tells you either that the stored password has been cleared, or that no password is stored for the server. After the password has been cleared, you will be prompted to supply a username and password the next time that you need to contact the server, for example when opening a sealed document. Edit Opens the Add Server dialog, allowing you to change the URL of the item highlighted in the [Oracle] IRM Servers list. Remove: Removes the highlighted license server from the list. There may be servers that cannot be removed, because of the way they have been configured. New: Opens the Add Server dialog, through which you can add the URL of a server that you want added to the list.
User Interface
A-5
Your locally cached rights allow you to keep working with sealed documents even when you are disconnected from the network and cannot contact the server. Typically, your cached rights allow you to keep using documents for several days before being required to contact the server. Open by selecting the Update Rights tab on the Oracle IRM Desktop options dialog.
Description Updates the locally cached rights with those on the servers, where the Update Rights checkbox has been checked on the Servers tab. Gives up the locally cached rights for sealed documents managed by the servers whose Update Rights checkboxes have been checked on the Servers tab. Opens the Synchronization Log Configuration dialog, through which you can select which synchronization message categories are written to the Windows event log.
Check in (button)
Description Normally checked. Uncheck if you do not want sealed documents to be included in the results of searches. Checking this box will enable the logging and indexing features described below. If searching is enabled, searches generate a log showing the history of successful and unsuccessful searches involving sealed documents. (Unsuccessful searches are typically a result of not having the right to search.) Settings: Click to open the Search Log Configuration dialog, through which you can choose whether the log is displayed, clear the contents of the log, view the log, and set the log location.
Search Messages
Indexed Search
As an advanced option, you can configure the search component to enable the Microsoft Indexing Service to support sealed documents. Indexing can make searches more efficient, but is only relevant if you have a large collection of documents that you want to be able to search frequently. Advanced: Click to open the Indexing Service Configuration dialog, through which you can add details for the Oracle IRM Servers that will handle the indexing.
User Interface
A-7
Description Shows the supported mail clients and whether they are currently enabled for use with Oracle IRM Desktop. Mail clients not available on your computer are shown dimmed. Enabled mail clients are shown checked. To disable a mail client, uncheck it. Click to open the Sealed Email Options dialog, through which you can: Specify a signature to include in sealed email, and whether to use it for new sealed email and/or replies to existing sealed email. Specify a template for sealed email. Specify text that will be placed in the body of an email to which sealed email is attached. Specify how you want sealed replies to appear. Specify whether you want your sealed email to be created in the default format (Microsoft Word), in plain text, or in rich text format.
Settings (button)
Description Information about Oracle IRM Desktop. Opens the Support Information dialog, through which information can be collected that is useful to support staff. Copies the version and copyright information to the clipboard, from where it can be pasted into a text application.
Description Enter the URL of an Oracle IRM server. Attempts to contact the server specified in the input box and validate the URL against the one configured on the Oracle IRM Server. This may not be the same URL entered here, and if successful the URL may be updated to match the one configured on the server. Success or failure is reported in a message dialog. If this option is not used, the URL is validated on clicking OK.
User Interface
A-9
Item Messages
Description For each message type that you want to appear in the Windows event log, make sure that its checkbox is checked.
Description Select either Error messages only or Error messages and success confirmations.
Search indexes created as described in this section are not restricted to the account holding the Search right: they can be read by anyone with access to the host computer.
Open by selecting the Advanced button on the Search tab of the Oracle IRM Desktop options dialog.
Item
Description
[Oracle] IRM Server (list area) This list is initially empty. When populated, the list shows the URL, authentication type, and username of servers that issue licenses for the sealed documents that you want to be able to index. To add a server to the list, click the New button. Clear Password (button) For the highlighted server, clears the stored username and password entered from this instance of Oracle IRM Desktop. You will need to clear the password if you have more than one user identity on the server and you wish to change from one identity to another (perhaps because the different identities have different search and document access rights associated with them). This is applicable only if you selected the Remember My Password checkbox on the Oracle IRM Server Credentials dialog. When you select the Clear Password button, you see a message that tells you either that the stored password has been cleared, or that no passwords are stored for the server. After the password has been cleared, you will be prompted to supply a username and password the next time that you perform a search or index operation that involves a sealed document. Click to open the Oracle IRM Server URL dialog. Through this you can enter the URL of a server that issues licenses for the sealed documents that you want to be able to index. Applies to the server currently highlighted in the list. Click to reopen the Oracle IRM Server URL dialog, through which you can change the details for the server. Click to remove the currently highlighted server from the list.
New (button)
Edit (button)
Remove (button)
The following tabs are used to set options for sealed email in Oracle IRM Desktop:
"Signature Tab" on page -13 "Email Template Tab" on page -13 "Email Body Tab" on page -14 "Sealed Reply Settings Tab" on page -15 "Sealed Email Format Tab" on page -16
Description Text box: Enter the text that will be used as the signature text. Font: Applies to the highlighted text. Click to open the Font dialog, through which you can choose the font, style, size, effects, and script to be used for the signature text. Paragraph: Click to open the Paragraph dialog, through which you can choose the alignment of the current paragraph and whether it is bulleted. Clear: Click to clear the contents of the signature text box.
