HPE ControlPoint. Software Version: 5.5. Administration Guide

Transcription

1 HPE CntrlPint Sftware Versin: 5.5 Administratin Guide Dcument Release Date: July 2017 Sftware Release Date: June 2017

2 Administratin Guide Legal ntices Warranty The nly warranties fr Hewlett Packard Enterprise Develpment LP prducts and services are set frth in the express warranty statements accmpanying such prducts and services. Nthing herein shuld be cnstrued as cnstituting an additinal warranty. HPE shall nt be liable fr technical r editrial errrs r missins cntained herein. The infrmatin cntained herein is subject t change withut ntice. Restricted rights legend Cnfidential cmputer sftware. Valid license frm HPE required fr pssessin, use r cpying. Cnsistent with FAR and , Cmmercial Cmputer Sftware, Cmputer Sftware Dcumentatin, and Technical Data fr Cmmercial Items are licensed t the U.S. Gvernment under vendr's standard cmmercial license. Cpyright ntice Cpyright Hewlett Packard Enterprise Develpment LP Trademark ntices Adbe is a trademark f Adbe Systems Incrprated. Micrsft and Windws are U.S. registered trademarks f Micrsft Crpratin. UNIX is a registered trademark f The Open Grup. This prduct includes an interface f the 'zlib' general purpse cmpressin library, which is Cpyright Jean-lup Gailly and Mark Adler. Dcumentatin updates The title page f this dcument cntains the fllwing identifying infrmatin: Sftware Versin number, which indicates the sftware versin. Dcument Release Date, which changes each time the dcument is updated. Sftware Release Date, which indicates the release date f this versin f the sftware. T check fr recent sftware updates, g t T verify that yu are using the mst recent editin f a dcument, g t help. This site requires that yu register fr an HPE Passprt and sign in. T register fr an HPE Passprt ID, g t Yu will als receive updated r new editins if yu subscribe t the apprpriate prduct supprt service. Cntact yur HPE sales representative fr details. Supprt Visit the HPE Sftware Supprt Online web site at This web site prvides cntact infrmatin and details abut the prducts, services, and supprt that HPE Sftware ffers. HPE Sftware nline supprt prvides custmer self-slve capabilities. It prvides a fast and efficient way t access interactive technical supprt tls needed t manage yur business. As a valued supprt custmer, yu can benefit by using the supprt web site t: Search fr knwledge dcuments f interest Submit and track supprt cases and enhancement requests Access prduct dcumentatin Manage supprt cntracts Lk up HPE supprt cntacts HPE CntrlPint (5.5) Page 2 f 195

3 Administratin Guide Review infrmatin abut available services Enter int discussins with ther sftware custmers Research and register fr sftware training Mst f the supprt areas require that yu register as an HPE Passprt user and sign in. Many als require a supprt cntract. T register fr an HPE Passprt ID, g t T find mre infrmatin abut access levels, g t T check fr recent sftware updates, g t HPE CntrlPint (5.5) Page 3 f 195

4 Administratin Guide Cntents Chapter 1: Intrductin 13 HPE CntrlPint prduct suite 13 The HPE IDOL platfrm 13 HPE CntrlPint architecture 14 Cmpnents 14 HPE CntrlPint Dashbard 14 HPE CntrlPint Engine 14 HPE CntrlPint Data Analysis service 14 HPE CntrlPint IDOL 15 Related dcumentatin 15 Chapter 2: Manage security 17 Intrductin 17 Enable HPE CntrlPint security 17 User rles 18 Set glbal rle-based security 19 Set security n categries, plicies, and repsitries 20 Set security n HPE IDOL categries 20 Set security fr all categries 20 Set permissins fr an individual categry 21 Set security n plicies and repsitries 21 File level security 22 Individual repsitries 22 Repsitry grups 24 Dmain grups and CntrlPint 25 Chapter 3: HPE CntrlPint cnnectrs 26 Security mapping cnsideratins fr cnnectrs 26 Mapped security using OmniGrupServer (OGS) 27 Cnfigure HPE IDOL Server 28 Cnfigure the HPE CntrlPint cnnectr 28 Cnfigure OmniGrupServer 29 Enfrce cnnectr security 30 HPE CntrlPint HPE Cntent Manager cnnectr 31 Summary 31 Prerequisites 31 HPE CntrlPint (5.5) Page 4 f 195

5 Administratin Guide HPE Cntent Manager client sftware 31 Permissins 31 Supprted capability 32 Repsitry plicy types 32 Target lcatin plicy types 32 DeplyTl cnfiguratin 32 Cnfigure the HPE Cntent Manager cnnectr 33 Add a new repsitry f type HPE Cntent Manager 33 Define a target lcatin f type HPE Cntent Manager 34 Security cnsideratins 34 Set up a dcument stre fr Declare in Place plicies 34 Declare business recrds int HPE Cntent Manager 35 Intrductin 36 Create a HPE Cntent Manager rigin 36 Create a target lcatin 37 Target lcatin fr the HPE Cntent Manager repsitry 37 Create and train a HPE CntrlPint filing plicy 38 Select training dcuments frm the HPE Cntent Manager repsitry 38 Select training dcuments thrugh HPE Cntent Manager rigin 39 HPE CntrlPint Exchange Web Service cnnectr 39 Summary 39 Supprted capability 39 DeplyTl cnfiguratin 40 Cnfigure Exchange WS Cnnectr pst deplyment 41 Add a new repsitry f type Exchange 43 HPE CntrlPint Edge Filesystem cnnectr 43 Summary 43 Supprted capability 44 Edge Filesystem Cnnectr cnfiguratin file 44 Plicy summary screen status 44 Define a Direct Target Lcatin 44 HPE CntrlPint File System cnnectr 44 Summary 44 Supprted capability 45 Repsitry plicy types 45 Target lcatin plicy types 45 DeplyTl cnfiguratin 46 Cnfigure File System cnnectr 46 Add new repsitry f type File System 46 Define a target Lcatin f type File System 46 Last access dates 47 Enfrce File System cnnectr security 47 Enable HPE IDOL security 47 Retrieving security grup infrmatin fr the File System cnnectr 49 HPE CntrlPint Hadp cnnectr 49 HPE CntrlPint (5.5) Page 5 f 195

6 Administratin Guide Summary 49 Supprted capability 49 Repsitry plicy types 49 DeplyTl cnfiguratin 50 Cnfigure Hadp cnnectr 51 Adding new repsitry f type Hadp 51 Defining a Target Lcatin f Type Hadp 51 HPE CntrlPint Ntes cnnectr 52 Summary 52 Supprted capability 52 Repsitry plicy types 52 DeplyTl cnfiguratin 52 Cnfigure Ntes cnnectr 53 Adding a new repsitry f type Ntes 53 HPE CntrlPint SharePint 2007 cnnectr 53 Summary 53 Supprted capability 54 Repsitry plicy types 54 Target lcatin plicy types 54 DeplyTl cnfiguratin 54 Cnfigure SharePint 2007 cnnectr 55 Adding New Repsitry f type SharePint Defining a target lcatin f type SharePint HPE CntrlPint SharePint 2010 cnnectr 56 Summary 56 Supprted capability 56 Repsitry plicy types 56 Target lcatin plicy types 56 SharePint 2010 cnnectr Web service 57 Installing the Web service 57 Pst-install steps 57 DeplyTl cnfiguratin 58 Cnfigure SharePint 2010 cnnectr 59 Cnfiguring fr MHTML file creatin 59 Add a new repsitry f type SharePint Define a target lcatin f type SharePint Retrieve security grup infrmatin fr the SharePint 2010 cnnectr 60 Trubleshting 61 HPE CntrlPint SharePint 2013 cnnectr 61 Summary 61 Supprted capability 61 Repsitry plicy types 61 Target lcatin plicy types 62 SharePint 2013 Cnnectr Web Service 62 DeplyTl cnfiguratin 63 HPE CntrlPint (5.5) Page 6 f 195

7 Administratin Guide Cnfigure SharePint 2013 cnnectr 63 Adding a new repsitry f type SharePint Defining a target lcatin f type SharePint HPE CntrlPint SharePint Remte cnnectr 64 Summary 64 Prerequisites 65 Supprted capability 65 Repsitry plicy types 65 Target lcatin plicy types 65 Install Hlds Web Service 66 DeplyTl cnfiguratin 66 Cnfigure SharePint Remte cnnectr 67 Adding a new repsitry f type SharePint Remte 67 Defining a target lcatin f type SharePint Remte 67 Chapter 4: Manage Repsitries 69 Repsitries 69 Repsitry status 70 Add a repsitry 70 Search repsitries 72 Create a repsitry grup 73 Edit repsitry settings 74 Change repsitry status 74 Re-scan a repsitry 75 Create a repsitry subset 75 View repsitry cmpliance 76 Visualize repsitries 76 Generate cluster maps 77 Generate spectrgraphs 77 XML repsitries 78 Limitatins 78 Define the tree ndes 79 Add an XML repsitry 79 Sample XML repsitry 80 Delete a repsitry 81 Chapter 5: Manage plicies 82 Plicies 82 Plicy phases 83 Plicy templates 84 Default templates 84 HPE CntrlPint (5.5) Page 7 f 195

8 Administratin Guide Assign plicies 84 Execute plicies 84 Create a plicy template 85 Create a plicy frm a template 87 Create an Archive plicy 88 Delete Archive plicy 89 Create a plicy 89 Temprary lcatins fr plicy executin 91 Cnsideratins 92 Define a temprary lcatin fr each plicy 92 Search plicies 92 Edit a plicy 93 Edit a plicy template 95 Plicy executin rules 97 Add Rule Builder fields 98 Apply plicies 98 Apply plicies autmatically 98 Apply plicies manually 99 Re-evaluate plicy assignment based n categry changes 99 Remve Plicy Assignment scheduled task 99 Expected behavirs 99 Limitatins 101 View the plicies n items 101 View plicy summaries 101 View items assigned t a plicy 101 View the plicies that apply t an item 102 View summary reprt f items prcessed by a plicy 102 Remve a plicy frm an item 103 Plicy summary 104 Chapter 6: Manage target lcatins 105 Target lcatins 105 Add a target lcatin 106 Direct target lcatins 107 Edit a target lcatin 107 Map repsitry fields t the target lcatin metadata 108 Define file naming cnventins 108 Remve a target lcatin 109 HPE CntrlPint (5.5) Page 8 f 195

9 Administratin Guide Chapter 7: Manage plicy cnflicts 111 Plicy cnflicts 111 Plicy cnflict set 111 Reslve plicy cnflicts 112 Autmatically reslve cnflicts 112 Manually reslve cnflicts 112 Chapter 8: HPE IDOL categries 114 Taxnmy 114 Categries 114 Cntainer Categry 115 Categry training 115 Define a categry 116 Edit a categry 119 Categrize repsitries during the scan 119 View a categry histry 120 View the categry details 120 Delete a categry 121 Exprt individual categries 121 Exprt all categries 122 Imprt a categry hierarchy 122 Chapter 9: Clean up legacy data 123 Intrductin 123 View repsitry data 123 View a summary f repsitry data 123 View data details 125 View duplicated data 125 View data by statistical analysis 126 View data by sensitive grup 126 View data by file type 127 View tagged data 127 Brwse data 128 View cluster maps and spectrgraphs 128 Cmmn file list peratins 128 Search fr files 129 Filter lists 129 Sample lists 130 View files and file prperties 130 Cnfigure last accessed date 130 Cnfigure item prperties 131 Display dcument summaries 132 Exprt item data 132 HPE CntrlPint (5.5) Page 9 f 195

10 Administratin Guide Clean up legacy data 132 Tag files 133 Cllabrate n data analysis thrugh cmments 134 Cnfigure ptential ROT rule sets 134 Cnfigure a file grup 135 Identify ptentially sensitive cntent 136 Re-analyze a repsitry 136 Create and mdify tags 137 Mdify analysis details 137 Select a cnnectr fr manual scan 138 Chapter 10: Scheduled tasks 139 Default scheduled tasks 139 Default scheduled task types 139 Plicies 139 Statistics 140 System 140 Default scheduled task cnfiguratin 140 Schedule plans 141 Add a scheduled task 141 Edit a scheduled task 142 Run scheduled tasks 143 Run tasks immediately 143 Cnfigure HPE CntrlPint schedules fr large systems 143 Change the number f scheduler threads 143 Install multiple HPE CntrlPint schedulers 144 Remve a scheduled task 144 Chapter 11: Issue management 145 Manage issues 145 Resubmit failed items 145 Abrt failed items 145 Chapter 12: Health Checks 147 Check HPE CntrlPint health 147 Run advanced health check reprts 148 Usage details 148 HPE CntrlPint (5.5) Page 10 f 195

11 Administratin Guide Chapter 13: Audit Reprts 150 Chapter 14: Custm prperties 152 Create a custm prperty 152 Update the internal cnfiguratin f custm clumns 152 Add prperty values t repsitries and plicies 153 Chapter 15: Eductin grammars 154 Sample eductin grammar based n the Eurpean Unin's GDPR 154 Overview f custm Eductin grammar tasks 155 Create a custm grammar 155 Edit Ptential Sets t use custm grammar 156 Add a custm grammar t a repsitry 157 Re-analyze the repsitry 157 Remve a grammar 157 Chapter 16: Custmize HPE CntrlPint 158 Change Sample sizes when brwsing a repsitry 158 Limitatins 158 Insert Cnfiguratin 158 Befre yu begin 159 Create an insert cnfiguratin 159 AppSettings in CntrlPintTimer.cnfig 160 Chapter 17: Cnfigure HPE CntrlPint MetaStre fr metadata ingestin 162 Data Mapping 162 MetaStre.MapClumn 162 MetaStre.MapTable 163 MetaStre.MapField 164 Additinal data capture 165 Examples 165 Example 1 single value fr the same dcument 165 Example 2 single value hash fr the same dcument 166 Example 3 multiple values fr the same dcument 168 Example 4 multiple values hashed fr the same dcument 169 Existing data and re-ingestin 170 Field text and advanced prperties 170 Field Text 171 Prperties and Advanced Prperties 171 HPE CntrlPint (5.5) Page 11 f 195

12 Administratin Guide Appendix A: Statistics Exprt Utility 173 Befre yu begin 173 Statistics Exprt Utility cmmand line interface 173 Lcatin 174 Synpsis 174 Optins 174 Examples 175 Appendix B: Archiving cmmand line utility 176 Appendix C: CntrlPint Supprt Utility 179 Appendix D: Repsitry cmmand-line utility 181 Appendix E: Wrkflw cnfiguratin 187 Integratin with HP Prcess Autmatin 187 Cnfigure Wrkflw Settings 187 Create the wrkflw phase actin in a plicy 187 Create the wrkflw dependent phase actins in a plicy 188 Assign the plicy 188 Enable the wrkflw batch scheduled task 188 Sample scenaris 188 Scenari Scenari CPWS 191 Send dcumentatin feedback 195 HPE CntrlPint (5.5) Page 12 f 195

13 Chapter 1: Intrductin This chapter prvides an verview f HPE CntrlPint. HPE CntrlPint prduct suite The HPE IDOL platfrm HPE CntrlPint architecture Related dcumentatin HPE CntrlPint prduct suite HPE CntrlPint delivers a brad set f features targeted at addressing infrmatin management and gvernance challenges within the enterprise. Break the Sils f Infrmatin: Break dwn infrmatin sils and enfrce cnsistent infrmatin gvernance acrss the entire crprate infrastructure. HPE CntrlPint helps yu achieve this using its inbuilt cnnectivity t the mst cmmnly used data repsitries and its capability t address many thers. Apply Infrmatin Lifecycle Management: Analyze all yur dcuments t determine if they hld business value, cnstitute a recrd, r hld n value. Identify rphaned and unknwn data. Develp a taxnmy and apply a cmplex plicy t impse the mst apprpriate retentin t each dcument. Enfrce Cmpliance and Security: Use the HPE CntrlPint analysis and entity extractin capability t identify ptentially sensitive dcuments that need t be prtected. Leverage the available plicies t ensure that all the dcuments are prperly secured in the desired lcatins. Optimize Strage and Applicatin Perfrmance: Manage and delete data that hld n value. Implement a hierarchical strage management strategy t ensure a better utilizatin f yur strage and t imprve yur backup and applicatin perfrmance. HPE CntrlPint enables yu t understand the value f yur data, and thereby gain cntrl f yur valuable infrmatin and achieve better data management. The HPE IDOL platfrm Fr the purpses f full text analysis, HPE CntrlPint utilizes the HPE Intelligent Data Operating Layer (HPE IDOL), which gathers and prcesses unstructured, semi-structured, and structured infrmatin in any frmat frm multiple repsitries using a glbal relatinal index. As a next step, HPE IDOL frms a cntextual understanding f the infrmatin in real time, cnnecting disparate data surces tgether based n the cncepts cntained within them. Fr example, HPE IDOL can autmatically link cncepts cntained in an message t a recrded phne cnversatin, which can be assciated with a stck trade. This infrmatin is then imprted int a frmat that is easily searched, adding advanced retrieval, cllabratin, and persnalizatin t any applicatin that integrates the technlgy. Fr mre infrmatin n HPE IDOL, see the HPE IDOL Cncepts Guide and the HPE IDOL Server Getting Started Guide. HPE CntrlPint (5.5) Page 13 f 195

