Oracle Stellent 10gR3: Information Rights Management Student Guide D53944GC10 Edition 1.0 January 2009 D57573
Author Marsha Hancock Technical Contributors and Reviewers Frank Abela Martin Abrahams Keith Banda Blair Butterworth Ryan Carroll Steve Friedberg Kyle Hatlestad John Kwan Martin R. Lambert Andrew Lowrie John Lundgren Andy Peet David Petersen Jeremy Reilman Ben Staveley-Taylor Simon Thorpe James Wallace-Hadrill Martin Wykes Copyright 2009, Oracle. All rights reserved. Disclaimer This document contains proprietary information and is protected by copyright and other intellectual property laws. You may copy and print this document solely for your own use in an Oracle training course. The document may not be modified or altered in any way. Except where your use constitutes "fair use" under copyright law, you may not use, share, download, upload, copy, print, display, perform, reproduce, publish, license, post, transmit, or distribute this document in whole or in part without the express authorization of Oracle. The information contained in this document is subject to change without notice. If you find any problems in the document, please report them in writing to: Oracle University, 500 Oracle Parkway, Redwood Shores, California 94065 USA. This document is not warranted to be error-free. Restricted Rights Notice If this documentation is delivered to the United States Government or anyone using the documentation on behalf of the United States Government, the following notice is applicable: U.S. GOVERNMENT RIGHTS The U.S. Government s rights to use, modify, reproduce, release, perform, display, or disclose these training materials are restricted by the terms of the applicable Oracle license agreement and/or the applicable U.S. Government contract. Trademark Notice Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Editors Raj Kumar Aju Kumar Graphic Designer Priya Saxena Publishers Jobi Varghese Sujatha Nagendra
Contents 1 Oracle Information Rights Management Objectives 1-2 What Is Oracle Information Rights Management? 1-3 The Digital Information Problem 1-5 Limitations of Current Information Security 1-6 Important Instructions Two Line Title 1-7 Limitations of Repository-Based Information Management 1-8 Important Instructions Two Line Title 1-9 Challenges 1-10 Oracle s Information Rights Management Solution 1-11 IRM Process 1-12 IRM Components 1-14 Typical Oracle IRM Deployment 1-15 Summary 1-16 Practice 1-1: Describing Oracle IRM 1-17 2 Oracle IRM Server Objectives 2-2 Preparing to Install Oracle IRM Server 2-3 IRM Software Requirements 2-6 ABC Pharma s Architecture 2-8 Socket Pooling 2-9 Disabling Socket Pooling 2-10 Verifying IIS Listening Port: Demonstration 2-13 ABC Pharma User Overview 2-14 Installing Oracle IRM Server: Demonstration 2-15 ABC Pharma s Management Console Configuration Overview 2-22 Configuring the Management Console: Demonstration 2-23 IRM Server Administrator Settings 2-25 Configuring Service Dependencies 2-26 Configuring Service Dependencies: Demonstration 2-27 Summary 2-29 Practice 2-1: Installing Oracle IRM Server 2-30 iii
3 IRM Standard Rights Model Objectives 3-2 The Standard Rights Model and the Management Website 3-3 Oracle IRM Administration Model 3-4 ABC Pharma Management Website Configuration Overview 3-6 Installing the Management Website: Demonstration 3-7 Loading the IRM Standard Rights Model: Demonstration 3-12 The Management Website: Logging In: Demonstration 3-15 ABC Pharma User Overview 3-17 The Management Website: Creating Users - Demonstration 3-19 Summary 3-20 Practice 3-1: Installing IRM Management Website 3-21 Practice 3-2: Creating Users 3-24 4 User Groups and Administrative Roles Objectives 4-2 User Groups Overview 4-3 ABC Pharma Group Overview 4-4 The Management Console: Connecting and Disconnecting - Demonstration 4-5 Creating User Groups: Demonstration 4-6 Managing Users in an Existing Group 4-8 Deleting Users and User Groups 4-9 Disabling User Accounts 4-10 Creating Users Using the Management Console: Demonstration 4-11 ABC Pharma s Administrative Roles Overview 4-13 Creating Administrative Roles: Demonstration 4-14 Assigning Administrative Roles: Demonstration 4-19 Summary 4-21 Practice 4-1: Creating User Groups 4-22 Practice 4-2: Creating Administrative Roles 4-23 5 Contexts Objectives 5-2 What Are Contexts? 5-3 Planning Contexts 5-4 ABC Pharma s Context Maps: Overview 5-7 Creating Contexts: Demonstration 5-8 Managing Contexts: Removing Context Managers - Demonstration 5-11 Context Roles and Rights 5-12 Assigning Context User Roles: Demonstration 5-16 Summary 5-18 iv