Normally unchecked. Check to use the signature when creating new sealed emails.
Use when replying to existing Normally unchecked. Check to use the signature when sealed emails (checkbox) replying to existing sealed emails.
template even if you use rich text format for sealed email. A custom template can include Oracle IRM fields or other visual reminders that the email contains sensitive information. Templates are not used if you select plain text format for sealed email. Open by selecting the Email Template tab on the Sealed Email Options dialog.
Description Use Custom Template: Normally unchecked. Check if you have a custom template that you want to use instead of the standard template. Microsoft Word template file box: This is available if you have checked the Use Custom Template box. Enter the location of the file that you want to use, or click the Select button to open a dialog through which you can find the required file.
Description Blank: Select if you want the body of the accompanying unsealed email to be blank. Specify Text: Normally selected. If selected, the accompanying text box is available for entering the text that you want in the email body. The default text is "This is a sealed email.". Overtype the current text with text of your own. Template Body File: Select if you want to use text in an HTML or rich text format file in the body of the email. If selected, the accompanying entry box is available. Enter the location of the file that you want to use, or click the Select button to open a dialog through which you can find the required file.
Description Choose Font: Click to open the font dialog, through which you can select the font, style, size, effects, and script for the text in replies to sealed emails. The font options that you choose are applied to the text in the Sample box. Normally checked.
Item Format
Description Normally set to Microsoft Word. Select a format from the drop-down list.
"Properties Tab" on page -17 "Rights Tab" on page -17 "About Tab" on page -8 "Account Tab" on page -19
Description Shows the properties of the sealed document you are currently viewing. Copies the properties information to the clipboard, from where it can be pasted into a text application.
the name of the context to which the current document is sealed the name of the document user the time and date by which the rights held for the current document have to be refreshed (by synchronization with the server).
Feature (column)
Features equate to rights. The Features column lists the rights that have been allocated to the current user for the current sealed document. Not all rights are listed. Where a main right includes a subsidiary right, and where both rights have been allocated to the current user, only the main right is shown. The following are examples of such compound rights:
The Edit right includes the Edit Tracked, Annotate, Interact, and Formulae rights. The Print to File right includes the Print right.
If you have been allocated a subsidiary right, but not the main right, both rights are shown in the Features column, the subsidiary right with "Yes" against it, and the main right with "No" against it. Allowed (column) ""Yes" shows that the right has been allocated to the current user for the current sealed document. "No" shows that the right has not been allocated. Trusted Destinations (display area) Copy to clipboard (link) You may have to scroll down to see this. If you have the Copy To right, a list of trusted destinations that you can reseal to and copy text to is shown here. You may have to scroll down to see this. Copies the rights information to the clipboard, from where it can be pasted into a text application.
General Features
Description Shows the 10g server against which the current document was sealed. Shows the username for the current user of the sealed document. Opens the Change Password dialog, through which you can change the current users password for accessing sealed documents on the current server. You will need to enter the old password before you are allowed to create a new password. This method of changing a password applies only to 10g servers. Copies the user account information to the clipboard, from where it can be pasted into a text application.
"Oracle IRM Privacy Policy Dialog" on page -20 "Select Context Dialog" on page -20 "Change Item Code Dialog" on page -21 "Status Page Dialog" on page -22 "File Report Dialog" on page -23 "Sealed File Properties (Oracle IRM) Tab" on page -24
General Features
"Oracle IRM Server Connection Test Dialog" on page -25 "Oracle IRM Desktop Support Information Dialog" on page -26 "Change Password Dialog (10g only)" on page -27
Element Link
Description This may link to the privacy policy that applies to the use of the sealed document that is about to be opened. The policy and its accessibility from this link is controlled by the owner of the Oracle IRM Server instance. Initially unchecked. Check if you agree with the statement. If you do not agree, you will not be able to see the sealed document. To proceed, you must check the box even if the server owner has not provided a privacy policy. This becomes available if the "I have read..." box is checked. Select to open the sealed document.
Accept (button)
General Features
Element
Description
Context Selection information Lists the contexts that you have the right to seal or reseal to. area and list box Usually provides a description of each context to help you choose the right one for the document or email you are currently sealing. If the list is blank and you are trying to create a new sealed document, you must first connect to a server that holds context definitions that you have been given permissions to use. The easiest way to set up such a connection is to open a document that has been created by someone else and sealed to the same server and context to which you want to seal your new document. If this is not possible, you can connect to a server through the Servers tab on the Oracle IRM Desktop Options dialog. Do do this, you will need to know the URL of the server that you want to connect to. This will be in the form https://irm.example.com/irm_desktop although you will probably have to obtain the exact URL from the administrator of the server. Refresh Contexts (button) Use to update the list of contexts, if you think it is incomplete. The list can be incomplete if your rights have changed recently such that your local cache is out of date.