14 Administratin Guide Chapter 1: Intrductin HPE CntrlPint architecture HPE CntrlPint has a web applicatin user interface. Functinality is available thrugh several Dashbards in the user interface. Cmpnents HPE CntrlPint includes the fllwing cmpnents. HPE CntrlPint Dashbard HPE CntrlPint Engine HPE CntrlPint Data Analysis HPE CntrlPint IDOL Cnnectrs HPE CntrlPint Dashbard The HPE CntrlPint Dashbard interface allws users t view repsitries, establish and review allcatin f plicies, administer HPE IDOL categries, and mnitr system activity and health, depending n their rles. The fllwing services are included in the HPE CntrlPint. HPE CntrlPint Web Interface is an IIS Web applicatin that serves as the HPE CntrlPint user interface CPWS (ptinal). Web services that prvide access t HPE CntrlPint resurces fr HPE CntrlPint Wrkflw capability HPE CntrlPint Engine The HPE CntrlPint Engine prvides the central capability t manage plicy cntent within an rganizatin. The fllwing services are included in the HPE CntrlPint Engine. HPE CntrlPint Engine service is a Windws service that executes all scheduled tasks CallbackHandler is an IIS Web applicatin that receives ntificatins frm HPE IDOL cnnectrs CntrlPintLicenseService is a Windws service that tracks the data usage details f yur CntrlPint envirnment. The data ppulates the Usage Details page in the CntrlPint Dashbard. This service is separate frm the CntrlPint License Server service packaged with CntrlPint which cntrls the HPE IDOL licensing. HPE CntrlPint Data Analysis service HPE CntrlPint Data Analysis allws yur rganizatin t analyze, understand, and deal with the unstructured data cntained in legacy repsitries.hpe CntrlPint uses HPE IDOL t analyze the dcuments in the repsitries, analyze them, and presents the results f the statistical analysis visually in a dynamic user interface. HPE CntrlPint (5.5) Page 14 f 195

15 Administratin Guide Chapter 1: Intrductin HPE CntrlPint IDOL HPE CntrlPint IDOL delivers an analysis f all cntent that HPE CntrlPint manages. All repsitries that are t be cnsidered by HPE CntrlPint fr plicy applicatin must be scanned int HPE IDOL. The fllwing cnnectr types can be deplyed frm HPE CntrlPint IDOL Deply Tl: The HPE CntrlPint IDOL service cntains the central index. The HPE CntrlPint Cntent services index all f the cntent and serves search requests. The HPE CntrlPint HPE Cntent Manager cnnectr service scans and perfrms actins n items in HPE Cntent Manager repsitries. This cnnectr type has a cnnectr framewrk deplyed alngside. NOTE: With the release f HPE CntrlPint 5.4, the HPE Cntent Manager cnnectr replaces the HPE Recrds Manager and HPE TRIM cnnectrs. The HPE Cntent Manager cnnectr is cmpatible with HPE Cntent Manager, HPE Recrds Manager and HPE TRIM repsitries. The HPE CntrlPint OGS (Omni Grup Server) service cllects and aggregates user and grup security infrmatin frm a variety f repsitries. The HPE CntrlPint Exchange Cnnectr service scans and perfrms actins n items in Exchange repsitries. This cnnectr type has a cnnectr framewrk deplyed alngside. The HPE CntrlPint FileSystem Cnnectr service scans and perfrms actins n items in file shares. This cnnectr type has a cnnectr framewrk deplyed alngside. The HPE CntrlPint Hadp Cnnectr service scans and perfrms actins n items in Hadp repsitries. This cnnectr type has a cnnectr framewrk deplyed alngside. The HPE CntrlPint SharePint 2007 Cnnectr service scans and perfrms actins n items in SharePint 2007 sites. This cnnectr type has a cnnectr framewrk deplyed alngside. The HPE CntrlPint SharePint 2010 Cnnectr service scans and perfrms actins n items in SharePint 2010 sites. This cnnectr type has a cnnectr framewrk deplyed alngside. The HPE CntrlPint SharePint 2013 Cnnectr service scans and perfrms actins n items in SharePint 2013 sites. This cnnectr type has a cnnectr framewrk deplyed alngside. The HPE CntrlPint SharePint Remte Cnnectr service scans and perfrms actins n items in SharePint 2016 and SharePint Remte sites. This cnnectr type has a cnnectr framewrk deplyed alngside. The HPE CntrlPint DataAnalysis Stre service analyzes, understands, and deals with the unstructured data cntained in legacy repsitries The HPE CntrlPint Distributed Cnnectr service distributes cnnectr calls t the apprpriate cnnectr The HPE CntrlPint IDOL License Server service cntrls the licensing f all HPE CntrlPint functinality Related dcumentatin The fllwing dcuments prvide mre detail n HPE CntrlPint. HPE CntrlPint (5.5) Page 15 f 195

16 Administratin Guide Chapter 1: Intrductin HPE CntrlPint Installatin Guide HPE CntrlPint Best Practices Guide HPE CntrlPint Administratin Guide HPE CntrlPint Remte Analysis Agent Technical Nte HPE CntrlPint Supprt Matrix The fllwing dcuments prvide mre detail n HPE IDOL cnnectrs. HPE IDOL Distributed Cnnectr Administratin Guide HPE IDOL Exchange Cnnectr (CFS) Administratin Guide HPE IDOL File System Cnnectr (CFS) Administratin Guide HPE IDOL Hadp Cnnectr (CFS) Administratin Guide HPE IDOL SharePint 2007 Cnnectr (CFS) Administratin Guide HPE IDOL SharePint 2010 Cnnectr (CFS) Administratin Guide HPE IDOL SharePint 2013 Cnnectr (CFS) Administratin Guide HPE IDOL SharePint Remte Cnnectr (CFS) Administratin Guide HPE CntrlPint (5.5) Page 16 f 195

17 Chapter 2: Manage security This chapter explains hw t add users, hw t apply rle-based security and hw file level security wrks. Intrductin Enable HPE CntrlPint security User rles Set glbal rle-based security Set security n categries, plicies, and repsitries File level security Intrductin HPE CntrlPint supprts a variety f rle-based security settings that yu can use t cntrl user access t repsitries, plicies, HPE IDOL categries, and administrative tasks. Use the HPE CntrlPint Cnfiguratin Manager utility t identify a System Administratr and an LDAP server/base Distinguished Name. The System Administratr can then cnfigure system-wide security settings. Yu can apply rle-based security settings either glbally r at the plicy, repsitry, r categry level. Lwlevel security settings verride the glbal settings. Enable HPE CntrlPint security Yu enable HPE CntrlPint rle-based security in the HPE CntrlPint Cnfiguratin Manager. T enable rle-based security 1. Open the HPE CntrlPint Cnfiguratin Manager utility. 2. On the Security tab, select Enable Security. 3. In the System Administratr Accunt sectin, assign a HPE CntrlPint System Administratr by entering the Dmain and the Username. 4. In the Active Directry Settings sectin, identify the LDAP server by entering the Server name and Base DN. 5. Click Deply. The slutin redeplys. NOTE: In additin t the LDAP server fr the Active Directry Base DN, file-based security is als supprted. See File level security, n page 22. Example Fr a Base DN entered as file:\\machinename\flder\userfile.xml, the sample file structure can be as fllws: HPE CntrlPint (5.5) Page 17 f 195

18 Administratin Guide Chapter 2: Manage security <?xml versin="1.0" encding="utf-8"?> <users> <user name="hpe\$agnes.hpe CntrlPint" displayname="\$agnes.hpe CntrlPint"> <grup name="test1" displayname="test Grup 1" /> </user> <user name="hpe\$billy.hpe CntrlPint" displayname="$billy.hpe CntrlPint" > <grup name="test1" displayname="test Grup 1" /> <grup name="test2" displayname="test Grup 2" /> </user> <user name="hpe\$ciaran.hpe CntrlPint" displayname="$ciaran.hpe CntrlPint" > <grup name="test1" displayname="test Grup 1" /> </user> </users> User rles System Administratrs can assign a cmbinatin f permissins t users depending n their rles in the rganizatin. There are fur majr categries f user rles, and divisins within thse categries. Administratin permissins determine which features users can access in the user interface. Administratrs can set permissins at the categry, plicy, r repsitry level, which verride the glbal permissin settings. Cnsle Administratr has access t the Administratin dashbard, and can cntrl HPE CntrlPint security settings. Categry permissins apply t HPE IDOL categries. Categry Administratr has full categry permissins. Categry Assigner can view categries and assign them t plicies. Categry Editr can edit, publish, create, and secure categries. Categry Viewer can view categries. Plicy permissins apply t HPE CntrlPint plicies. Plicy Administratr can create, view, edit, secure, and delete plicies. Plicy Apprver can view, manually assign, and apprve plicies, and can remve plicies frm dcuments. Plicy Assigner can view and manually assign plicies. Plicy Editr can create, view, edit, secure, and delete plicies. Plicy Viewer can view plicies. Repsitry permissins apply t repsitries. Fr individual repsitry cntent access, repsitry level rles take precedence ver system level rles. Fr repsitry grup cntent access, system level rles take precedence ver repsitry level rles. HPE CntrlPint (5.5) Page 18 f 195

19 Administratin Guide Chapter 2: Manage security Repsitry Administratr has full repsitry permissins. Repsitry Crdinatr can tag analyzed repsitries and manually assign plicies t cntent. They can als view cntent they d nt have HPE IDOL security permissins t view. Repsitry Manager can manually tag r perfrm actins n repsitries. Repsitry Owner can analyze the repsitry, view the analysis infrmatin and manually tag a dcument. They can als view cntent that they have HPE IDOL security permissin t view. Repsitry User can manually assign plicies t cntent; can nly view cntent that they have HPE IDOL security permissins t view. Repsitry Viewer can view repsitries. Set glbal rle-based security Glbal rle-based security settings determine the default permissins that users have. Administratrs can cmbine user rles as desired t fit the prfile f each user r user grup. NOTE: Only administratrs can set glbal rle-based security settings. T set glbal user rles 1. On the Administratin dashbard, click Security Management. The All Security page pens. It lists the names and permissins f all users. 2. T filter the permissins by security type, select an item frm the All Security list. Available security types include: Administratin, Categry, Plicy, Repsitry, r the default, All Security. T add a user r user grup 1. Click Add. 2. Enter the name f the user r user grup in the text bx. 3. Click t verify the name against the LDAP server. Yu can nly add valid user r grup names. Add as many users r user grups as needed. T edit permissins 1. Click Edit fr the desired user r grup. The Permissins dialg bx appears. 2. Select ne r mre rles t assign t the user r grup, and then click Apply. The selected rles are displayed in the Permissins clumn. If yu assign mre than ne rle t a user r grup, the rle with the highest permissin level takes precedence. Fr mre details n rles, see User rles, n the previus page 3. Click Save. The security settings are applied and are inherited by all categries, repsitries, and plicies. HPE CntrlPint (5.5) Page 19 f 195

20 Administratin Guide Chapter 2: Manage security Set security n categries, plicies, and repsitries Categries, plicies, and repsitries inherit their security settings frm the glbal settings. Smetimes it is necessary t verride glbal permissins. Fr example, yu may want t allw an emplyee t view all repsitries, yet nly give permissin t manage a single repsitry. The System Administratr must set user permissins initially, but after the System Administratr assigns Categry Administratrs, Plicy Administratrs, and Repsitry Administratrs permissins, thse Administratrs can set permissins n individual categries, plicies, and repsitries respectively. Set security n HPE IDOL categries A categry inherits the security settings frm its parent categry. Tp-level categries inherit security settings frm the All Categry glbal security settings, which the System Administratr r any Categry Administratr can set. Setting security n an individual categry verrides the inheritance f settings frm the parent categry. Set security fr all categries The HPE CntrlPint System Administratr must assign permissins initially. After ne r mre users is assigned the Categry Administratr rle, thse users can als mdify All Categry settings. Yu can set All Categry security in tw places: frm the glbal security settings page. See Set glbal rle-based security, n the previus page. frm the Categries dashbard. T set user permissins fr all categries 1. On the Categries dashbard, click abve the categry list. The Secure All Categries dialg bx pens. 2. (Optinal) T add a user a. Click Add. b. Enter the name f the user in the text bx and click t verify the name against the LDAP server. Yu can nly add valid user names. Add as many users as are needed. 3. T edit user permissins, click Edit by the desired user. A user rle dialg bx pens. 4. Select the categry user rle r rles t assign t the user. Fr details n user rles, see User rles, n page 18. The selected rles are displayed in the Permissins clumn. If yu assign mre than ne rle t a user, the rle with the highest permissin level takes precedence. 5. When yu finish adding users and setting permissins, click OK. HPE CntrlPint (5.5) Page 20 f 195

21 Administratin Guide Chapter 2: Manage security The security settings apply and are inherited by all categries. Set permissins fr an individual categry Individual categries inherit security settings frm their parents. In sme cases yu may want t verride the inheritance. Fr example, if a user has a Categry Viewer rle at the All Categries level, yet yu want t give the user Categry Editr privileges fr ne categry. HPE CntrlPint System Administratrs and Categry Administratrs can set categry-level security. T set permissins n an individual categry 1. Select a categry frm the taxnmy, and then click Security ( ). The Secure <Categry Name>dialg bx pens. 2. (Optinal) T add a user a. Click Add. b. Enter the name f the user in the text bx, and then click t verify the name against the LDAP server. Yu can nly add valid user names. Add as many users as needed. 3. T edit user permissins, click Edit by the desired user. A user rle dialg bx pens. 4. Select ne r mre Categry user rles t assign t the user. Fr details n user rles, see User rles, n page 18. The selected rles are displayed in the Permissins clumn. If yu assign mre than ne rle t a user, the rle with the highest permissin level takes precedence. 5. When yu finish adding users and setting permissins, click OK. The security settings apply and are inherited by any subcategries. Set security n plicies and repsitries Repsitries and Plicies inherit their security settings frm the glbal security settings, hwever, yu can set permissins n individual repsitries r plicies, which verride the glbal settings. T set security n an individual repsitry r plicy 1. On the Repsitries r Plicies dashbard, click the menu icn ( ) n the repsitry r plicy panel. 2. Click Security. The Security dialg bx pens. 3. (Optinal) T add a user a. Click Add. b. Enter the name f the user in the text bx, and the click t verify the name against the HPE CntrlPint (5.5) Page 21 f 195

22 Administratin Guide Chapter 2: Manage security LDAP server. Yu can nly add valid user names. Add as many users as yu require. 4. T edit user permissins, click Edit by the desired user. A user rle dialg bx pens. 5. Select ne r mre Repsitry r Plicy user rles t assign t the user. Fr details n user rles, see User rles, n page 18. The selected rles are displayed in the Permissins clumn. If yu assign mre than ne rle t a user, the rle with the highest permissin level takes precedence. 6. Click OK. The security settings apply. File level security There are differences in the file level security between Metadata repsitries and HPE IDOL repsitries. Fr individual repsitry cntent access, repsitry level rles take precedence ver CntrlPint system level rles. See Individual repsitries. Repsitry cntent display is based n NT security but plicy assignment respects the Plicy rles. NOTE: Repsitry wners f Analyzed repsitries can view all dcuments in the repsitry. Fr repsitries that are nt in the Analyzed state, the Repsitry wner's view f the dcuments is based n NT security. Fr repsitry grup cntent access, CntrlPint system level rles take precedence ver individual repsitry level rles. See Repsitry grups, n page 24. Individual repsitries NOTE: Users and permissins are captured fr File System repsitries nly and may nt be available fr any ther type f repsitries. Metadata-based repsitry Cnfiguratin setting (EnableSecureCntent) CntrlPint Deplyment security enabled Rle Has right t file/flder View Cntents Access (result) N Y Any rle Y Y Y (as expected) Y Any rle N Y Y (as expected) Y Y Rep Viewer Y Y Y HPE CntrlPint (5.5) Page 22 f 195

23 Administratin Guide Chapter 2: Manage security Metadata-based repsitry, cntinued Cnfiguratin setting (EnableSecureCntent) CntrlPint Deplyment security enabled Rle Has right t file/flder View Cntents Access (result) Y Rep User Y Y Y Y Y Y Y Rep Owner Rep Crdinatr Rep Manager Rep Admin Y Y Y Y Y Y Y Y Y Y Y Y Y Rep User N N N Y Y Y Y Y Rep Viewer Rep Owner Rep Crdinatr Rep Manager Rep Admin N N N N N N N Y Y N Y Y N Y Y Cntent-based repsitry Cnfiguratin setting (EnableSecureCntent) CntrlPint Deplyment security enabled Rle IDOL security enabled Has right t flder? View cntents Access (result) N N N N Y Y (as expected) Y Y Rep Viewer Rep Admin Y N Y Y (as expected) Y N Y Y (as expected) Y Y Rep Y N N N (as HPE CntrlPint (5.5) Page 23 f 195

24 Administratin Guide Chapter 2: Manage security Cntent-based repsitry, cntinued Cnfiguratin setting (EnableSecureCntent) CntrlPint Deplyment security enabled Rle IDOL security enabled Has right t flder? View cntents Access (result) Viewer expected) Y Rep User Y N N N (as expected) Y Y Y Y Y Rep Owner Rep Crdinatr Rep Admin Rep Manager Rep Viewer Y N N N (as expected) Y N Y Y (as expected) Y N Y Y (as expected) Y N Y Y (as expected) Y Y Y Y Y Rep User Y Y Y Y Y (Rep Admin) Y (Rep Viewer) Y (Rep Admin) Rep Admin Rep Viewer Y Y Y Y (as expected) N Y Y Y (as expected) N Y Y Y (as expected) Repsitry grups The fllwing describes hw dcuments are displayed in repsitry grups and subgrups fr the varius system level rles. Repsitry users and repsitry viewers cannt see dcuments when they select a repsitry grup level. T see dcuments, navigate t the sub-repsitries. Repsitry grups System level rle Respect NT security? Dcument displayed in repsitry grup? Dcument displayed in subgrup f repsitry? Rep Crdinatr N Y All Rep HPE CntrlPint (5.5) Page 24 f 195

25 Administratin Guide Chapter 2: Manage security Repsitry grups, cntinued System level rle Respect NT security? Dcument displayed in repsitry grup? Dcument displayed in subgrup f repsitry? Manager Rep Admin Rep Owner Y - when the repsitry grup is nt Analyzed. N - when the repsitry grup is Analyzed. N Same as Repsitry User/Viewer when analyzed Same as Repsitry Crdinatr/Manager/Administratr when analyzed Rep User Rep Viewer Y N Based n sub repsitry's level rle f the user. Dmain grups and CntrlPint The CntrlPintcmpnents query Active Directry t get all f the dmain grups a user belngs t, and uses that t determine if dcuments can be viewed. In rder t imprve perfrmance, CntrlPint caches the dmain grups in CntrlPint.db.CPCacheUserSecurity fr a certain amunt f time. CntrlPint uses the cached grups fr security instead f querying Active Directry every time. The SecurityCacheTimeOut setting in \Dashbard\Web.cnfig defines the valid time perid f the grups cache. The default is set t 1 hur. T frce CntrlPintStrage Optimizer t query Active Directry, yu can delete the cache recrd in CntrlPint.db.CPCacheUserSecurity fr a dmain user s that the next time that user lgs in, it must query Active Directry. The EnableAddDmainAdmin setting in \Dashbard\Web.cnfig is used fr when the dmain user belngs t Administratrs grup, manually add DOMAIN ADMIN grup t grups list. Yu can turn if ff based n yur Active Directry setup. HPE CntrlPint (5.5) Page 25 f 195

