Oracle Stellent 10gR3: Information Rights Management

Transcription

1 Oracle Stellent 10gR3: Information Rights Management Student Guide D53944GC10 Edition 1.0 January 2009 D57573

2 Author Marsha Hancock Technical Contributors and Reviewers Frank Abela Martin Abrahams Keith Banda Blair Butterworth Ryan Carroll Steve Friedberg Kyle Hatlestad John Kwan Martin R. Lambert Andrew Lowrie John Lundgren Andy Peet David Petersen Jeremy Reilman Ben Staveley-Taylor Simon Thorpe James Wallace-Hadrill Martin Wykes Copyright 2009, Oracle. All rights reserved. Disclaimer This document contains proprietary information and is protected by copyright and other intellectual property laws. You may copy and print this document solely for your own use in an Oracle training course. The document may not be modified or altered in any way. Except where your use constitutes "fair use" under copyright law, you may not use, share, download, upload, copy, print, display, perform, reproduce, publish, license, post, transmit, or distribute this document in whole or in part without the express authorization of Oracle. The information contained in this document is subject to change without notice. If you find any problems in the document, please report them in writing to: Oracle University, 500 Oracle Parkway, Redwood Shores, California USA. This document is not warranted to be error-free. Restricted Rights Notice If this documentation is delivered to the United States Government or anyone using the documentation on behalf of the United States Government, the following notice is applicable: U.S. GOVERNMENT RIGHTS The U.S. Government s rights to use, modify, reproduce, release, perform, display, or disclose these training materials are restricted by the terms of the applicable Oracle license agreement and/or the applicable U.S. Government contract. Trademark Notice Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Editors Raj Kumar Aju Kumar Graphic Designer Priya Saxena Publishers Jobi Varghese Sujatha Nagendra

3 Contents 1 Oracle Information Rights Management Objectives 1-2 What Is Oracle Information Rights Management? 1-3 The Digital Information Problem 1-5 Limitations of Current Information Security 1-6 Important Instructions Two Line Title 1-7 Limitations of Repository-Based Information Management 1-8 Important Instructions Two Line Title 1-9 Challenges 1-10 Oracle s Information Rights Management Solution 1-11 IRM Process 1-12 IRM Components 1-14 Typical Oracle IRM Deployment 1-15 Summary 1-16 Practice 1-1: Describing Oracle IRM Oracle IRM Server Objectives 2-2 Preparing to Install Oracle IRM Server 2-3 IRM Software Requirements 2-6 ABC Pharma s Architecture 2-8 Socket Pooling 2-9 Disabling Socket Pooling 2-10 Verifying IIS Listening Port: Demonstration 2-13 ABC Pharma User Overview 2-14 Installing Oracle IRM Server: Demonstration 2-15 ABC Pharma s Management Console Configuration Overview 2-22 Configuring the Management Console: Demonstration 2-23 IRM Server Administrator Settings 2-25 Configuring Service Dependencies 2-26 Configuring Service Dependencies: Demonstration 2-27 Summary 2-29 Practice 2-1: Installing Oracle IRM Server 2-30 iii

4 3 IRM Standard Rights Model Objectives 3-2 The Standard Rights Model and the Management Website 3-3 Oracle IRM Administration Model 3-4 ABC Pharma Management Website Configuration Overview 3-6 Installing the Management Website: Demonstration 3-7 Loading the IRM Standard Rights Model: Demonstration 3-12 The Management Website: Logging In: Demonstration 3-15 ABC Pharma User Overview 3-17 The Management Website: Creating Users - Demonstration 3-19 Summary 3-20 Practice 3-1: Installing IRM Management Website 3-21 Practice 3-2: Creating Users User Groups and Administrative Roles Objectives 4-2 User Groups Overview 4-3 ABC Pharma Group Overview 4-4 The Management Console: Connecting and Disconnecting - Demonstration 4-5 Creating User Groups: Demonstration 4-6 Managing Users in an Existing Group 4-8 Deleting Users and User Groups 4-9 Disabling User Accounts 4-10 Creating Users Using the Management Console: Demonstration 4-11 ABC Pharma s Administrative Roles Overview 4-13 Creating Administrative Roles: Demonstration 4-14 Assigning Administrative Roles: Demonstration 4-19 Summary 4-21 Practice 4-1: Creating User Groups 4-22 Practice 4-2: Creating Administrative Roles Contexts Objectives 5-2 What Are Contexts? 5-3 Planning Contexts 5-4 ABC Pharma s Context Maps: Overview 5-7 Creating Contexts: Demonstration 5-8 Managing Contexts: Removing Context Managers - Demonstration 5-11 Context Roles and Rights 5-12 Assigning Context User Roles: Demonstration 5-16 Summary 5-18 iv