Practice 5-1: Creating Contexts 5-19 Practice 5-2: Assigning Context Roles 5-20 6 Working with Sealed Documents Objectives 6-2 What Is Oracle IRM Desktop? 6-3 Installing Oracle IRM Desktop: Demonstration 6-4 Connecting to Oracle IRM Server: Demonstration 6-6 About the Classroom Environment 6-10 Synchronizing Oracle IRM Desktop: Demonstration 6-11 Sealing Documents: Demonstration 6-12 Opening Sealed Documents: Demonstration 6-15 The Oracle IRM Toolbar 6-16 Discovering Sealed Document Rights 6-18 The Oracle IRM Desktop Control Panel 6-19 Editing Sealed Documents: Demonstration 6-20 Resealing Sealed Documents 6-22 Enabling Windows Search Integration 6-23 Searching Sealed Documents 6-24 Viewing the Search Audit Log 6-25 Summary 6-26 Practice 6-1: Installing Oracle IRM Desktop 6-27 Practice 6-2: Working with Sealed Documents 6-28 7 Oracle IRM Audit Reports Objectives 7-2 Audit Reports 7-3 Audit Settings 7-6 Running an Audit Report: Demonstration 7-8 Viewing Audit Record Details: Demonstration 7-10 Saving a Report: Demonstration 7-11 Summary 7-12 Practice 7-1: Running an Audit Report 7-13 8 IRM Extensions Objectives 8-2 IRM Installation Categories 8-3 Core System Capabilities 8-4 Windows Authentication: Overview 8-5 Enabling Oracle IRM Windows Authentication Extension 8-7 Activating the Oracle IRM Windows Authentication Extension: Demonstration 8-8 v
Configuring New User Settings: Demonstration 8-9 Creating a User with Windows Authentication: Demonstration 8-10 Converting an Existing User to Windows Authentication: Demonstration 8-11 Summary 8-13 Practice 8-1: Enabling Windows Authentication 8-14 9 IRM Extensions Objectives 9-2 Directory Gateway Synchronization: Overview 9-3 Enabling Oracle IRM Directory Gateway Extension 9-5 Installing Oracle IRM Directory Gateway: Demonstration 9-6 Accessing and Authenticating to Oracle IRM Server 9-8 Gateway Configuration File 9-9 The <source> Element 9-12 LDAP Attribute Mapping 9-16 The <operation> Element 9-18 Compound Operations 9-20 The <job> Element 9-21 Running Jobs 9-22 Running Jobs: Demonstration 9-24 Summary 9-25 Practice 9-1: Installing Directory Gateway 9-26 Practice 9-2: Running a Directory Gateway Job 9-27 10 IRM Core System Customization Objectives 10-2 The Management Website 10-3 The End-User Web Site 10-4 Customizing the Management Website 10-5 Customization Files 10-7 Customizing the Management Website: Demonstration 10-9 Summary 10-10 Practice 10-1: Customizing the Management Website 10-11 11 Standard Rights Model Customizations Objectives 11-2 Standard Rights Model Customizations 11-3 ABC Pharma s Customization Overview 11-5 Activating the Custom Document Roles Extension: Demonstration 11-6 Creating New Template Contexts 11-7 Creating Context Templates 11-8 vi
Creating New Template Contexts: Demonstration 11-9 Adding Rights to the Standard Document Roles 11-11 Adding Rights to the Standard Document Roles: Demonstration 11-13 Modifying the Offline Period: Demonstration 11-14 Modifying the Rights Synchronization Schedule: Demonstration 11-15 Modifying the Account Lock-out Policy: Demonstration 11-16 Modifying the Device Limit Policy: Demonstration 11-17 Summary 11-19 Practice 11-1: Creating Context Templates 11-20 12 Backup and Restore Objectives 12-2 Backup and Restore 12-3 What Needs to be Backed Up? 12-4 Restoring the IRM Server 12-6 Database Namespaces 12-7 Changing to a Different Namespace: Demonstration 12-8 Changing to a Different Database 12-9 Summary 12-10 Practice 12-1: Backing Up IRM Components 12-11 13 Universal Content Management Integration Objectives 13-2 What Is Universal Content Management? 13-3 Universal Content Management: Overview 13-4 Content Server Security 13-6 IRM Persistent Security 13-7 Security Considerations 13-8 IRM Key Components 13-9 UCM IRM Integration 13-10 UCM IRM Integration Installation Procedures 13-11 Oracle IRM Server Configuration 13-12 Enabling Web Services: Demonstration 13-13 Creating the UCM-IRM.user User: Demonstration 13-14 Creating an Oracle IRM Context Template: Demonstration 13-16 Creating the UCM-IRM integration Administrator Role: Demonstration 13-17 Creating the UCM IRM integration Role in the Context Template: Demonstration 13-19 Creating a Standard UCM IRM integration Role in the Context Template: Demonstration 13-20 Designing the Context Model 13-21 vii
Users 13-22 Summary 13-23 Practice 13-1: Configuring IRM Server for UCM Integration 13-24 14 Universal Content Management Integration Objectives 14-2 Installation of the UCM IRM Integration Components 14-3 Logging In to Oracle Content Server: Demonstration 14-4 Installing the UCM IRM Integration Components: Demonstration 14-5 Configuring the Integration Metadata Field: Demonstration 14-8 Accessing the Oracle IRM Integration Administration Page: Demonstration 14-9 Setting IRM Integration Configurations: Demonstration 14-10 Accessing the Configuration Manager Applet: Demonstration 14-11 Defining Contexts in Oracle Content Server: Demonstration 14-12 Adding IRM File Extensions for IIS 6.0: Demonstration 14-14 Checking In and Sealing a File: Demonstration 14-16 Automatically Sealing Content Checked into Oracle Content Server 14-18 Summary 14-20 Practice 14-1: Configuring Content Server for IRM Integration 14-21 Practice 14-2: Sealing Content with Oracle Content Server 14-22 A High Availability Design Objectives A-2 High Availability: Overview A-3 Operational Considerations A-4 Architectural Options A-7 Single Box Solution A-8 Two Box Solution A-9 Three Box Solution A-10 Two IRM Server Solution A-11 Designing the Solution A-12 Typical High Availability Architecture A-14 Summary A-15 B Practices and Solutions viii