26 Chapter 3: HPE CntrlPint cnnectrs This sectin prvides infrmatin n the supprted HPE CntrlPint cnnectrs. NOTE: Bth Cnnectr and CFS shuld be run by users with access t the data that needs t be analyzed. Furthermre, all access rights shuld be given t users running bth these services. This is applicable t all cnnectrs. Security mapping cnsideratins fr cnnectrs Mapped security using OmniGrupServer (OGS) Enfrce cnnectr security HPE CntrlPint HPE Cntent Manager cnnectr HPE CntrlPint Exchange Web Service cnnectr HPE CntrlPint Edge Filesystem cnnectr HPE CntrlPint File System cnnectr HPE CntrlPint Hadp cnnectr HPE CntrlPint Ntes cnnectr HPE CntrlPint SharePint 2007 cnnectr HPE CntrlPint SharePint 2010 cnnectr HPE CntrlPint SharePint 2013 cnnectr HPE CntrlPint SharePint Remte cnnectr Security mapping cnsideratins fr cnnectrs The Securityinf returned by Cmmunity and used by HPE CntrlPint nly cntains the user accunt. If yu are wrking with files where the permissin is assigned by grup name, it will nt wrk by default. This is because the HPE IDOL index nly stres the grup names. When HPE CntrlPint uses the Securityinf, the user name will nt match with the grup name, s nthing is returned. The slutin is t use the OmniGrupServer (OGS) t retrieve the security grups. OGS needs t be cnfigured t refresh LDAP and cmbine n a 24 hur cycle. Fr example, cnfigure a task fr OGS t refresh LDAP and cmbine n a 24 hurs cycle using the fllwing parameters GrupServerRepeatSecs=86400 Example GrupServerCycles set t -1 (cycles indefinitely). [Default] //Default settings - these can als be set per repsitry GrupServerStartTime=nw GrupServerCycles=0 GrupServerRepeatSecs=86400 HPE CntrlPint (5.5) Page 26 f 195

27 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs GrupServerCaseInsensitive=TRUE GrupServerMaxDataStreQueue=5000 GrupServerIncremental=TRUE [Repsitries] //Cmma separated list f repsitries which are queried when the repsitry parameter nt specified in actin GrupServerDefaultRepsitries=Cmbine Number=3 0=SharePint2010 1=LDAP 2=Cmbine [SharePint2010] GrupServerJbType=Cnnectr CnnectrHst=lcalhst CnnectrPrt=7024 CnnectrTask=GrupTask [LDAP] GrupServerLibrary=gs_ldap.dll LDAPServer=lcalhst LDAPPrt=389 LDAPBase=DC=hme,DC=david, DC=lcal LDAPType=MAD LDAPBindMethd=NEGOTIATE GrupServerCycles=-1 [Cmbine] GrupServerJbType=Cmbine GrupServerSectins=SharePint2010,LDAP GrupServerStartDelaySecs=10 GrupServerCycles=-1 Mapped security using OmniGrupServer (OGS) This sectin details the steps t capture the security grups fr varius HPE CntrlPint cnnectrs using OmniGrupServer (OGS). Yu must cnfigure the fllwing cmpnents: 1. HPE IDOL Server. Yu cnfigure the HPE IDOL Server t prcess the security infrmatin cntained in each dcument. Yu must als cnfigure user security s that IDOL sends user and grup infrmatin t the frnt-end applicatin when a user lgs in. See Cnfigure HPE IDOL Server, n the next page. 2. Cnnectr (CFS). Yu cnfigure the cnnectr t include security infrmatin, Access Cntrl Lists (ACLs) in the dcuments that are indexed int HPE IDOL Server. Yu must als add a field t each dcument that identifies each security type. See Cnfigure the HPE CntrlPint cnnectr, n the next page. HPE CntrlPint (5.5) Page 27 f 195

28 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs 3. OmniGrupServer (OGS). Yu cnfigure OGS t retrieve and then cmbine cnnectr and NT r LDAP grup infrmatin. OGS retrieves cnnectr infrmatin by sending the SynchrnizeGrups actin t the cnnectr. OGS extracts NT security infrmatin directly frm Active Directry. See Cnfigure OmniGrupServer, n the next page. Cnfigure HPE IDOL Server T integrate with the OGS, the IDOL Server must update the specific cnnectr with an OGS Repsitry (LDAP, SharePint2010 and s n) alng with the OGS Server infrmatin. The fllwing is a sample IDOL cnfiguratin file where bth the SharePint and NT (file system) sectins are updated with the OGS infrmatin. The required settings are indicated by bld fnt. CntrlPint IDOL.cfg: [NT] GrupServerHst=OGSHst GrupServerPrt=OGSPrt GrupServerRepsitry=LDAP [LDAP] LDAPServer=LDAPServerHst LDAPPrt=389 [SharePint] GrupServerHst=OGSHst GrupServerPrt=OGSPrt GrupServerRepsitry=Cmbine NOTE: After specifying these cnfiguratin settings, restart the HPE IDOL services. Cnfigure the HPE CntrlPint cnnectr OGS imprts the security grup infrmatin frm the cnnectrs by triggering a fetch actin called SynchrnizeGrups. As lng as the cnnectr has the OGS infrmatin which includes the hstname, prt and repsitry, the cnnectr can uplad this infrmatin int the OGS Server. The fllwing are several samples f cnnectr cnfiguratin files: CntrlPint FileSystem Cnnectr.cfg [Ingestin] IngestActins=META:ENFORCESECURITY=True,META:CPREPOSITORYTYPEID=3,META:SECURITYTYPE =NT [FetchTasks] MappedSecurity=True GrupServerHst=OGSHst GrupServerPrt=OGSPrt GrupServerRepsitry=NT HPE CntrlPint (5.5) Page 28 f 195

29 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs [TaskRepTest] IngestActins= META:ENFORCESECURITY=True,Meta:SECURITYTYPE=NT,META:CPREPOSITORYTYPEID=3,META:CPINDEXINGTYPE=1,META:AUTN_NO_ EXTRACT=true,META:AUTN_CATEGORIZE=false,META:AUTN_EDUCTION=false SP 2010 Cnnectr.cfg [Ingestin] IngestActins=META:ENFORCESECURITY=True,META:CPREPOSITORYTYPEID=2,META:SECURITYTYPE =SharePintSecurity [FetchTasks] Number=1 GrupServerHst=OGSHst GrupServerPrt=OGSPrt GrupServerRepsitry=sharepint2010 SynchrnizeGrupsNumber=1 SynchrnizeGrups0= Grups_TaskSP2010 EncryptACLEntries=False MappedSecurity=TRUE [Grups_TaskSP2010] SecurityType=SharePintSecurity IngestActins=META:CPREPOSITORYTYPEID=2,META:AUTN_NO_EXTRACT=true,META:AUTN_ CATEGORIZE=false,META:AUTN_EDUCTION=false [TaskSP2010] SecurityType=SharePintSecurity IngestActins= META:SecurityType=SharePintSecurity,META:ENFORCESECURITY=TRUE,META:CPREPOSITORYTYPEID=2,META:AUTN_NO_EXTRACT=true,META:AUTN_ CATEGORIZE=false,META:AUTN_EDUCTION=false NOTE: After specifying these cnfiguratin settings, restart the Cnnectr services. Cnfigure OmniGrupServer OmniGrupServer (OGS) extracts the security grup infrmatin based n the cnfiguratins defined fr its repsitries. Each repsitry has its security grups imprted directly frm the servers r thrugh the cnnectrs. Security grups can be merged using the Cmbine parameter, as shwn in the sample cnfiguratin file belw. The LDAP grups can be merged with the SharePint grups, which can be used by HPE CntrlPint t apply security at the repsitry level. CntrlPint OGS.cfg [Repsitries] GrupServerDefaultRepsitries=Cmbine Number=3 0=Sharepint2010 HPE CntrlPint (5.5) Page 29 f 195

30 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs 1=LDAP 2=Cmbine [LDAP] GrupServerLibrary=gs_ldap.dll LDAPServer=LDAPServerHst LDAPPrt=389 LDAPBase=DC LDAPType=MAD LDAPBindMethd=NEGOTIATE GrupServerAllUserGrups=NT AUTHORITY\AUTHENTICATED USERS GrupServerCycles=-1 UseDmainPrefix=True DmainPrefix=DOMAINPREFIX [Sharepint2010] GrupServerLibrary=gs_text.dll GrupServerIncremental=TRUE Textfile=SharePint2010GS.txt CnnectrHst=SharePintCnnectrHst CnnectrPrt=SharePintCnnectrPrt CnnectrTask= Grups_TaskSP2010 [Cmbine] GrupServerJbType=Cmbine GrupServerSectins=LDAP,Sharepint2010 GrupServerStartDelaySecs=10 GrupServerCycles=-1 NOTE: After specifying these cnfiguratin settings, restart the OmniGrupServer services. Enfrce cnnectr security By default, all users in HPE CntrlPint are able t view the metadata f all items, regardless f HPE IDOL security permissins. The SecureMetaStreCntent setting in Dashbard\Web.cnfig cntrls the view and dwnlad ptins, depending n the IDOL security. T enfrce security 1. Navigate t the fllwing lcatin: \Prgram Files\Hewlett Packard Enterprise\CntrlPint\Dashbard\web.cnfig 2. Lcate the <appsettings> sectin. 3. Edit the "SecureMetaStreCntent" value frm "false" t "true". Example HPE CntrlPint (5.5) Page 30 f 195

31 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs <appsettings> <add key="securemetastrecntent" value="true"/> </appsettings> 4. Save the file. HPE CntrlPint HPE Cntent Manager cnnectr NOTE: With the release f HPE CntrlPint 5.4, the HPE Cntent Manager cnnectr replaces the HPE Recrds Manager and HPE TRIM cnnectrs. The HPE Cntent Manager cnnectr is cmpatible with HPE Cntent Manager, HPE Recrds Manager and HPE TRIM repsitries. Fr mre infrmatin n upgrading the HPE Recrds Manager and HPE TRIM cnnectrs t the HPE Cntent Manager cnnectr, see the HPE CntrlPint Installatin Guide. Summary The HPE Cntent Manager cnnectr can be used t analyze and execute plicy n dcuments and files held in the fllwing repsitries: HPE Cntent Manager HPE Recrds Manager HPE TRIM Prerequisites HPE Cntent Manager client sftware Install the HPE Cntent Manager client sftware n the server hsting the HPE CntrlPint Cntent Manager Cnnectr and the server hsting the CntrlPint. Fr mre infrmatin n installing the HPE Cntent Manager client sftware, see the HPE Cntent Manager Installatin and Setup Guide. Permissins The fllwing permissins are required t set up the HPE Cntent Manager Cnnectr: The user running the HPE Cntent Manager Cnnectr accunt must be added as trusted accunt in HPE Cntent Manager Enterprise Studi. It impersnates the TRIMServices accunt when retrieving items frm the Cntent Manager dataset fr indexing int CntrlPint IDOL. The user running the HPE Cntent Manager Cnnectr accunt must be als present as a valid lcatin in HPE Cntent ManagerHPE Cntent Manager. HPE CntrlPint (5.5) Page 31 f 195

32 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs This is needed when yu brwse a repsitry f the Cntent Manager type, thrugh the CntrlPint Cnsle. The user running the CntrlPint Web Applicatin Pl must be added as a trusted accunt in HPE Cntent Manager Enterprise Studi. The CntrlPint Web App pl user impersnates the user lgged in CntrlPint t retrieve the list f Origins frm the dataset. Supprted capability Repsitry plicy types The fllwing plicy types can be executed n cntent in a repsitry f type HPE Cntent Manager: Declare Declare in Place Dispse Hld Release Secure Leave Secure Remve Secure Shrtcut Tag Update N N Yes Yes Yes Yes Yes N Yes N Target lcatin plicy types An HPE Cntent Manager lcatin can be established as a target lcatin fr relevant plicy types. The fllwing plicy types can utilize target lcatins f type HPE Cntent Manager: Declare Declare in Place Secure Leave Secure Remve Yes Yes Yes Yes DeplyTl cnfiguratin When selecting an HPE Cntent Manager Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: HPE CntrlPint (5.5) Page 32 f 195

33 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Number f cnnectrs in Grup Deplyment Hsts The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. The hst(s) n which t deply the cnnectr(s). When mre than ne cnnectr has been specified, the fllwing are examples f valid entries fr this field: ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. Cnfigure the HPE Cntent Manager cnnectr The fllwing settings can be adjusted manually by editing the cnnectr cnfiguratin file. Fr mre infrmatin, see the HPE Cntent Manager Cnnectr Administratin Guide r access the fllwing URL: hst>:7300/a=help If yu need t use a Declare in Place plicy, see Set up a dcument stre fr Declare in Place plicies, n the next page. Setting Sectin Descriptin AlternateWrkgrupServer AlternateWrkgrupServerPrt Username TaskName r FetchTasks TaskName r FetchTasks TaskName r FetchTasks Set this t specify the name f an alternate HPE Cntent Manager server. The alternate server is used if the server specified by WrkgrupServer is nt available. Set this t specify the prt f an alternate HPE Cntent Manager server. The alternate server is used if the server specified by WrkgrupServer is nt available. The username t use t lg n t the HPE Cntent Manager server. If nt set, the identity that the cnnectr is running under is used. Add a new repsitry f type HPE Cntent Manager When adding a new repsitry f type HPE Cntent Manager, yu must supply the fllwing parameters: Wrkgrup Server Name Wrkgrup Server Prt The hst name r IP address f the HPE Cntent Manager server. The prt number used by the HPE Cntent Manager server. The default value is HPE CntrlPint (5.5) Page 33 f 195

34 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Dataset Identifier The ID f the HPE Cntent Manager database t analyze r manage. Define a target lcatin f type HPE Cntent Manager When adding a new target lcatin f type HPE Cntent Manager, yu can prvide the fllwing settings: Wrkgrup Server Name Wrkgrup Server Prt Dataset Identifier Origin Name The hst name r IP address f the HPE Cntent Manager server. The prt number used by the HPE Cntent Manager server. The default value is The ID f the HPE Cntent Manager database t analyze r manage. The name f an rigin f type HPE CntrlPint defined by the target HPE Cntent Manager system. The rigin prvides default values t be used when adding cntent. Fr mre infrmatin n creating an rigin in HPE Cntent Manager, see Create a HPE Cntent Manager rigin, n page 36. NOTE: If any f the abve parameters are nt included in the target lcatin definitin, yu must prvide them in any plicy definitin that references this target lcatin. This allws a single HPE Cntent Manager target lcatin t be used by multiple plicies, each declaring t different lcatins in the file plan. Fr mre infrmatin, see Declare business recrds int HPE Cntent Manager, n the next page. Security cnsideratins By default, all users in HPE CntrlPint are able t view the metadata f all items in a repsitry, regardless f HPE IDOL security permissins. Hwever, when yu attempt t view a dcument in a Cntent Manager repsitry, yu will nly be able t view the cntent yu have permissins t, based n yur HPE Cntent Manager permissins set. Set up a dcument stre fr Declare in Place plicies Declare in Place plicies make a cpy f an item and insert it int HPE Cntent Manager. Next, a Hld is placed n the riginal item in the surce repsitry, therefre nly surce repsitries that supprt Hlds shuld be used with this plicy. Fr example, HPE Cntent Manager and SharePint. HPE CntrlPint (5.5) Page 34 f 195

35 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Yu must cmplete the fllwing tasks t cnfigure SharePint and HPE Cntent Manager fr Declare in Place plicies: 1. In SharePint, activate the Hld and ediscvery feature by using Site Settings > Site Actins > Manage site features. Fr mre infrmatin, see yur SharePint dcumentatin. NOTE: Yu must cnfigure this feature befre defining a dcument stre. If yu have already cnfigured the feature in SharePint, skip t step In HPE Cntent Manager, define a Dcument Stre t pint t the repsitry n which t place the Hld. a. Click File >New and select the Dcument Stre tab. b. Select CFS Cnnectr. c. Enter the fllwing details: i. Name. The name f yur SharePint repsitry within CntrlPint. ii. AUTN_GROUP. The AUTN_GROUP prperty value fr the repsitry type. Fr example: SharePint2010, if yu are using SharePint NOTE: T determine the AUTN_GROUP prperty value fr the repsitry type: Query the list f cnnectrs by brwsing t: n the Distributed Cnnectr. The utput lists the AUTH_GROUP value fr all registered cnnectrs s yu can determine the exact value t use. iii. Cnfig Inf. The server name the Distributed Cnnectr is installed n and its prt in the fllwing frmat: hstname:prt Fr example: where <IDOLDCServer> is the server hsting the IDOL Distributed Cnnectr 7000 is the default distributed cnnectr prt d. Click Test t ensure that yu receive a successful message. e. Click OK. The Declare in Place plicy is executed successfully. Declare business recrds int HPE Cntent Manager NOTE: With the release f HPE CntrlPint 5.4, the HPE Cntent Manager cnnectr replaces the HPE Recrds Manager and HPE TRIM cnnectrs. HPE CntrlPint (5.5) Page 35 f 195