5 Practice 5-1: Creating Contexts 5-19 Practice 5-2: Assigning Context Roles Working with Sealed Documents Objectives 6-2 What Is Oracle IRM Desktop? 6-3 Installing Oracle IRM Desktop: Demonstration 6-4 Connecting to Oracle IRM Server: Demonstration 6-6 About the Classroom Environment 6-10 Synchronizing Oracle IRM Desktop: Demonstration 6-11 Sealing Documents: Demonstration 6-12 Opening Sealed Documents: Demonstration 6-15 The Oracle IRM Toolbar 6-16 Discovering Sealed Document Rights 6-18 The Oracle IRM Desktop Control Panel 6-19 Editing Sealed Documents: Demonstration 6-20 Resealing Sealed Documents 6-22 Enabling Windows Search Integration 6-23 Searching Sealed Documents 6-24 Viewing the Search Audit Log 6-25 Summary 6-26 Practice 6-1: Installing Oracle IRM Desktop 6-27 Practice 6-2: Working with Sealed Documents Oracle IRM Audit Reports Objectives 7-2 Audit Reports 7-3 Audit Settings 7-6 Running an Audit Report: Demonstration 7-8 Viewing Audit Record Details: Demonstration 7-10 Saving a Report: Demonstration 7-11 Summary 7-12 Practice 7-1: Running an Audit Report IRM Extensions Objectives 8-2 IRM Installation Categories 8-3 Core System Capabilities 8-4 Windows Authentication: Overview 8-5 Enabling Oracle IRM Windows Authentication Extension 8-7 Activating the Oracle IRM Windows Authentication Extension: Demonstration 8-8 v

6 Configuring New User Settings: Demonstration 8-9 Creating a User with Windows Authentication: Demonstration 8-10 Converting an Existing User to Windows Authentication: Demonstration 8-11 Summary 8-13 Practice 8-1: Enabling Windows Authentication IRM Extensions Objectives 9-2 Directory Gateway Synchronization: Overview 9-3 Enabling Oracle IRM Directory Gateway Extension 9-5 Installing Oracle IRM Directory Gateway: Demonstration 9-6 Accessing and Authenticating to Oracle IRM Server 9-8 Gateway Configuration File 9-9 The <source> Element 9-12 LDAP Attribute Mapping 9-16 The <operation> Element 9-18 Compound Operations 9-20 The <job> Element 9-21 Running Jobs 9-22 Running Jobs: Demonstration 9-24 Summary 9-25 Practice 9-1: Installing Directory Gateway 9-26 Practice 9-2: Running a Directory Gateway Job IRM Core System Customization Objectives 10-2 The Management Website 10-3 The End-User Web Site 10-4 Customizing the Management Website 10-5 Customization Files 10-7 Customizing the Management Website: Demonstration 10-9 Summary Practice 10-1: Customizing the Management Website Standard Rights Model Customizations Objectives 11-2 Standard Rights Model Customizations 11-3 ABC Pharma s Customization Overview 11-5 Activating the Custom Document Roles Extension: Demonstration 11-6 Creating New Template Contexts 11-7 Creating Context Templates 11-8 vi

7 Creating New Template Contexts: Demonstration 11-9 Adding Rights to the Standard Document Roles Adding Rights to the Standard Document Roles: Demonstration Modifying the Offline Period: Demonstration Modifying the Rights Synchronization Schedule: Demonstration Modifying the Account Lock-out Policy: Demonstration Modifying the Device Limit Policy: Demonstration Summary Practice 11-1: Creating Context Templates Backup and Restore Objectives 12-2 Backup and Restore 12-3 What Needs to be Backed Up? 12-4 Restoring the IRM Server 12-6 Database Namespaces 12-7 Changing to a Different Namespace: Demonstration 12-8 Changing to a Different Database 12-9 Summary Practice 12-1: Backing Up IRM Components Universal Content Management Integration Objectives 13-2 What Is Universal Content Management? 13-3 Universal Content Management: Overview 13-4 Content Server Security 13-6 IRM Persistent Security 13-7 Security Considerations 13-8 IRM Key Components 13-9 UCM IRM Integration UCM IRM Integration Installation Procedures Oracle IRM Server Configuration Enabling Web Services: Demonstration Creating the UCM-IRM.user User: Demonstration Creating an Oracle IRM Context Template: Demonstration Creating the UCM-IRM integration Administrator Role: Demonstration Creating the UCM IRM integration Role in the Context Template: Demonstration Creating a Standard UCM IRM integration Role in the Context Template: Demonstration Designing the Context Model vii

8 Users Summary Practice 13-1: Configuring IRM Server for UCM Integration Universal Content Management Integration Objectives 14-2 Installation of the UCM IRM Integration Components 14-3 Logging In to Oracle Content Server: Demonstration 14-4 Installing the UCM IRM Integration Components: Demonstration 14-5 Configuring the Integration Metadata Field: Demonstration 14-8 Accessing the Oracle IRM Integration Administration Page: Demonstration 14-9 Setting IRM Integration Configurations: Demonstration Accessing the Configuration Manager Applet: Demonstration Defining Contexts in Oracle Content Server: Demonstration Adding IRM File Extensions for IIS 6.0: Demonstration Checking In and Sealing a File: Demonstration Automatically Sealing Content Checked into Oracle Content Server Summary Practice 14-1: Configuring Content Server for IRM Integration Practice 14-2: Sealing Content with Oracle Content Server A High Availability Design Objectives A-2 High Availability: Overview A-3 Operational Considerations A-4 Architectural Options A-7 Single Box Solution A-8 Two Box Solution A-9 Three Box Solution A-10 Two IRM Server Solution A-11 Designing the Solution A-12 Typical High Availability Architecture A-14 Summary A-15 B Practices and Solutions viii