General Features
Element
Description
Update Item Code (checkbox) Normally unchecked. Check if you want to update the out of date item code. Item Code Allocate automatically: Select to have a new item code generated by Oracle IRM Desktop. Use this item code: Select if you already have an item code that you want to allocate to this document. Selecting this option activates the accompanying input box, into which you can enter the new item code.
General Features
Description Gives the reasons why this dialog has opened. Rights held on another computer. This usually means that the sealed document cannot be viewed on the current computer until the rights have been checked in on another computer. Click Which Computer to identify the other computer. If the computer is identified as the one you are currently at, it is probable that the device ID has been changed since the licenses were initially requested: in this case, ask the server administrator to check in or reset the rights on the server.
Links to a source of more information about Oracle IRM sealed content. Opens the Oracle IRM Desktop Control Panel. Opens the Oracle IRM Server Connection Test dialog, through which you can test your connection to servers. Opens the Oracle IRM Desktop online help system.
General Features
Element Files (list) Error (display) Details (button) Save to File (button)
Description Lists the files that were not sealed during the recent sealing operation. Shows the error related to the highlighted item in the Files list. Gives the reason why a file was not sealed. Opens a dialog showing more details, if available, about why the file was not sealed. Opens the Save As dialog to let you save the details in this report dialog as a text file.
General Features
Element Scrollable display area Copy to clipboard (link) Test (button) Save Metadata (button)
Description Shows the properties of the document you are currently viewing. Copies the properties information to the clipboard, from where it can be pasted into a text application. Opens the Oracle IRM Server Connection Test dialog, through which you can test your connection to servers. Enables you to save a copy of the sealed file metadata in XML format.
General Features
Element Results
Description Test column. Identifies each test. Usually includes a simple connection test to the server, which requires no authentication of the user. Also usually includes an authenticated connection to the server, for which user credentials may have to be supplied through the Oracle IRM Server Credentials dialog. Result column. Shows the result of the test (Pass, Fail, Canceled). Details button. Select to open a message box with more information about the tests, if there is any. Export button. Select to open a dialog through which you can save the test information as an HTML document.
Test (button)
General Features
Description Initially contains advice and instructions. When the Run button is selected, this area shows the progress, and then gives the names and location of the text files containing the gathered support information. Starts the gathering of support information.
Run (button)
Element Server name (display) User name (display) Old Password (text box)
Description Shows the name of the server on which the current document is sealed, and for which the password change will apply. Shows the name of the current user. Enter the current password for the user shown above.
Description Enter the new password to be used for the user shown above.
Confirm Password (text box) Enter the new password again, in exactly the same way.
"Oracle IRM Desktop Toolbar in Internet Explorer" on page -28 "Oracle IRM Desktop Toolbar in Microsoft Office" on page -28 "Oracle IRM Desktop Toolbar in Microsoft Office 2007" on page -29
The location and appearance of the Oracle IRM Desktop toolbar differs slightly depending on whether you are viewing sealed documents in Internet Explorer or in Microsoft Office applications:
In Internet Explorer, when you are viewing sealed documents such as HTML and PDF, the Oracle IRM Desktop toolbar is shown at the top of the browser area. In Microsoft Office applications, the Oracle IRM Desktop toolbar is shown in the toolbar area, and an additional information bar is optionally displayed beneath it. In Microsoft Office 2007 applications, the Oracle IRM Desktop toolbar is shown as a ribbon in the ribbons area.
Element Control Panel (button) Save (button) Print (button) Synchronization and Check In (button)
Definition Used to open the Oracle IRM Desktop Control Panel. Use this button to save changes to sealed documents while you are working on them, if you have the right to reseal. Use this button to print sealed content, if you have the right to print. Use to open the the Update Rights tab on the Oracle IRM Desktop Options dialog. You can use this tab to update your rights from Oracle IRM Server, or to check in your rights so that they can be used from another device. Use this button to go to a web page where the content originator will provide more information about your account, your licenses and the current content.
Definition Used to open the Oracle IRM Desktop Control Panel. Use to open the the Update Rights tab on the Oracle IRM Desktop Options dialog. You can use this tab to update your rights from Oracle IRM Server, or to check in your rights so that they can be used from another device. Use this button to create a new sealed document or a new sealed document from a sealed template. Use this button to open a dialog through which you can open existing sealed documents. Use this button to create a sealed version of the current unsealed document. Use this button to go to a web page where the content originator will provide more information about your account, your licenses and the current content.
New Sealed (button) Open Sealed (button) Save as Sealed (button) Online Information (button)
You can drag the Oracle IRM Desktop toolbar to a different location within the toolbar area, just as for any other toolbar in Microsoft Office. Beneath the toolbar area in Microsoft Office is the Oracle IRM information bar (if the option to display it has been selected in the Oracle IRM Desktop Options dialog). The information bar usually shows which context the document is sealed to.
New Sealed (button) Open Sealed (button) Synchronization and Check In (button)