36 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs The HPE Cntent Manager cnnectr is cmpatible with HPE Cntent Manager, HPE Recrds Manager and HPE TRIM repsitries. HPE CntrlPint has specialized capabilities that enable business recrds t be identified autmatically within an rganizatin's cntent and declared intelligently int an HPE Cntent Manager repsitry. Business recrd identificatin and filing cntinues after the initial indexing thrugh Assignment using Categry and Plicy Executin. This ensures that new cntent that enters an rganizatin and that matches the recrd identificatin rules is als captured autmatically as a business recrd. Intrductin Create a HPE Cntent Manager rigin Create a target lcatin Intrductin HPE Cntent Manager is an integrated Enterprise Cntent Management (ECM) system capable f managing the full range f crprate infrmatin. T identify business recrds autmatically and declare them int HPE Cntent Manager, perfrm the fllwing tasks: In the HPE Cntent Manager desktp client 1. Create an Origin f the HPE CntrlPint type. See Create a HPE Cntent Manager rigin, belw. In HPE CntrlPint Cnsle 1. Create an HPE IDOL categry trained t recgnize business recrds. See Define a categry 2. Create a HPE CntrlPint target lcatin fr the HPE Cntent Manager server. See Add a target lcatin, n page Create a HPE CntrlPint plicy. See Create a plicy, n page 89. Create a HPE Cntent Manager rigin An rigin is a way t define settings t use when HPE CntrlPint files its recrds t the HPE Cntent Manager recrds repsitry. The rigin specified fr recrd insertin delivers infrmatin such as Recrd Type, Classificatin, Hme, Owner, and the Retentin Schedule t use. Yu create an HPE Cntent Manager Origin f type HPE CntrlPint with the HPE Cntent Manager desktp Client. T create an HPE Cntent Manager Origin f type HPE CntrlPint 1. Open the HPE Cntent Manager desktp client. 2. On the Tls > Recrd menu, click Origins. The Origins - all dialg bx appears. 3. Right click and select New > CntrlPint. The New Origin dialg bx appears. 4. Enter r specify the apprpriate infrmatin n the fllwing tabs f the New Origin dialg. On the General tab, enter a name fr the rigin in the Name bx. HPE CntrlPint (5.5) Page 36 f 195

37 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs On the Defaults tab: Recrd Type. Required. Every recrd in HPE Cntent Manager has a Recrd Type. Classificatin. Indicates the [lace in the file plan in which t file the recrds. Hme. Specify the recrd Hme lcatin. Owner. Specify the recrd Owner lcatin. Creatr. Specify the recrd Creatr lcatin. Authr. Specify the recrd Authr lcatin. Retentin Schedule. Specify the retentin schedule t use fr filed recrds. Lcatin Match Type. Select the actin fr HPE Cntent Manager t perfrm if it finds a lcatin in the insert package. On the Cntainers tab: Select Create cntainers when imprting dcuments t use cntainers when inserting dcuments int HPE Cntent Manager. Recrd Type fr cntainer. The cntainer HPE Cntent Manager uses fr the inserted recrds. Limit cntainer sizes. Select fr HPE Cntent Manager t fill a cntainer with a specified number f items and then autmatically create a new cntainer. If selected, the Maximum number f cntained items field becmes available. Select the maximum number f items frm the Maximum cntents list. Create cntainers fr different date created ranges. Select fr HPE Cntent Manager t create cntainers fr inserted items whse Date Created is within a certain range. If selected, the Create new date range cntainer fr every: list becmes available. Select the range t use. Create cntainers fr each different wner lcatin. Select Create cntainers fr each different wner lcatin. On the Ntes tab: 5. Click OK. Optinal ntes describe when t select this Origin. The new rigin is created. Create a target lcatin A target lcatin prvides infrmatin n hw t cnnect t the required HPE Cntent Manager wrkgrup server. Target lcatins can be used acrss multiple plicies. Yu can create a Target Lcatin thrugh the Administratin dashbard. Fr mre infrmatin, see Add a target lcatin, n page 106. Target lcatin fr the HPE Cntent Manager repsitry Filing recrds int HPE Cntent Manager requires a target lcatin f type HPE Cntent Manager. HPE CntrlPint (5.5) Page 37 f 195

38 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs In the CntrlPint Administratin dashbard, create a Target Lcatin f type HPE Cntent Manager by selecting HPE Cntent Manager frm the Cnnectr Grup list. Fr mre intfrmatin n creating target lcatins, see Add a target lcatin, n page 106. Prvide the fllwing infrmatin fr a Target Lcatin f type HPE Cntent Manager. Cnnectr Cnfig Sectin Wrkgrup Server Name Wrkgrup Server Prt Dataset Identifier Origin Name Relates t the FetchTask in the HPE Cntent Manager cnnectr. The default FetchTask name is MyTask1. The hst name r IP address f the HPE Cntent Manager server. The prt number used by the HPE Cntent Manager server. The default value is The ID f the HPE Cntent Manager database t analyze r manage. The name f an rigin f type HPE CntrlPint defined by the target HPE Cntent Manager system. The rigin prvides default values t be used when adding cntent. This can be blank t frce it t be identified in each HPE CntrlPint plicy that files recrds t this target lcatin. Fr mre infrmatin n the HPE Cntent Manager cnnectr, see HPE CntrlPint HPE Cntent Manager cnnectr, n page 31. Create and train a HPE CntrlPint filing plicy Recrds are generally subdivided by recrd type r by recrd class. Typically, each recrd type is assciated with an individual HPE CntrlPint Filing Plicy that cntrls hw t file the recrds. The plicy is trained using an HPE IDOL categry that was trained using apprpriate dcuments, such as existing recrds that were filed manually by end users. Fr example, t file business recrds, yu create a HPE CntrlPint Filing Plicy and assciate it with an HPE IDOL categry t identify business recrds within yur rganizatin's cntent. Yu train the categry using filed examples f these recrds. Tw methds can create a trained plicy fr filing recrds int HPE TRIM: select training dcuments frm the HPE Cntent Manager repsitry select training dcuments thrugh HPE Cntent Manager Origin Select training dcuments frm the HPE Cntent Manager repsitry Yu can cnfigure an HPE Cntent Manager repsitry that indexes cntent int HPE CntrlPint s HPE IDOLserver as a repsitry in HPE CntrlPint. After cnfiguratin, all HPE CntrlPint features available fr repsitries are enabled, including the ability t brwse the HPE Cntent Manager recrds repsitry. T select training dcuments frm HPE Cntent Manager repsitry 1. Brwse the HPE Cntent Manager repsitry t identify apprpriate training dcuments. HPE CntrlPint (5.5) Page 38 f 195

39 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs The tp-level ndes, Classificatin and Origins (nly thse f type HPE CntrlPint), are visible in the HPE Cntent Manager repsitry. 2. Select the training dcuments. 3. Select Train New frm the Actins menu. 4. Select Plicy, r select the desired Plicy template under Plicy Using Template. The new plicy screen pens. Yu created a new HPE IDOL categry, trained it using the selected dcuments, and assciated it with the new plicy. Yu can make further refinements t the HPE IDOL categry by clicking the Training link in the Plicy Training sectin. NOTE: Yu must assign a name t the plicy befre yu can refine the categry. The categry is autmatically assigned the same name as the plicy. Select training dcuments thrugh HPE Cntent Manager rigin Yu can als create and train a plicy thrugh HPE Cntent Manager Origin. Select training dcuments thrugh HPE Cntent Manager Origin 1. On the Plicies dashbard, click In the Assign T sectin, click Add Categry. 3. Select the Training tab, and then click Identify Training Dcuments. The Training Selectin dialg bx pens. If the plicy files t HPE Cntent Manager using a HPE Cntent Manager rigin, the dialg bx displays the cntent currently filed t the classificatin defined in the rigin. 4. Select the training dcuments. HPE CntrlPint Exchange Web Service cnnectr Summary The Exchange Web Service (WS) cnnectr can be used t analyze and execute plicy n messages, appintments, cntacts, and ther items frm an Exchange server. The fllwing versins f Exchange are supprted: Micrsft Exchange 2007 SP1 Micrsft Exchange 2010 Micrsft Exchange 2010 SP1 Micrsft Exchange 2010 SP2 Micrsft Exchange 2013 Supprted capability The fllwing plicy types can be executed n cntent in an Exchange repsitry: HPE CntrlPint (5.5) Page 39 f 195

40 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Declare Declare in Place Dispse Hld Release Secure Leave Secure Remve Secure Shrtcut Tag Update Yes N Yes N N Yes Yes N Yes N It is nt pssible t use an Exchange lcatin as a target lcatin. DeplyTl cnfiguratin When selecting an Exchange Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: Number f cnnectrs in Grup Deplyment Hst(s) LDAP and Exchange Web Service User Dmain LDAP and Exchange Web Service User Username LDAP and Exchange Web Service User Passwrd The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. The hst(s) n which t deply the cnnectr(s). When mre than ne cnnectr has been specified, the fllwing are examples f valid entries fr this field: ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. Dmain fr accunt t be used when accessing Active Directry and Exchange web services. Accunt t be used when accessing Active Directry and Exchange web services. Passwrd fr accunt t be used when accessing Active Directry and Exchange web services. HPE CntrlPint (5.5) Page 40 f 195

41 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Cnfigure Exchange WS Cnnectr pst deplyment When cnfiguring an Exchange cnnectr in HPE CntrlPint DeplyTl, yu must enter a user, dmain, and passwrd. This accunt is used by default t access bth Active Directry and the Exchange web services. It is pssible t cnfigure different accunts manually by setting the fllwing parameters in the cnnectr cnfiguratin file: LDAPUsername and LDAPPasswrd t specify the accunt t be used t access Active Directry. WSUsername, WSPasswrd, and WSDmain t specify the accunt t be used t access Exchange web services. Cnsider the fllwing fr the accunt used t access Exchange web services: 1. The accunt must have its wn mailbx. 2. The accunt must have permissin t retrieve infrmatin frm ther user s mailbxes using ne f the fllwing methds: Enable impersnatin rights. Yu must grant the user the permissin t impersnate ther users. In additin, yu must set Impersnat bxOwner t true in the cnnectr cnfiguratin file. Grant the user full access permissin t each mailbx t be managed r analysed. Yu must set Impersnat bxOwner t false in the cnnectr cnfiguratin file. Grant the user Full Details read access t each flder in each mailbx t be managed r analysed, including all flders belw the rt f the mailbx. Yu must set Impersnat bxOwner t true in the cnnectr cnfiguratin file. Cnsider the fllwing script as an example f hw t change permissins and what permissins might be needed: ## save and run as createuser.ps1 ## Read input frm shell $newusername = Read-Hst "Enter New User Name" $new = Read-Hst "Enter New User Address" $passwrd = Read-Hst "Enter Passwrd Fr New User" -AsSecureString ## Create User and Mailbx # Passwrd can expire, change t nt expire in user settings if crprate plicy allws New-Mailbx -Name $newusername -Alias $newusername -UserPrincipalName $new -SamAccuntName $newusername -Passwrd $passwrd -DisplayName $newusername - ResetPasswrdOnNextLgn $false ## Add t grups (Sme errrs are expected fr alternate versin) # Exchange 2010/ add user t grups Add-RleGrupMember "Organizatin Management" -Member $newusername Add-RleGrupMember "Public Flder Management" -Member $newusername HPE CntrlPint (5.5) Page 41 f 195

42 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs #Exchange add user t grups Add-ExchangeAdministratr -identity $newusername -Rle rgadmin Add-ExchangeAdministratr -identity $newusername -Rle publicflderadmin ## Grant permissins and revke denies if present Get-ExchangeServer Add-ADPermissin -User $newusername -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-exch-stre-admin - Cnfirm:$False Get-ExchangeServer Remve-ADPermissin -User $newusername -Deny -ExtendedRights Receive-As -Cnfirm:$False Get-MailbxDatabase Add-ADPermissin -User $newusername -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-exch-stre-admin -Cnfirm:$False ## Fr Frms registratin Get-PublicFlder -recurse Add-PublicFlderClientPermissin -User $newusername - AccessRights Owner -Cnfirm:$False ## Sme envirnments require additinal security (Uncmment if needed) # Get-Mailbx Add-MailbxPermissin -user $newusername -AccessRights FullAccess The script may generate sme errrs, displayed in red r yellw text. Sme errrs are expected. The Mailbx Management user accunt is created using Exchange Management Shell. The fllwing settings can be adjusted manually by editing the cnnectr cnfiguratin file. Mre infrmatin is prvided in the HPE IDOL Exchange Cnnectr (CFS) Administratin Guide r by accessing the fllwing URL: hst>:7600/a=help Setting Sectin Descriptin DeleteMde Default Set t 2 if yu want items remved by a Dispse plicy t be mved t the user s Deleted Items flder. By default, items are permanently deleted. ExchangeVersin Impersnat bxOwner LDAPPasswrd LDAPUsername TaskName, FetchTasks r Default TaskName, FetchTasks r Default TaskName r Set t Exchange2010_SP1, Exchange2010, r Exchange2007_SP1 if yu are using an early versin f Exchange. The default setting is Exchange2010_SP2. Set t true if yu are cnfiguring the accunt used t access Exchange web services t have impersnatin rights. Otherwise, d nt set, r set t false (default). By default, the user specified by the Username setting (r the identity that the cnnectr is running under when HPE CntrlPint (5.5) Page 42 f 195

43 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Setting Sectin Descriptin FetchTasks nt set) is used when running LDAP queries against active directry. Set these parameters when a different user must be used fr AD access. The passwrd field can be encrypted. Username, Passwrd, Dmain WSDmain WSPasswrd WSUsername TaskName, FetchTasks r Default TaskName, FetchTasks r Default Specifies the user t be used t access bth Exchange web services and Active Directry. Can be verridden by LDAPUsername r WSUsername. If n user is defined, the identity that the cnnectr is running under is used. By default, the user specified by the Username setting (r the identity that the cnnectr is running under when nt set) is used when authenticating against the Exchange web service. Set these parameters when a different user must be used fr authenticatin. The passwrd field can be encrypted. Add a new repsitry f type Exchange When adding a new repsitry f type Exchange, the fllwing parameters must be supplied: Webservice URL LDAP Path The URL f the Exchange web service The LDAP path t search fr users with mailbxes t analyze If Default Authenticatin is set t NO, the fllwing additinal parameters must be supplied. The credentials specified here are used fr this repsitry in place f the details entered when the cnnectr was cnfigured in DeplyTl. Dmain Username Passwrd The dmain f the user specified by Username The user name t use t cnnect t LDAP and Exchange web services The passwrd t use t cnnect t LDAP and Exchange web services HPE CntrlPint Edge Filesystem cnnectr Summary The Edge Filesystem cnnectr is used t run Archive plicies n dcuments and files held in Windws and Linux file shares. HPE CntrlPint (5.5) Page 43 f 195

44 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Supprted capability Adding an Edge Filesystem repsitry allws yu t select N Analysis as the Analysis type. This ptin is nly available fr Edge Filesystem repsitries and is nt supprted fr ther File System repsitries. Fr mre infrmatin, see Add a repsitry, n page 70. Edge Filesystem repsitries d nt supprt applying plicies t archived cntent. Edge Filesystem Cnnectr cnfiguratin file The Edge Filesystem Cnnectr cnfiguratin file fr Windws and Linux has a new cnfig sectin "EnableSSL", which is disabled by default. [EnableSSL] SSLEnabled=false If HPE IDOL n the HPE CntrlPint server is already using HTTPS, the Edge Filesystem Cnnectr shuld als use HTTPS in rder t be listed n the cnnectin list n the Repsitry page in the HPE CntrlPint Dashbard. All ther HTTPS cnfiguratins t run the Edge Filesystem Cnnectr n HTTPS are similar t the cnfiguratin n a regular Filesystem cnnectr. Plicy summary screen status Fr Edge Filesystem Cnnectrs using Archive stub plicies and the Direct Plicy Executin setting, the Plicy summary screen in the Cnsle des nt display plicy status. Fr plicy status, check the Edge Filesystem Cnnectr lgs. Define a Direct Target Lcatin T define a Direct Target Lcatin fr Edge Filesystem repsitries, yu can archive t a path. Path The path f the disk lcatin t be used fr dcuments secured t this target lcatin. Fr Windws, the path is the UNC path. HPE CntrlPint File System cnnectr Summary The file system cnnectr can be used t analyze and execute plicy n dcuments and files held in Windws file shares. HPE CntrlPint (5.5) Page 44 f 195

45 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs File share type fr indexing NetApp vlumes n the fllwing shares: CIFS NFS Ntes Cnfigure the File System Cnnectr t run with the dmain accunts that have cmplete access t the NetApp vlume fr scanning dcuments. NOTE: The File System Cnnectr CIFS mapping fr UNIX shares n NetApp strage nly captures the Windws-based permissins. NTFS Supprted capability Repsitry plicy types The fllwing plicy types can be executed n cntent in a repsitry f type File System: Declare Declare in Place Dispse Hld Release Secure Leave Secure Remve Secure Shrtcut Tag Update Yes N Yes N N Yes Yes Yes Yes N Target lcatin plicy types A file system lcatin can be established as a target lcatin fr relevant plicy types. The fllwing plicy types can utilize target lcatins f type File System: Declare Declare in Place Secure Leave Secure Remve N N Yes Yes HPE CntrlPint (5.5) Page 45 f 195

46 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Secure Shrtcut Yes DeplyTl cnfiguratin When selecting a File System Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: Number f cnnectrs in Grup Deplyment Hst(s) The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. The hst(s) n which t deply the cnnectr(s). When mre than ne cnnectr has been specified, the fllwing are examples f valid entries fr this field: ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. Cnfigure File System cnnectr The fllwing settings can be adjusted manually by editing the cnnectr cnfiguratin file. Mre infrmatin is prvided in the HPE File System Cnnectr (CFS) Administratin Guide. r by accessing the fllwing URL: hst>:7200/a=help Setting Sectin Descriptin FrceDelete IngestIfLastAccessChanged TaskName r FetchTasks TaskName r FetchTasks Set t False t prevent deletin f read-nly files. Set t True t ensure that last access time is kept up-t-date in the HPE IDOL Analysis. Add new repsitry f type File System When adding a new repsitry f type File System, yu must supply the fllwing parameters: UNC Path The UNC path f the file share t be registered and managed r analyzed. Define a target Lcatin f type File System When adding a new target lcatin f type File System, yu must prvide the fllwing settings: HPE CntrlPint (5.5) Page 46 f 195

47 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs UNC Target Flder The UNC path f the disk lcatin t be used fr dcuments secured t this target lcatin. Last access dates NOTE: Recrding updates t last access dates is typically disabled in Windws Server thrugh the Windws registry fr perfrmance reasns. This can be changed using the fsutil utility. T ensure last access time updates are recrded Run the fllwing frm the cmmand line: fsutil behavir set disablelastaccess 0 T turn ff last access time updates Run the fllwing frm the cmmand line: fsutil behavir set disablelastaccess 1 A rebt must be perfrmed fr any changes t take effect. NOTE: See Windws dcumentatin fr yur specific versin f Windws befre making changes t the last access date behavir. Enfrce File System cnnectr security By default, security is ff fr cntent frm the File System cnnectr. T enfrce the File System cnnectr security, edit the Dashbard\Web.cnfig setting as fllws: <appsettings> <add key="securemetastrecntent" value="true"/> </appsettings> Enable HPE IDOL security By default, HPE IDOL security is ff fr Cntent that is imprted int HPE IDOL thrugh the HPE CntrlPint File System cnnectr. Fr Repsitry brwsing, IDOL dcument security is used when the user is a Repsitry User r Repsitry Viewer. Fr any higher permissins, such as Repsitry administratr, IDOL security is nt used; the user can brwse all items. If a user des nt have sufficient IDOL security permissins, they will still be able t view the Metadata, but nt be able t view the Cntent f a file. Fr example, a user with the crrect IDOL security permissins will have the View and Dwnlad buttns available when brwsing a dcument. HPE CntrlPint (5.5) Page 47 f 195

48 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs T enable the HPE IDOL security fr file system cntent n a per-repsitry basis 1. Set the fllwing in the IngestActins setting f the task sectin in the CntrlPint FileSystem Cnnectr.cfg file r the repsitry: MappedNTSecurity ENFORCESECURITY Default is false. Set t true t enable HPE IDOL security. Default is false. Set t true t enable HPE IDOL security. Fr example: [TaskSecureAccessTests] DirectryRecursive=True ExtractOwner=True MappedNTSecurity=True PathRegEx=.* PathRegExCaseInsensitive=True IngestActins=META:ENFORCESECURITY=true,META:CPREPOSITORYTYPEID=3,META:AUTN_NO_ FILTER=true,META:SECURITYTYPE=NT,META:AUTN_NO_EXTRACT=true DirectryPathCSVs=\\myHst\share\NtMyDcs ScheduleStartTime=nw ScheduleCycles=-1 ScheduleRepeatSecs=86400 IndexDatabase=SecureAccessTests NOTE: Ensure that yu set ENFORCESECURITY=true in all task sectins fr each repsitry yu wish t have mapped security n. Yu must als set MappedNTSecurity t True in all task sectins fr each repsitry yu wish t have mapped security. 2. In the CntrlPint IDOL.cfg file, ensure that NT is added t the Security sectin. Fr example: In \Prgram Files\Hewlett Packard Enterprise\CntrlPint\Indexer\IDOL\CntrlPint IDOL.cfg [UserSecurity] DefaultSecurityType=0 DcumentSecurity=TRUE SecurityUsernameDefaultTLginUsername=FALSE SecurityTkenLifetime=48hurs 0=Autnmy 1=Ntes 2=LDAP 3=Dcumentum 4=Exchange 5=Netware 6=Trim 7=SharePint HPE CntrlPint (5.5) Page 48 f 195

49 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs 8=WrkSite 9=NT... [NT] CaseSensitiveUserNames=FALSE CaseSensitiveGrupNames=FALSE Library=../mdules/user_ntsecurity EnableLgging=FALSE DcumentSecurity=TRUE V4=TRUE GrupServerHst= GrupServerHst GrupServerPrt=4057 SecurityFieldCSVs=username,dmain Dmain=DOMAIN DcumentSecurityType=NT_V4 3. Restart the File System cnnectr and CntrlPint IDOL services. 4. In the CntrlPint Dashbard, ensure that the ptin t Capture Permissins is set t Yes. 5. Perfrm a full scan f the repsitry fr the first time nly after the cnnectr cnfiguratin has been set in step 1. Retrieving security grup infrmatin fr the File System cnnectr See Security mapping cnsideratins fr cnnectrs, n page 26. Fr detailed steps and examples f cnfiguring OmniGrupServer t retrieve security grup infrmatin, see HPE File System Cnnectr (CFS) Administratin Guide. HPE CntrlPint Hadp cnnectr Summary The Hadp cnnectr can be used t analyse and execute plicy n dcuments and files held in a Hadp Distributed File System (HDFS). Supprted capability Repsitry plicy types The fllwing plicy types can be executed n cntent in a repsitry f type Hadp: Declare Declare in Place Yes N HPE CntrlPint (5.5) Page 49 f 195

50 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Dispse Hld Release Secure Leave Secure Remve Secure Shrtcut Tag Update Yes N N Yes Yes N Yes N A Hadp lcatin can be established as a target lcatin fr relevant plicy types. The fllwing plicy types can utilise target lcatins f type Hadp: Declare Declare in Place Secure Leave Secure Remve N N Yes Yes DeplyTl cnfiguratin When selecting a Hadp Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: Number f cnnectrs in Grup Deplyment Hst(s) Hadp Rt Uri Hadp Path The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. The hst(s) n which t deply the cnnectr(s). When mre than ne cnnectr has been specified, the fllwing are examples f valid entries fr this field: ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. Enter the rt URI f the Hadp file system t cnnect t when securing dcuments t a target lcatin f type Hadp. Enter the lcatin in the file system t be used by default when securing dcuments t a target lcatin f type Hadp. HPE CntrlPint (5.5) Page 50 f 195

51 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Cnfigure Hadp cnnectr The fllwing settings can be adjusted manually by editing the cnnectr cnfiguratin file. Fr mre infrmatin, see the Cnnectr Guide r access the fllwing URL: hst>:13200/a=help Setting Sectin Descriptin FileSystemPath FileSystemRtUri TaskName, FetchTasks r Default TaskName, FetchTasks r Default The lcatin in the file system where the cnnectr starts lking fr files. The cnnectr retrieves files frm the specified flder and all f its subflders. The path yu specify must begin with a frward slash (/). T retrieve files frm mre than ne flder tree, yu can specify a cmma-separated list f paths. The rt URI f the Hadp file system t cnnect t. Adding new repsitry f type Hadp When adding a new repsitry f type Hadp, yu must supply the fllwing parameters: Filesystem Rt URI Filesystem Path Enter the rt URI f the Hadp file system t cnnect t. Enter the lcatin in the file system where the cnnectr starts lking fr files. The cnnectr retrieves files frm the specified flder and all f its subflders. The path yu specify must begin with a frward slash (/). T retrieve files frm mre than ne flder tree, yu can specify a cmma-separated list f paths. Defining a Target Lcatin f Type Hadp When adding a new target lcatin f type Hadp, yu must prvide the fllwing settings: Cnnectr Cnfig Sectin Hadp Target Flder The cnfiguratin setting in the cnnectr cnfiguratin file that cntains details needed t secure dcuments t the Hadp target lcatin. The default value fr the sectin name is DefaultTargetLcatinCnfig. This sectin cntains the details entered in HPE CntrlPint DeplyTl. A target flder t be used fr dcuments secured t this target lcatin. The value supplied must start with hdf:// r hdfs:// and cannt end with a / character. HPE CntrlPint (5.5) Page 51 f 195

52 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs HPE CntrlPint Ntes cnnectr Summary The Ntes cnnectr can be used t analyse and execute plicy n messages, appintments, cntacts and ther items frm a Ntes server. Supprted capability Repsitry plicy types The fllwing plicy types can be executed n cntent in a repsitry f type Ntes: Declare Declare in Place Dispse Hld Release Secure Leave Secure Remve Secure Shrtcut Tag Update Yes N Yes N N Yes Yes N Yes N It is nt pssible t use a Ntes lcatin as a target lcatin. DeplyTl cnfiguratin When selecting a Ntes Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: Number f cnnectrs in Grup Deplyment Hst(s) The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. The hst(s) n which t deply the cnnectr (s). When mre than ne cnnectr has been specified the fllwing are examples f valid entries fr this field: HPE CntrlPint (5.5) Page 52 f 195

53 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. Cnfigure Ntes cnnectr Sme settings can be adjusted manually by editing the cnnectr cnfiguratin file. Fr mre infrmatin, see the Cnnectr Guide r access the fllwing URL: hst>:13300/a=help Adding a new repsitry f type Ntes When adding a new repsitry f type Ntes, yu must supply the fllwing parameters: Ntes Server Ntes Database Directry Ntes Database Ntes User ID File Name Ntes User ID Passwrd The name f the Ntes server cntaining the repsitry. The flder that cntains the database t be managed r analysed. The name f the Ntes database that is t be managed r analysed. The Ntes user ID file t be used t identify the user fr cnnecting t the Ntes server. The passwrd fr the user t be used t cnnect t the Ntes server. The passwrd can be encrypted fr secure strage. HPE CntrlPint SharePint 2007 cnnectr Summary The SharePint 2007 cnnectr can be used t analyse and execute plicy n dcuments and files in SharePint 2007 sites. HPE CntrlPint (5.5) Page 53 f 195

54 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Supprted capability Repsitry plicy types The fllwing plicy types can be executed n cntent in a repsitry f type SharePint 2007: Declare Yes Declare in Place Yes 1 Dispse Hld Release Secure Leave Secure Remve Secure Shrtcut Tag Update Yes Yes Yes Yes Yes N Yes Yes Target lcatin plicy types A SharePint 2007 lcatin can be established as a target lcatin fr relevant plicy types. The fllwing plicy types can utilize target lcatins f type SharePint 2007: Declare Declare in Place Secure Leave Secure Remve N N Yes Yes DeplyTl cnfiguratin When selecting a SharePint 2007 Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: Number f cnnectrs in Grup The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. 1 Declare in Place plicies nly apply t Cntent Only type repsitries. HPE CntrlPint (5.5) Page 54 f 195

55 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Deplyment Hst(s) SharePint Hst SharePint Prt SharePint Credentials Username SharePint Credentials Passwrd The hst(s) n which t deply the cnnectr(s). When mre than ne cnnectr has been specified the fllwing are examples f valid entries fr this field: ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. The name f the web server r lad balancer fr the SharePint farm r site. The prt number f the SharePint web applicatin. The credentials t use t cnnect t the SharePint web service (dmain\username). The passwrd t use fr the specified credentials. The passwrd entered will be encrypted befre additin t the cnfiguratin file. Cnfigure SharePint 2007 cnnectr The settings can be adjusted manually by editing the cnnectr cnfiguratin file. Fr mre infrmatin, see the Cnnectr Guide r access the fllwing URL: hst>:7500/a=help Als, see Set up a dcument stre fr Declare in Place plicies, n page 34 if yu need t use a Declare in Place plicy. Adding New Repsitry f type SharePint 2007 When adding a new repsitry f type SharePint 2007, yu must supply the fllwing parameter(s): SharePint 2007 URL The URL f the SharePint lcatin t be registered fr analysis r management. Defining a target lcatin f type SharePint 2007 When adding a new target lcatin f type SharePint 2007, yu must prvide the fllwing settings: Target URL The URL f the SharePint lcatin t be used when securing dcuments t the target lcatin. HPE CntrlPint (5.5) Page 55 f 195

56 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs HPE CntrlPint SharePint 2010 cnnectr Summary The SharePint 2010 cnnectr can be used t analyse and execute plicy n dcuments and files in SharePint 2010 sites. Supprted capability Repsitry plicy types The fllwing plicy types can be executed n cntent in a repsitry f type SharePint 2010: Declare Yes Declare in Place Yes 1 Dispse Hld Release Secure Leave Secure Remve Secure Shrtcut Tag Update Yes Yes Yes Yes Yes N Yes Yes Target lcatin plicy types A SharePint 2010 lcatin can be established as a target lcatin fr relevant plicy types. The fllwing plicy types can utilise target lcatins f type SharePint 2010: Declare Declare in Place Secure Leave Secure Remve N N Yes Yes 1 Declare in Place plicies nly apply t Cntent Only type repsitries. HPE CntrlPint (5.5) Page 56 f 195

57 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs SharePint 2010 cnnectr Web service After installing the SharePint 2010 cnnectr, the cnnectr web service must be installed n a frntend SharePint server. This web service prvides the dcuments and metadata frm SharePint t the cnnectr, returning mre infrmatin than the default web services supplied with SharePint. NOTE: An alternative t installing the cnnectr web service is t use the SharePint Remte cnnectr. The SharePint Remte cnnectr requires n sftware t be deplyed n the SharePint server. The cnnectr web service is included in the webservice sub-flder f the installed SharePint 2010 cnnectr. Tw versins f the web service are prvided: AutnmySharePint2010Cnnectr.wsp AutnmySharePint2010CnnectrLight.wsp The Light versin cnfrms with checks perfrmed by Micrsft s SharePint nline cde analysis framewrk (MSOCAF) tl. MSOCAF cmpatibility is a requirement when deplying slutins t Office 365. NOTE: If yu deply this versin f the web service, yu will be unable t cnfigure it t return MHT files when cllecting SharePint pages. Installing the Web service The SharePint cnnectr web service must be installed manually. T install the Web Service 1. Install the web service slutin using the fllwing cmmands frm SharePint 2010 Management Shell: Add-SPSlutin LiteralPath <path t AutnmySharePint2010Cnnectr.wsp> Install-SPSlutin -Identity AutnmySharePint2010Cnnectr.wsp -GACDeplyment Frce 2. Verify the successful deplyment f the web service by accessing the fllwing URL: server>/_vti_bin/autnmy/default.asmx Pst-install steps 1. The user entered when cnfiguring the SharePint 2010 cnnectr in HPE CntrlPint DeplyTl must have Read access t all web applicatins. 2. The Applicatin Pl identity under which the SharePint web service is running must be the same as the Applicatin Pl identity that SharePint is running under. 3. If user prfiles r activity feeds are t be analyzed, the applicatin pl identity under which the SharePint web service is running must als have full cntrl permissin t the User Prfile HPE CntrlPint (5.5) Page 57 f 195

58 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Service Applicatin, in additin t the Retrieve Peple Data fr Search Crawlers administrative right n the User Prfile Service Applicatin. 4. Yu must change the web.cnfig manually t set LcalStateDirectry t an apprpriate lcatin fr string the cnnectr web service state infrmatin. This lcatin must be chsen based n the fllwing: Bth the accunts running the cnnectr The applicatin pl user needs t have full cntrl t the lcal state directry The default lcatin f the web.cnfig fr SharePint 2010 is as fllws: C:\Prgram Files\Cmmn Files\Micrsft Shared\Web Server Extensins\14\ISAPI\Autnmy The sectin t be changed lks like this: <appsettings> <!-- Full path t a directry that can be used by the web service fr string state infrmatin. --> <add key="lcalstatedirectry" value=" C:\Prgram Files\HPE\Sharepint2010CnnectrCFS/lcalstate" /> This default value is generally nt apprpriate due t Windws security restrictins. Therefre, select a value that is nt under \Prgram Files. DeplyTl cnfiguratin When selecting a SharePint 2010 Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: Number f cnnectrs in Grup Deplyment Hst(s) SharePint Hst SharePint Prt The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. The hst(s) n which t deply the cnnectr(s). When mre than ne cnnectr has been specified, the fllwing are examples f valid entries fr this field: ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. The name f the web server r lad balancer fr the SharePint farm r site. The prt number f the SharePint web applicatin. HPE CntrlPint (5.5) Page 58 f 195

59 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs SharePint Credentials Username SharePint Credentials Passwrd The credentials t use t cnnect t the SharePint web service (dmain\username). The passwrd t use fr the specified credentials. The passwrd entered will be encrypted befre additin t the cnfiguratin file. Cnfigure SharePint 2010 cnnectr The fllwing settings can be adjusted manually by editing the cnnectr cnfiguratin file. Fr mre infrmatin, see the Cnnectr Guide r access the fllwing URL: hst>:7400/a=help Als, see Set up a dcument stre fr Declare in Place plicies, n page 34 if yu need t use a Declare in Place plicy. Setting Sectin Descriptin IndexActivityFeeds IndexMinrVersins IndexUserPrfiles IndexVersins PrcessLists TaskName r Default sectin TaskName r Default sectin TaskName r Default sectin TaskName r Default sectin TaskName r Default sectin Set t false t disable analyzing f activity feeds. Set t true t enable analyzing f minr versins f list items and dcuments. Set t false t disable analyzing f user prfiles. Set t true t enable analyzing f previus majr versins f list items and dcuments. By default, nly the latest apprved versin f each list item and latest majr versin f each dcument are analyzed. Set t false t disable analyzing f any list that is nt a dcument library. Each f the abve settings can be added t an individual TaskName sectin t just influence the crrespnding repsitry r t the Default sectin t be applied when scanning all repsitries. Cnfiguring fr MHTML file creatin SharePint site pages can be cllected in the MHTML (r MHT) frmat. This frmat cmbines the HTML cde and all cmpanin resurces such as images int a single dcument and is a useful way t secure a faithful page renditin fr file types such as.aspx. By default, cllecting such pages returns an IDX file, cntaining the metadata fr the page, including visible text in fields such as DRECONTENT, LISTDESCRIPTION, r SP_WIKIFIELD, depending n the page type. HPE CntrlPint (5.5) Page 59 f 195

60 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs T return certain file types in MHTML frmat In the relevant TaskName sectin, set MhtFilterLua t the name f a LUA script. When a cllect actin is perfrmed fr a dcument, the cnnectr calls the referenced Lua functin passing it the cllected dcument. If the Lua script returns true, the cnnectr generates an MHT file with the cntent f the web page. Sample LUA script functin handler(dcument) sharepintobjecttype = dcument:getfieldvalue("basesharepinttype"); filetype = dcument:getfieldvalue("filetype"); --Use MHT files fr all dcuments except where there is a --file that can be used instead (unless that file is a.aspx). if (sharepintobjecttype == "Attachment" r sharepintobjecttype == "ListItemVersin" r sharepintobjecttype == "ListItem" and filetype ~= aspx and filetype ~= nil then return false end return true end Add a new repsitry f type SharePint 2010 When adding a new repsitry f type SharePint 2010 the fllwing parameters must be supplied: SharePint 2010 URL The URL f the SharePint lcatin t be registered fr analysis r management. Define a target lcatin f type SharePint 2010 When adding a new target lcatin f type SharePint 2010 the fllwing settings must be prvided: Target URL The URL f the SharePint lcatin t be used when securing dcuments t the target lcatin. Retrieve security grup infrmatin fr the SharePint 2010 cnnectr See Security mapping cnsideratins fr cnnectrs, n page 26. Fr detailed steps and examples f cnfiguring OmniGrupServer (OGS) t retrieve security grup infrmatin, see HPE Administratin Guide fr SharePint 2010 Cnnectr (CFS). NOTE: Yu will need multiple SharePint server URLs in an OGS file if yu have a different SharePint farm. Each ne f them needs t be a unique sectin in OGS. HPE CntrlPint (5.5) Page 60 f 195

61 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs The cnnectr will als need t be cnfigured t imprt grup membership t OGS nly n cnnecter service start. The SharePint Cnnectr pulls the grup infrmatin frm the entire farm. The StartURL has n impact. Fr a given WSHst defined in the Cnnectr cnfiguratin file, yu will nly need ne synchrnize grup call. Example [FetchTasks] EncryptACLEntries=False Number=0 GrupServerHst=lcalhst GrupServerPrt=4057 GrupServerRepsitry=Sharepint2010 SynchrnizeGrupsNumber=1 [Grups_TaskSPTest] FetchMde=0 IncludeEmptyFields=True ExtractSubfiles=True MappedWebApplicatinPlicies=True IgnrePublishingPagesAspx=True SecurityType=SharePintSecurity IngestActins=META:ENFORCESECURITY=true,META:CPREPOSITORYTYPEID=2,META:AUTN_ CATEGORIZE=false,META:AUTN_EDUCTION=false StartURL= ScheduleStartTime=nw ScheduleCycles=1 ScheduleRepeatSecs=3600 IndexDatabase=SPTest Trubleshting Trubleshting the web service is cvered in a chapter f the HPE Administratin Guide fr SharePint 2010 Cnnectr (CFS). HPE CntrlPint SharePint 2013 cnnectr Summary The SharePint 2013 cnnectr can be used t analyse and execute plicy n dcuments and files in SharePint 2013 sites. Supprted capability Repsitry plicy types The fllwing plicy types can be executed n cntent in a repsitry f type SharePint 2013: HPE CntrlPint (5.5) Page 61 f 195

62 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Declare Yes Declare in Place Yes 1 Dispse Hld Release Secure Leave Secure Remve Secure Shrtcut Tag Update Yes Yes Yes Yes Yes N Yes Yes Target lcatin plicy types A SharePint 2013 lcatin can be established as a target lcatin fr relevant plicy types. The fllwing plicy types can utilize target lcatins f type SharePint 2013: Declare Declare in Place Secure Leave Secure Remve N N Yes Yes SharePint 2013 Cnnectr Web Service After installing the SharePint web service, yu must change the web.cnfig manually t set LcalStateDirectry t an apprpriate lcatin fr string the cnnectr web service state infrmatin. This lcatin must be chsen based n the fllwing: Bth the accunts running the cnnectr. The Applicatin Pl user needs t have full cntrl t the lcal state directry. The default lcatin f the web.cnfig fr SharePint 2013 is as fllws: C:\Prgram Files\Cmmn Files\Micrsft Shared\Web Server Extensins\15\ISAPI\Autnmy The sectin t be changed is as fllws: <appsettings>!-- Full path t a directry that can be used by the web service fr string state 1 Declare in Place plicies nly apply t Cntent Only type repsitries. HPE CntrlPint (5.5) Page 62 f 195

63 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs infrmatin. --> <add key="lcalstatedirectry" value=" C:\Prgram Files\HPE\Sharepint2013CnnectrCFS/lcalstate" /> This default value is generally nt apprpriate due t Windws security restrictins. Therefre, select a value that is nt under \Prgram Files. DeplyTl cnfiguratin When selecting a SharePint 2013 Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: Number f cnnectrs in Grup Deplyment Hst(s) SharePint Hst SharePint Prt SharePint Credentials Username SharePint Credentials Passwrd The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. The hst(s) n which t deply the cnnectr(s). When mre than ne cnnectr has been specified, the fllwing are examples f valid entries fr this field: ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. The name f the web server r lad balancer fr the SharePint farm r site. The prt number f the SharePint web applicatin. The credentials t use t cnnect t the SharePint web service (dmain\username). The passwrd t use fr the specified credentials. The passwrd entered will be encrypted befre additin t the cnfiguratin file. Cnfigure SharePint 2013 cnnectr The fllwing settings can be adjusted manually by editing the cnnectr cnfiguratin file. Fr mre infrmatin, see the Cnnectr Guide r access the fllwing URL: hst>:7100/a=help HPE CntrlPint (5.5) Page 63 f 195

64 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Als, see Set up a dcument stre fr Declare in Place plicies, n page 34 if yu need t use a Declare in Place plicy. Setting Sectin Descriptin IndexActivityFeeds IndexMinrVersins IndexUserPrfiles IndexVersins PrcessLists TaskName r Default sectin TaskName r Default sectin TaskName r Default sectin TaskName r Default sectin TaskName r Default sectin Set t false t disable analyzing f activity feeds. Set t true t enable analyzing f minr versins f list items and dcuments. Set t false t disable analyzing f user prfiles. Set t true t enable analyzing f previus majr versins f list items and dcuments. By default, nly the latest apprved versin f each list item and latest majr versin f each dcument are analyzed. Set t false t disable analyzing f any list that is nt a dcument library. Each f the abve settings can be added t: An individual TaskName sectin t just influence the crrespnding repsitry, r The Default sectin t be applied when scanning all repsitries. Adding a new repsitry f type SharePint 2013 When adding a new repsitry f type SharePint 2013, yu must supply the fllwing parameters: SharePint 2013 URL The URL f the SharePint lcatin t be registered fr analysis r management. Defining a target lcatin f type SharePint 2013 When adding a new target lcatin f type SharePint 2013, yu must prvide the fllwing settings: Target URL The URL f the SharePint lcatin t be used when securing dcuments t the target lcatin. HPE CntrlPint SharePint Remte cnnectr Summary The SharePint Remte cnnectr can be used t analyze and execute plicy n dcuments and files in Micrsft SharePint 2010, 2013 and 2016 sites. This cnnectr als ffers limited capability fr HPE CntrlPint (5.5) Page 64 f 195

65 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs dcuments and files in SharePint Online. Prerequisites This sectin lists the prerequisites fr installing the SharePint Remte Cnnectr. Windws Identity Fundatin 3.5 feature n Windws 2012 Supprted capability Repsitry plicy types The fllwing plicy types can be executed n cntent in a repsitry f type SharePint 2010, 2013 and 2016 using the Remte cnnectr: Declare Yes Declare in Place Yes 1 Dispse Yes Hld Yes 2 Release Yes 2 Secure Leave Secure Remve Secure Shrtcut Tag Update Yes Yes N Yes N Target lcatin plicy types A SharePint lcatin can be established as a target lcatin fr relevant plicy types. The fllwing plicy types can utilize target lcatins f type SharePint 2010, 2013 and 2016, r SharePint Online using the SharePint Remte cnnectr: Declare Declare in Place N N Secure Leave Yes 3 Secure Remve Yes 3 HPE CntrlPint (5.5) Page 65 f 195

66 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs Install Hlds Web Service T execute plicies that hld and release dcuments, yu must install an Autnmy web service n the SharePint server. This is because the API used t hld and release dcuments nly accepts instructins frm applicatins that are deplyed n the SharePint server. When yu install the SharePint Remte Cnnectr, the web service is cpied t a flder called HldsWebService, under the cnnectr's installatin directry. There are tw versins f the web service: ne fr SharePint 2010 and the ther fr SharePint Hld and Release plicies are nt supprted fr the SharePint Online cntent. With regard t security, remember that even as a farm administratr, yu d nt have enugh permissin t access the Web Services. T change the permissin level 1. Navigate t SharePint Central Admin -> Manage Web Applicatins, and select yur web applicatin. 2. Click the User Plicy buttn and specify the user ID (including the dmain name), giving it Full Read rights. Yu may als need t prvide full cntrl. 3. Save the settings and then scan in HPE CntrlPint. T install the web service 1. Cpy the crrect versin f AutnmySharePintRemteHlds.wsp t the SharePint server. 2. Run the SharePint management cnsle. 3. Run the fllwing cmmands, replacing the path in the first cmmand with the crrect path fr yur envirnment: Add-SPSlutin c:\path\t\autnmysharepintremtehlds.wsp Install-SPSlutin -Identity AutnmySharePintRemteHlds.wsp -GACDeplyment T remve the web service 1. Run the SharePint management cnsle. 2. Run the fllwing cmmands: Uninstall-SPSlutin Identity AutnmySharePintRemteHlds.wsp Remve-SPSlutin Identity AutnmySharePintRemteHlds.wsp DeplyTl cnfiguratin When selecting a SharePint Remte Cnnectr fr inclusin in the deplyment package, yu must enter the fllwing parameters: Number f cnnectrs in Grup Deplyment Hst(s) The number f cnnectrs t include in the deplyment package. Each cnnectr is cnfigured t be in the same cnnectr grup. The hst(s) n which t deply the cnnectr(s). When mre than ne cnnectr has been HPE CntrlPint (5.5) Page 66 f 195

67 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs specified, the fllwing are examples f valid entries fr this field: ServerA all cnnectrs are deplyed t this server. ServerA,ServerB ne cnnectr is deplyed t ServerA and the remainder t ServerB. ServerA,ServerA,ServerB tw cnnectrs are deplyed t ServerA and the remainder t ServerB. SharePint Credentials Username SharePint Credentials Passwrd SharePint Credentials Dmain The user name fr cnnecting t the SharePint web service. The passwrd fr the specified credentials. The passwrd entered will be encrypted befre additin t the cnfiguratin file. The dmain name fr the credentials t cnnect t the SharePint web service. Cnfigure SharePint Remte cnnectr The settings can be adjusted manually by editing the cnnectr cnfiguratin file. Fr mre infrmatin, see the Cnnectr Guide r access the fllwing URL: hst>:7800/a=help Adding a new repsitry f type SharePint Remte When adding a new repsitry f type SharePint Remte, yu must supply the fllwing parameters: SharePint URL The URL f the SharePint lcatin t be registered fr analysis r management. Defining a target lcatin f type SharePint Remte When adding a new target lcatin f type SharePint Remte, yu must prvide the fllwing settings: Target URL The URL f the SharePint lcatin t be used when securing dcuments t the target lcatin. 1 Declare in Place plicies nly apply t Cntent Only type repsitries. 2 Requires an additinal web service t be installed fr SharePint 2010, 2013 and Nt available fr SharePint Online. HPE CntrlPint (5.5) Page 67 f 195

68 Administratin Guide Chapter 3: HPE CntrlPint cnnectrs 3 SharePint 2010 limits the size f files that yu can uplad t 3 MB. Hwever, yu can change this limit, fr example, by running Pwershell cmmands n the SharePint Server: $ws = [Micrsft.SharePint.Administratin.SPWebService]::CntentService $ws.clientrequestservicesettings.maxreceivedmessagesize = #100MB HPE CntrlPint (5.5) Page 68 f 195

69 Chapter 4: Manage Repsitries The HPE CntrlPint Repsitries dashbard allws yu t create and manage repsitries. Repsitries Add a repsitry XML repsitries Search repsitries Create a repsitry grup Edit repsitry settings Change repsitry status Re-scan a repsitry Delete a repsitry Create a repsitry subset View repsitry cmpliance Visualize repsitries Repsitries HPE CntrlPint manages cntent that yu scan int HPE CntrlPint MetaStre. Repsitries prvide a view f the data that HPE CntrlPint manages. Repsitries are autmatically created fr every HPE IDOL data surce with analyzed dcuments that exists in yur HPE IDOL server. The Register Repsitries scheduled task discvers new repsitries and registers them in HPE CntrlPint. Yu can als add repsitries manually. Repsitries allw yu t: brwse cntent, and view and assign plicies manually visualize the cntent within the repsitry using HPE IDOL cluster maps and spectrgraphs analyze and clean up data in legacy repsitries identify a set f dcuments that yu want t islate fr analysis r t prmte t a higher analysis level NOTE: HPE CntrlPint is limited t managing dcuments in defined repsitries. Different repsitries supprt different types f plicy actins. Fr mre infrmatin n plicy phase actins, see Plicy phases, n page 83 Fr mre infrmatin n plicy phases supprted by the different target lcatin types, see Target lcatins. Supprted plicy phases by repsitry Repsitry Declare Declare in place Dispse Hld /Release Hld Secure (Leave) Secure (Link Shrtcut) Secure (Remve) Exchange x x x x x Tag Update HPE CntrlPint (5.5) Page 69 f 195

70 Administratin Guide Chapter 4: Manage Repsitries Supprted plicy phases by repsitry, cntinued Repsitry Declare Declare in place Dispse Hld /Release Hld Secure (Leave) Secure (Link Shrtcut) Secure (Remve) Tag Update File System x x x x x x Hadp x x x x x HPE Cntent x x x x x Manager 1 Ntes x x x x x SharePint 2007 SharePint 2010 SharePint 2013 SharePint Remte x x 2 x x x x x x x x 2 x x x x x x x x 2 x x x x x x x x 2 x x x x x Fr a list f cnnectr dcuments, see Related dcumentatin, n page 15. Repsitry status Repsitries can have ne f three pssible statuses: Registered, Analyzed, r Managed. The available infrmatin and the actins yu can perfrm n the repsitries are determined by the status. Registered repsitries have been registered int HPE IDOL, but have nt been analyzed. The Repsitries page displays sme basic repsitry statistics, hwever, yu can brwse the repsitry cntent and view visualizatins. Analyzed repsitries are ready fr statistical analysis and cleanup. The summary page displays detailed statistical infrmatin abut the repsitry cntents, and yu can take a number f actins t clean up legacy data. Managed repsitries are being managed by HPE CntrlPint plicies. Like Registered repsitries, the Repsitries page displays the number f dcuments and disk space fr each repsitry. Yu als brwse repsitry cntent and view visualizatins. This status is required if yu want t autmatically assign plicy t cntent. See Apply plicies autmatically, n page 98. Yu can change the repsitry status manually. See Change repsitry status, n page 74. Add a repsitry Yu can manually add a repsitry n the Repsitries dashbard. Alternatively, the Register Repsitries scheduled task autmatically adds repsitries and maps them t individual databases. 1 With HPE CntrlPint 5.4 and later, the HPE Cntent Manager cnnectr replaces the HPE Recrds Manager and HPE TRIM cnnectrs. 2 Declare in Place plicies nly apply t Cntent Only type repsitries. HPE CntrlPint (5.5) Page 70 f 195

71 Administratin Guide Chapter 4: Manage Repsitries T add a repsitry 1. Ensure that the apprpriate cnnectr is cnfigured. Administratrs can cnfigure cnnectrs n the Settings page in the Administratin dashbard. 2. On the Repsitries dashbard, click +. The Add New Repsitry page pens. 3. In the Details sectin, specify the fllwing infrmatin: Name. Enter the repsitry name. Descriptin. Enter a descriptin f the repsitry. Type. Select the repsitry type. Yu must prvide additinal infrmatin, which varies depending n the type yu select. Cnnectr. Select the cnnectr t use fr data scan. Yu can accept the default r chse an alternative, if ne is cnfigured, s that yu can manually lad balance. The necessary settings are dynamically laded int the Details sectin after yu select a cnnectr. NOTE: T use Archive plicies, yu must select the Edge Filesystem Cnnectr. Yu can specify the Archive plicies in the Direct Plicy Executin field in the Settings sectin. 4. In the Settings sectin, specify the fllwing infrmatin: Netwrk paths. Enter ne r mre UNC paths fr the repsitry. Click Add (+) t add mre than ne path. Include files f type. Enter ne r mre file extensins, separated by cmmas, t include in the repsitry. Exclude files f type. Enter ne r mre file extensins, separated by cmmas, t exclude frm the repsitry. 5. In the Analysis sectin, set the fllwing prperties: Analysis Type. Select ne f the fllwing analysis types: N Analysis des nt analyze any item. NOTE: This Analysis type is nly available fr Edge Filesystem Cnnectr repsitries. Repsitry Metadata Only (default) analyzes metadata frm the repsitry, but des nt include dcument-level metadata. This is the fastest setting and builds the smallest analysis. It is useful t detect duplicate files. Metadata Only analyses repsitry and dcument-level metadata. Prcessing time is slightly lnger than the Repsitry Metadata Only setting because each dcument is pened. Cntent includes all dcument cntent, as well as the metadata. Dcuments can be analyzed using advanced HPE IDOL features such as visualizatin, categrizatin, and eductin. HPE CntrlPint (5.5) Page 71 f 195

72 Administratin Guide Chapter 4: Manage Repsitries Capture Permissins and Ownership. Select whether item permissins and wnership details shuld be captured. Analyze Subitems. Select whether t assign a Plicy t subitems. Examples f subitems include dcuments within a.zip r.pst file. Categrize Items. Select whether t categrize items during analysis. This ptin is nly available fr Metadata Only r Cntent repsitries. Eductin. Select whether t run Eductin during analysis. This ptin is nly available fr Metadata Only r Cntent repsitries. If yu select Yes, yu must select at least ne Eductin grammar. 6. (Optinal) In the Prperties sectin, add any required prperties (see Custm prperties, n page 152). a. Click Add. The Add Prperty dialg bx pens. b. Frm the Prperty list, select the prperty t add. c. Frm the Value list, select ne r mre values t apply t the repsitry. d. Repeat fr as many prperties as required. e. Click Save. 7. In the Schedule sectin, specify the fllwing infrmatin t define the repsitry visualizatin schedule. Start Time. Specify a start time. Nw is selected by default. Cycle. Specify the number f times t run the schedule. Run Once is selected by default. Recur Every. Specify the recurrence perid. The default is 1 hur. 8. Click Save. Yu receive a prmpt t restart all affected services. Depending n yur selectins, yu may need t restart ne r mre f the fllwing services: HPE CntrlPint HPE IDOL, the selected cnnectr and the assciated Cnnectr Framewrk Service. After yu restart the HPE CntrlPint services, the new repsitry appears n the Repsitries dashbard. Search repsitries If yu have a large number f repsitries, yu can use the Repsitries dashbard t srt and filter the repsitry list t find repsitries f interest. Yu can create custm prperties t increase yur srting and filtering ptins (see Custm prperties, n page 152). Yu can switch between panel and grid displays. The Panel Display cntains mre infrmatin, while the Grid Display allws yu t view mre repsitries at a time. T switch between panel and grid display On the Repsitries dashbard, click: t view repsitries in panel display. This is the default view. t view a grid display. HPE CntrlPint (5.5) Page 72 f 195

73 Administratin Guide Chapter 4: Manage Repsitries T srt the repsitry list 1. Cnfigure ne r mre custm prperties that apply t repsitries. See Create a custm prperty, n page On the Plicies dashbard, select ne f the criteria frm the Srt By list. The repsitries srted by the selected criteria. T filter the repsitry list 1. (Optinal) Cnfigure ne r mre custm prperties that apply t repsitries. See Create a custm prperty, n page 152. The Repsitries dashbard's menu bar displays the prperties n the left. 2. Select a value frm ne r mre f the filters. By default, yu can filter by repsitry type. Yu can als filter by custm prperties. The repsitry list is filtered. If yu filter by prperty value, the list displays nly the repsitries that have matching values. Filters are cumulative: yu can filter by type, then by ne prperty (fr example, Department), then by anther prperty (such as Regin), and s n. T filter the repsitry list by text 1. On the Repsitries dashbard, click. The Filter dialg bx appears. 2. Enter text in the Filter bx, and then click Filter. The repsitry list updates. Create a repsitry grup Yu can create a grup f repsitries fr data analysis. The individual repsitries remain accessible and available fr analysis separately. Repsitry grups can be useful t analyze data by department, gegraphic regin, repsitry type, r any ther characteristic. T create a repsitry grup 1. On the Repsitries dashbard, click +. The Add New Repsitry page pens. 2. Click New Grup. 3. Under Details, enter the fllwing infrmatin. Name is the name f the repsitry grup Allwed characters are A-Z, a-z, 0-9, and _. Descriptin is a descriptin f the repsitry grup Repsitries. Add as many repsitries as yu require. a. Click Add. The Add New Repsitry dialg bx appears. b. Select repsitries frm the Type and Cnnectr lists. c. Click Save. 4. (Optinal) In the Prperties grup, add any required custm prperties. See Custm prperties, HPE CntrlPint (5.5) Page 73 f 195

74 Administratin Guide Chapter 4: Manage Repsitries n page 152. a. Click Add. The Add Prperty dialg bx appears. b. Frm the Prperty list, select the prperty t add. c. Frm the Value list, select ne r mre values t apply t the repsitry. d. Repeat fr as many prperties as yu require. e. Click Save. 5. Click Save. The grup appears n the Repsitries dashbard. A link icn appears n the panel t indicate that it is a grup. Edit repsitry settings Yu can edit repsitry settings n the Repsitries dashbard. The ptins available fr editing depend n the repsitry type. T change repsitry settings 1. On the Repsitries dashbard r any details page, click the menu icn ( ). 2. Click Edit. The Edit Repsitry page pens. 3. In the Details grup, yu can: Edit the Descriptin f the repsitry. Edit supplementary infrmatin, such as Netwrk Paths fr FileSystem repsitries r Web service URLs fr Exchange repsitries. 4. Edit the Capture Permissins and Ownership and Analyze Subitems settings by selecting Yes r N. 5. Edit any f the Prperties, Visualizatin, r Scheduling grup settings, as required. 6. Click Save. Depending n yur selectins, yu may receive a prmpt t restart affected services, such as HPE CntrlPint HPE IDOL, cnnectrs, and the cnnectr framewrk. The repsitry updates with the new settings. Change repsitry status Yu can change the repsitry status at any time n the Repsitries dashbard. When yu add repsitries, the repsitry status is set t Registered by default. Repsitries must have a Managed status if yu want HPE CntrlPint t apply plicies t the repsitry cntent autmatically. See Apply plicies autmatically, n page 98. HPE CntrlPint (5.5) Page 74 f 195

75 Administratin Guide Chapter 4: Manage Repsitries T change the status f a repsitry 1. On the Repsitries dashbard r any details page, click the menu icn ( ). Depending n the current status f the repsitry, the menu ptins vary. Fr example, if the repsitry is Registered, yu can either Analyze r Manage the repsitry. 2. Click the desired repsitry change. A cnfirmatin dialg bx appears. If yu mve a repsitry t a Managed state, yu can set the fllwing ptins: Autmatic Plicy Assignment Allw Plicy Executin 3. In the cnfirmatin dialg bx, click Yes. The repsitry status changes, and it mves t the apprpriate Repsitries tab. NOTE: Yu may als want t use the Analyze Density Indicatr t knw the Analyzed cntent fr each Analyzed level. T view this infrmatin, click the menu buttn in the upper-right crner f the repsitry and select Refresh Ttals. Re-scan a repsitry Yu can re-scan repsitries frm the Repsitries dashbard. Re-scanning is useful if yu selected r cnfigured Eductin grammars r HPE IDOL categries fr sensitive r trivial infrmatin, and yu want t apply the new criteria t repsitries that have been scanned. When yu manually scan a repsitry, yu can see the prgress f the scanning peratin n the Repsitry panel. T re-scan a repsitry 1. On the Repsitries dashbard r any details page, click the menu icn ( ). 2. Click Re-Scan Repsitry. 3. In the Re-Scanning dialg bx, click either: Full Re-Scan t prcess all dcuments in the repsitry t the HPE IDOL re-scan. Incremental Re-Scan t prcess newly added, changed (since the last scan), r remved dcuments. Create a repsitry subset Yu can create a subset f analyzed repsitry data t view analysis metrics f a small prtin f the repsitry cntents. Fr example, yu may want t analyze all files f a specific type, a specific size, created during a certain date range, and s n. HPE CntrlPint (5.5) Page 75 f 195

76 Administratin Guide Chapter 4: Manage Repsitries Yu can create subsets frm a single repsitry r a repsitry grup. Yu can create subsets f subsets. Als, yu can prmte the subset t a higher analysis level. T create a repsitry subset 1. Create a filtered list f the files t analyze. There are several ways t d this: view a file list and apply any desired filters (see Filter lists, n page 129 view data by statistical analysis, by tag, r by any ther methd cmbine the resulting file list with filters 2. Click Actins > Create Subset. The Create Subset dialg bx appears. 3. Enter a Name and Descriptin. 4. Select the Ptential Set t use t identify ROT (redundant, bslete, r trivial) data. In additin, use the Analysis Type ptin t select the analysis type. If Analysis Type is changed, analysis is nt autmatically triggered. Hwever, if it is nt changed, analysis is autmatically triggered. Yu cannt set this t a lwer Analysis type than the parent Repsitry. 5. Click Save. 6. In the cnfirmatin dialg bx, click OK. The subset appears in the Subsets tab and resembles a repsitry. Yu can analyze the subset in a similar manner. View repsitry cmpliance If a repsitry is in a Managed state, yu can view its verall level f cmpliance with all relevant plicies. T view repsitry cmpliance 1. On the Repsitries dashbard, pen the Managed tab. 2. T view mre details, click the repsitry. The repsitry details page pens. 3. Click the Plicy tab. The Plicy Cmpliance sectin lists the percentage cmpliance with each plicy, and the Plicy Assigned/Executed Items lists the ttal number f affected items. Visualize repsitries HPE IDOL can autmatically cluster infrmatin in repsitries t make trends in the infrmatin visible and identify cmmn cncepts. Clustering is the prcess f taking a large cllectin f unstructured data and autmatically partitining it s that similar infrmatin is gruped tgether. Each cluster represents a cncept area within the repsitry and cntains a set f items with cmmn prperties. HPE CntrlPint (5.5) Page 76 f 195

77 Administratin Guide Chapter 4: Manage Repsitries HPE IDOL attempts t generate six visualizatins fr each repsitry. If there is enugh cntent, IDOL generates tw-dimensinal cluster maps and spectrgraphs fr: all cntent cntent with plicy applied cntent withut plicy applied If there is insufficient cntent in the repsitry, nt all visualizatins are available. Yu can nly visualize cntent frm Cntent repsitry types. Visualizatin is nt supprted fr Metadata Only r Repsitry Metadata Only repsitries. T visualize repsitry cntent 1. On the Repsitries dashbard, click the repsitry t visualize. 2. Click the Visualizatin tab. The Cntent Visualizatin page pens. A Cluster Map appears n the left side f the page. T view spectrgraphs, select ne f the spectrgraph ptins frm the Viewing list abve the Cluster Map. 3. Click a lcatin n the cluster map r spectrgraph t view the cntents n the right f the page. Generate cluster maps T generate cluster maps, HPE IDOL takes a snapsht f the data that the HPE IDOL server stres in the repsitry. HPE IDOL then autmatically clusters data within the snapsht this des nt require setting up an initial taxnmy. Yu can use cncept clusters t identify cmmn r ntable themes in the repsitry cntent. Yu can view cluster maps n the Visualizatin tab f the repsitry. Each cluster represents a cncept area that cntains a set f items that share cmmn prperties. Snapshts generate accrding t the visualizatin schedule defined when adding r editing a repsitry. Fr mre infrmatin, see Add a repsitry, n page 70 and Edit repsitry settings, n page 74. Generate spectrgraphs A spectrgraph reflects a number f clusters ver time. Each spectrgraph data set takes a successin f clusters frm different time perids, calculates cluster similarity measures acrss days, and applies a graph theretic matching algrithm. The HPE IDOL server calculates the cnceptual spread f a cluster and its general quality. The spectrgraph uses lines t represent the size (number f dcuments in a cluster) and quality f a cluster. The brighter a spectrgraph line is, the mre dcuments the cluster cntains; the thicker the line is, the higher the cluster quality. Yu can view spectrgraphs n the Visualizatin tab f the repsitry. Spectrgraphs can be generated nce r accrding t a schedule. As with cluster maps, yu can use spectrgraphs t identify themes in repsitry cntent. HPE CntrlPint (5.5) Page 77 f 195

78 Administratin Guide Chapter 4: Manage Repsitries Spectrgraphs generate accrding t the visualizatin schedule defined when adding r editing a repsitry. Fr mre infrmatin, see Add a repsitry, n page 70 and Edit repsitry settings, n page 74. XML repsitries HPE CntrlPint prvides the pprtunity t add repsitries fr nn-supprted IDOL cnnectrs, such as Dcumentum, FTP and s n. Fr mre infrmatin n supprted HPE CntrlPint cnnectrs, see HPE CntrlPint cnnectrs, n page 26. Fr mre infrmatin n HPE IDOL cnnectrs, see the Administratin Guide fr the specific IDOL cnnectr. By mdifying cnfiguratin files and running a few prcesses frm the CntrlPint Administratin Cnsle, these repsitries can hld the ingestin infrmatin and can be analyzed just like any file system cnnectr repsitries. When HPE CntrlPint des nt prvide supprt fr a repsitry type (such as Dcumentum), its Register Repsitries task creates an XML repsitry whenever it discvers an HPE IDOL database that has nt been analyzed by a HPE CntrlPint cnnectr. Limitatins N repsitries shuld be created frm the Administratin Cnsle until the successful cmpletin f Registering the XML repsitries. This affects the repsitry ID cunters and blcks any repsitry creatins initiated frm the Administratin Cnsle. The Register Repsitry task nly wrks if there is at least ne dcument t be ingested int HPE IDOL fr every repsitry created thrugh this methd. If yu add a large number f Task sectins fr a single cnnectr, then each repsitry ges int an ingestin queue fr prcessing the Register Repsitry tasks. The XML structure defines the tree structure displayed in the Administratin Cnsle. Yu define the tree structure in the XML file. It describes the tree structure that is displayed when users brwse the cntent. If yu d nt prvide the XML structure, yu can view the cntent, but there is n hierarchical navigatin, and yu must filter the full list f cntent in the repsitry. The XML structure cnfiguratin is static. Yu must peridically update the XML structure fr a repsitry where the cntents are changing ver time. Fr assistance in creating the XML structure, cntact HPE Supprt. XML repsitries are supprted fr the Cntent Analysis Type nly. The Metadata Analysis type is nt supprted. Cntent includes all dcument cntent, as well as the metadata. Dcuments can be analyzed using advanced HPE IDOL features such as visualizatin, categrizatin, and eductin. HPE CntrlPint (5.5) Page 78 f 195

79 Administratin Guide Chapter 4: Manage Repsitries Define the tree ndes Administratrs can use the XML elements described in the fllwing table t define captin-filter pairs fr each nde in the tree. NOTE: Yu must prvide FieldText r CategryId fr each StructureItem, but nt bth. Element Title FieldText CategryId Descriptin The nde title. The HPE IDOLFieldText t run when tree nde is selected. Matching items appear in the panel t the right f the navigatin tree. The ID f the categry whse results yu want t display when the tree nde is selected. Matching items appear in the panel t the right f the navigatin tree. Add an XML repsitry Yu can manually add an XML repsitry n the Repsitries dashbard. Alternatively, the Register Repsitries scheduled task autmatically adds repsitries and maps them t individual databases. Fr additinal infrmatin and limitatins, see XML repsitries, n the previus page. T add an XML repsitry 1. On the Repsitries dashbard, click +. The Add New Repsitry page pens. 2. In the Details sectin, specify the fllwing infrmatin: a. Name. Enter the repsitry name. b. Descriptin. Enter a descriptin fr the repsitry. c. Type. Select the repsitry type as XML. d. XML Surce. Specify whether t structure the repsitry frm XML input r using an existing XML file. NOTE: XML input takes precedence. e. XML File Path r XML String. Enter the XML file path if yu selected File as the ptin under XML Surce. Enter the XML string if yu selected Input as the ptin under XML Surce. 3. (Optinal) In the Prperties sectin, add any required prperties. See Custm prperties, n page 152. a. Click Add. The Add Prperty dialg bx appears. HPE CntrlPint (5.5) Page 79 f 195

80 Administratin Guide Chapter 4: Manage Repsitries b. Frm the Prperty list, select the prperty t add. c. Frm the Value list, select ne r mre values t apply t the repsitry. 4. Click Save. Repeat fr as many prperties as required. Yu receive a prmpt t restart all affected services. Depending n yur selectins, yu may need t restart ne r mre f the fllwing services: the selected cnnectr the assciated Cnnectr Framewrk Service HPE CntrlPint HPE IDOL After yu restart the HPE CntrlPint services, the new repsitry appears n the Repsitries dashbard. Sample XML repsitry The fllwing sample XML defines a simple tree structure fr an XML repsitry. <?xml versin="1.0" encding="utf-8"> <Structure> <StructureItemFilter> <FieldText>WILD{\\v-qa2-cnnectr\FS\Start*}:DREREFERENCE</FieldText> </StructureItemFilter> <StructureItems xmlns:xsi=" xmlns:xsd=" <StructureItem> <Title>Financial dcuments</title> <ItemType>1</ItemType> <StructureItemFilter> <FieldText>WILD{\\v-qa2-cnnectr\FS\Fin*}:DREREFERENCE</FieldText> </StructureItemFilter> </StructureItem> <StructureItem> <Title>Cntracts</Title> <ItemType>1</ItemType> <StructureItemFilter> <FieldText>WILD{\\v-qa2-cnnectr\FS\Cntracts\*}:DREREFERENCE</FieldText> </StructureItemFilter> <StructureItems> <StructureItem> <Title>US Regin</Title> <ItemType>1</ItemType> <StructureItemFilter> <FieldText>WILD{\\v-qa2- cnnectr\fs\cntracts\us\*}:drereference</fieldtext> </StructureItemFilter> </StructureItem> HPE CntrlPint (5.5) Page 80 f 195

81 Administratin Guide Chapter 4: Manage Repsitries <StructureItem> <Title>Eurpe Regin</Title> <ItemType>1</ItemType> <StructureItemFilter> <CategryId> </CategryId> </StructureItemFilter> </StructureItem> </StructureItems> </StructureItem></StructureItems> </Structure> Delete a repsitry When yu n lnger require a repsitry, fr example, when yu finish analyzing a repsitry r cnslidating data, yu can delete it frm HPE CntrlPint. If Plicies are applied t dcuments in a Repsitry, yu cannt delete the Repsitry. If n items in the repsitry have plicy assignments in the executing state, the repsitry can be deleted. In this case, any plicy assignments are als deleted frm HPE CntrlPint. They either cmpletely execute r cmpletely fail. The audit still keeps a recrd f the executin. If sme items in the repsitry have plicy assignments in the executing state, the repsitry cannt be deleted. The check bx t delete is nt available, and a warning message appears. T remve a repsitry 1. On the Repsitries dashbard r any details page, click the menu icn ( ). 2. Click Delete. A cnfirmatin message pens. 3. Click Delete t remve the repsitry r cancel t abrt the actin. NOTE: Deleting the repsitry des nt remve any plicy assciatins frm the files that it cntains, r remve the cntent frm the HPE IDOL server (unless yu selected that ptin in the cnfirmatin message bx). HPE CntrlPint (5.5) Page 81 f 195

82 Chapter 5: Manage plicies A plicy defines the rules and actins t perfrm n registered repsitries. The HPE CntrlPint Plicies dashbard allws yu t create and manage plicies and plicy templates fr enterprise infrmatin management. Plicies Create a plicy template Create a plicy frm a template Create an Archive plicy Create a plicy Temprary lcatins fr plicy executin Edit a plicy Plicy executin rules Apply plicies Remve a plicy frm an item Plicy summary Plicies A plicy defines the rules and actins t perfrm n infrmatin cntent. HPE CntrlPint plicies can be defined t address a variety f requirements including: infrmatin retentin and dispsal f cntent in repsitries infrmatin categrizatin and capture f business recrds t recrd repsitries, such as HPE Cntent Manager infrmatin categrizatin and capture f imprtant business infrmatin t secure strage fr archiving The fllwing items are examples f typical HPE CntrlPint plicies. delete prject files in ne r mre file shares if they still exist three years after the prject clses secure crrespndence relating t supplier cntracts in a SharePint site and then delete it five years after the date f creatin declare business recrds relating t health and safety int a HPE Cntent Manager repsitry HPE CntrlPint als ffers yu the ability t archive and stub a file using the Archive plicy. Cntent f the specified surce file is cpied t the archive lcatin. The cpied file is nt an exact cpy, as it cntains additinal infrmatin. Therefre, yu cannt access the archived versin f the file as if it were the surce file. Instead, yu cntinue t access the lcal file and it will behave as if the file is still lcal. After the archive file is created, the surce file is mdified and a reparse pint is placed n the file. In additin, the file is changed t a sparse file. This essentially remves the main data stream frm the file. Fr infrmatin n creating a plicy based n the Archive plicy template, see Create a plicy frm a template, n page 87. HPE CntrlPint als ffers yu the ability t delete the stub file using Delete Archive Plicy. Fr mre infrmatin n deleting the Archive plicy, see Delete Archive plicy, n page 89. HPE CntrlPint (5.5) Page 82 f 195

83 Administratin Guide Chapter 5: Manage plicies In additin, HPE CntrlPint ffers yu the Archiving cmmand line utility, which can be used t recreate a file r directry stub, rehydrate a stubbed file r directry, dump the reparse data cntents f a stubbed file, r delete the stubbed surce file. Fr infrmatin n the Archive cmmand line utility, see Archiving cmmand line utility, n page 176. Plicy phases A plicy cnsists f ne r mre phases. Each phase defines an actin t take n a dcument that the plicy is assigned t and that meets certain rule criteria. Plicy phases can ccur n repsitries r target lcatins. Fr additinal infrmatin, see Repsitries, n page 69 rtarget lcatins, n page 105. Yu can perfrm the fllwing actins using HPE CntrlPint plicy phases. Declare. Cpy r mve the item t the named lcatin. N cnflicts will ccur. The three pssible actins fr the surce files are: Leave. Create a cpy f the riginal file in the target lcatin, and the riginal file remains in the repsitry. Remve. The file mves frm the repsitry t the target lcatin. Shrtcut. The file mves frm the repsitry t the target lcatin, and a shrtcut remains in the repsitry. NOTE: Shrtcut plicies apply t File System target lcatins nly. Declare in Place. Use the HPE Cntent Manager Manage in Place feature. HPE CntrlPint sends an item t HPE Cntent Managerwith additinal metadata, and then HPE Cntent Manager issues a cnnectr hld actin n the item in its riginal lcatin. NOTE: Declare in Place plicies are supprted fr Cntent Only type repsitries. Dispse. Remve the item frm the repsitry. Hld. Place a hld n the item in its current lcatin. N Actin. Perfrm n actin n the item. Release Hld. Release a hld n an item. Yu can release hlds placed n items by different plicies, which allws indefinite hlds t be placed by ne plicy and lifted by anther. Secure. Secure the item in a target lcatin. Any cnflicts are detected and prevent the item frm being cpied r mved. The three pssible actins fr the surce files are: Leave. Create a cpy f the riginal file in the target lcatin, and the riginal file remains in the repsitry. Remve. The file mves frm the repsitry t the target lcatin. Shrtcut. The file mves frm the repsitry t the target lcatin, and a shrtcut remains in the repsitry. NOTE: Shrtcut plicies apply t File System target lcatins nly. Tag Item. Tag the item in HPE IDOL with the defined field and value. HPE CntrlPint (5.5) Page 83 f 195

84 Administratin Guide Chapter 5: Manage plicies Update. Update a prperty n an item with the specified value. Wrkflw. Yu can initiate the wrkflw phase that integrates plicy executin with HP Prcess Autmatin. Fr mre infrmatin, see Wrkflw Cnfiguratin. Plicy templates Yu can use a plicy template t stre a partial plicy definitin that yu can then use t create a plicy. Templates are useful when yu need several similar plicies. Fr example, several dispsal plicies have different dispsal dates r declaratin plicies with different target repsitries. Any mandatry parameters that are nt supplied in a template must be prvided in the plicy yu build using that template. Yu can stre as much r as little infrmatin as required in a plicy template. At minimum, yu must stre the template name. Yu use a default template, r create r mdify yur templates n the Administratin dashbard under Template Management. Default templates The fllwing templates are available by default. Archive. Archives and stubs a file. Declare t. Cpies items t a target lcatin. Delete Archive. Deletes Archive items. Delete with review. Sends items fr review, and then deletes them if apprved. Delete withut review. Deletes items withut first sending them fr review. Retain in place. Hlds items in their current lcatins. Assign plicies Yu can assign plicies: by assigning a categry that is trained t match the cntent t which yu want t assign the plicy. frm the HPE CntrlPint dashbard. Assign Plicies is a scheduled task that assigns plicies based n categry matches. In certain cases, a categry is retrained and cntent that initially matched the categry may n lnger match it. In such situatins, any plicies that were assigned based n the initial match are remved, hwever, this nly applies t plicies that have nt executed r have executed actins that can be remved (such as tag and hld actins). The Assign Plicies task runs n a defined schedule. Fr mre infrmatin, see Scheduled tasks, n page 139. Execute plicies A plicy can have ne r mre phases that execute in sequence r in parallel. Each phase has a name, actin, executin rules, and a plicy review definitin. HPE CntrlPint (5.5) Page 84 f 195

85 Administratin Guide Chapter 5: Manage plicies Yu can apply plicies t any dcument, hwever, if the plicy phase has executin rules assciated with it, the dcument must meet the criteria specified in the plicy executin rules befre the phase actin executes. An example f an executin rule is: five years after creatin date. HPE CntrlPint checks fr dcuments that are ready t execute (that is, that meet a plicy phase executin rule) using a scheduled task that runs n a defined schedule. The executin rules are evaluated fr each dcument and any rules that are satisfied start t execute. There are multiple plicy schedules that determine hw frequently plicies execute: Lw, Medium, and High. Fr mre infrmatin, see Schedule plans, n page 141. In the first step f executin, HPE CntrlPint checks fr plicy cnflicts. A plicy cnflict ccurs when a plicy phase is ready t execute n a dcument and ne r mre plicies that have nt executed are als assigned t that dcument. Fr example, a dcument may have a plicy phase ready t execute with a dispsal actin five years after creatin date and anther plicy has a dispsal actin 10 years after creatin date. All such cnflicts must be reslved befre executin cntinues. When a plicy phase executes, HPE CntrlPint perfrms the plicy actin n assciated dcuments. Create a plicy template Yu create a plicy template frm the Administratin dashbard. T create a plicy template 1. On the Administratin dashbard, click Template Management. The Template Management page pens. 2. Click In the Details sectin, enter r select the fllwing infrmatin: Name f the template Descriptin is an ptinal descriptin f the plicy template Phases. Specify a list f plicy executin phases. T specify ne r mre plicy phases, click Add. T grup several plicy phases tgether t run simultaneusly, hver ver the plicy phase and click. Select an item t grup with this item. T assign a different rder t the plicy phase sequence, hver ver a plicy phase and drag the entry t a new psitin. Actin The actin applies t the cntent when this phase executes. Declare cpies r mves the item t the named lcatin. N cnflicts will ccur. Leave creates a cpy in the target lcatin and the riginal file remains in the repsitry Remve mves the file frm the repsitry t the target lcatin Shrtcut mves the file frm the repsitry t the target lcatin and a shrtcut remains in the repsitry HPE CntrlPint (5.5) Page 85 f 195

86 Administratin Guide Chapter 5: Manage plicies Declare in Place uses the HPE Cntent Manager Manage in Place feature: HPE CntrlPint sends an item t HPE Cntent Manager with additinal metadata, and then HPE Cntent Manager issues a cnnectr hld actin n the item in its riginal lcatin. Dispse remves the dcument frm the repsitry Hld places a hld n the dcument in its current lcatin N Actin is perfrmed n the dcument Release Hld releases a hld n the dcument Secure secures the item in a target lcatin. Any cnflicts are detected and prevent the item frm being cpied r mved. There are three pssible actins fr the surce files. Leave creates a cpy in the target lcatin and the riginal file remains in the repsitry Remve mves the file frm the repsitry t the target lcatin Link Shrtcut mves the file frm the repsitry t the target lcatin and a shrtcut remains in the repsitry Tag Item tags the dcument in HPE IDOL with the defined field and value Update updates a prperty n an item with the specified value Wrkflw starts the selected wrkflw with the dcument attached Name Plicy Review Executin Rules Name f the phase. Specifies whether items must be reviewed befre HPE CntrlPint executes the assciated Actin. Yu can use the fllwing values. System Default (default) Review ensures that HPE CntrlPint nly applies the plicy actin after apprval by an authrized user N Review The criteria that the cntent must meet fr HPE CntrlPint t apply the assciated Actin. Add Criteria Begin Grup creates a grup f cnditins and specifies whether all, any, r nne must be met. Click the dwn arrw t select an ptin. Repsitry Create Date Repsitry Last Mdified Date Dcument Create Date File Type 4. In the Settings sectin, specify the fllwing ptins. Assign Plicy selects whether t enable the plicy fr assignment, and specifies when it will be available fr assignment using the Date Optins field. Execute Plicy selects whether the HPE CntrlPint Engine checks the plicy fr items t HPE CntrlPint (5.5) Page 86 f 195

87 Administratin Guide Chapter 5: Manage plicies execute. Schedule Plan selects hw frequently HPE CntrlPint checks the plicy fr items t execute. The default values are: High every 10 minutes Nrmal every fur hurs. The default is Nrmal. Lw every 24 hurs See Schedule plans, n page 141 fr mre details. Cmpliance Plicy selects whether t include the plicy in the Overall Cmpliance metric fr Managed repsitries. Pririty determines the pririty f the plicy that HPE CntrlPint uses during autmatic cnflict reslutin. See Autmatically reslve cnflicts, n page (Optinal) In the Prperties sectin, click Add t assciate any prperties and values that are apprpriate fr the plicy. The prperties are defined in Administratin > Settings > General > Prperties. 6. (Optinal) In the Assign T sectin, click Add t select ne r mre HPE IDOLcategries. The plicy will be assigned cntent assciated with the selected categries. 7. Click Save. Create a plicy frm a template Yu can create a new plicy frm an existing plicy template. A template prvides sme r all f the plicy definitin. Yu must prvide any missing values in the plicy definitin. T create a new plicy frm a plicy template 1. On the Plicies dashbard, click +. The Add Plicy dialg bx pens. 2. Select a template frm the Template list, and then click Cntinue. The Add New Plicy page pens. 3. In the Details sectin, specify the fllwing infrmatin: Name f the plicy Descriptin fr the plicy Phases. Specify a list f plicy executin phases. T specify ne r mre plicy phases, click Add. T grup several plicy phases tgether t run simultaneusly, hver ver the plicy phase and click. Select an item t grup with this item. T assign a different rder t the plicy phase sequence, hver ver a plicy phase and drag the entry t a new psitin. 4. (Optinal) In the Settings sectin, specify the fllwing ptins. Assign Plicy Execute Plicy selects whether the HPE CntrlPint Engine checks the plicy fr items t execute. HPE CntrlPint (5.5) Page 87 f 195

88 Administratin Guide Chapter 5: Manage plicies Schedule Plan Cmpliance Plicy Pririty determines the pririty f the plicy. The plicy with the highest pririty executes n a dcument. The highest level f pririty is 100. HPE CntrlPint uses this pririty during autmatic cnflict reslutin. See Autmatically reslve cnflicts, n page (Optinal) In the Prperties sectin, click Add t assciate any prperties and values that are apprpriate fr the plicy. 6. Click Save. The plicy is saved. Create an Archive plicy Yu can create a new Archive plicy frm an existing Archive plicy template. A template prvides sme r all f the plicy definitin. Yu must prvide any missing values in the plicy definitin. T create a new Archive plicy frm the Archive plicy template 1. On the Plicies dashbard, click +. The Add Plicy dialg bx pens. 2. Select Archive (Archives items) frm the Template list, and then click Cntinue. The Add New Plicy page pens. 3. In the Details sectin, specify the fllwing infrmatin: Name f the plicy Descriptin fr the plicy Archive Lcatin f the items t be archived. NOTE: This target lcatin is defined in Administratin -> Target Lcatins. See Target lcatins, n page In the Executin Rules sectin, specify the criteria that the cntent must meet fr HPE CntrlPint t apply the assciated Actin. Add Criteria Begin Grup creates a grup f cnditins and specifies whether all, any, r nne must be met. Repsitry Create Date Repsitry Last Mdified Date Dcument Create Date File Type 5. In the Settings sectin, specify the fllwing ptins. Execute Plicy selects whether the HPE CntrlPint Engine checks the plicy fr items t execute. HPE CntrlPint (5.5) Page 88 f 195

89 Administratin Guide Chapter 5: Manage plicies Pririty determines the pririty f the plicy. The plicy with the highest pririty executes n a dcument. The highest level f pririty is 100. HPE CntrlPint uses this pririty during autmatic cnflict reslutin. See Autmatically reslve cnflicts, n page (Optinal) In the Prperties sectin, click Add t assciate any prperties and values that are apprpriate fr the plicy. 7. Click Save. Delete Archive plicy There are tw ways f applying a Delete Archive Plicy. Yu can create a new repsitry r yu can edit an existing archive repsitry. Apply a Delete Archive plicy while creating a new repsitry 1. Create a new Delete Archive Plicy. 2. Create a new repsitry and select the Edge File System Cnnectr frm the list f cnnectrs. 3. Frm the settings, select the newly created Delete Archive Plicy. 4. Execute the plicy. Apply a Delete Archive plicy while editing an archive repsitry 1. Create a new Delete Archive Plicy. 2. Edit the existing archive repsitry. 3. Frm the settings, add the newly created Delete Archive Plicy alng with the existing archive plicy. 4. Execute the plicies. Create a plicy Fr special cases, yu can create a plicy withut using a plicy template. T create a plicy 1. On the Plicies dashbard, click +. The Add Plicy dialg bx pens. 2. Select Blank (default) frm the Template list. 3. Click Cntinue. The Add New Plicy page pens. 4. In the Details sectin, specify the fllwing infrmatin: Name f the plicy Descriptin fr the plicy Phases. Specify a list f plicy executin phases. T specify ne r mre plicy phases, click Add. T grup several plicy phases tgether t run simultaneusly, hver ver the plicy phase and click. Select an item t grup with this item. HPE CntrlPint (5.5) Page 89 f 195

90 Administratin Guide Chapter 5: Manage plicies T assign a different rder t the plicy phase sequence, hver ver a plicy phase and drag the entry t a new psitin. Actin Name Plicy Review Executin Rules The actin applies t the cntent when this phase executes. Declare cpies r mves the item t the named lcatin. N cnflicts will ccur. Leave creates a cpy in the target lcatin and the riginal file remains in the repsitry Remve mves the file frm the repsitry t the target lcatin Shrtcut mves the file frm the repsitry t the target lcatin and a shrtcut remains in the repsitry Declare in Place uses the HPE Cntent Manager Manage in Place feature: HPE CntrlPint sends an item t HPE Cntent Manager with additinal metadata, and then HPE Cntent Manager issues a cnnectr hld actin n the item in its riginal lcatin Dispse remves the dcument frm the repsitry Hld places a hld n the dcument in its current lcatin N Actin perfrms n actin n the dcument Release Hld releases a hld n the dcument Secure secures the item in a target lcatin. Any cnflicts are detected and prevent the item frm being cpied r mved. There are three pssible actins fr the surce files. Leave creates a cpy in the target lcatin and the riginal file remains in the repsitry Remve mves the file frm the repsitry t the target lcatin Link Shrtcut mves the file frm the repsitry t the target lcatin and a shrtcut remains in the repsitry Tag Item tags the dcument in HPE IDOL with the defined field and value Update updates a prperty n an item with the specified value Wrkflw starts the selected wrkflw with the dcument attached f the new phase. specifies whether items must be reviewed befre HPE CntrlPint executes the assciated Actin. This ptin ensures that HPE CntrlPint nly applies the plicy actin after apprval by an authrized user. Yu can use the fllwing values. System Default (default) Review N Review are the criteria that the cntent must meet fr HPE CntrlPint t apply the assciated Actin HPE CntrlPint (5.5) Page 90 f 195

91 Administratin Guide Chapter 5: Manage plicies Add Criteria Begin Grup creates a grup f cnditins and specifies whether all, any, r nne must be met. Repsitry Create Date Repsitry Last Mdified Date Dcument Create Date File Type 5. In the Settings sectin, specify the fllwing ptins: Assign Plicy selects whether t enable the plicy fr assignment, and specifies when it will be available fr assignment using the Date Optins field. Execute Plicy selects whether the HPE CntrlPint Engine checks the plicy fr items t execute. Schedule Plan selects hw frequently HPE CntrlPint checks the plicy fr items t execute. The default values are: High runs every 10 minutes Nrmal runs every fur hurs. The default is Nrmal. Lw runs every 24 hurs See Schedule plans, n page 141 fr mre details. Cmpliance Plicy selects whether t include the plicy in the Overall Cmpliance metric fr Managed repsitries. Pririty determines the pririty f the plicy, which HPE CntrlPint uses during autmatic cnflict reslutin. See Autmatically reslve cnflicts, n page 112 Plicy Apprver Address selects the address f the plicy apprvers t be ntified abut the review befre the plicy executin. Temp lcatin defines the shared netwrk directry that is used fr string temprary files fr Secure, Declare, r Declare in Place plicy phases. Fr mre infrmatin, see Define a temprary lcatin fr each plicy, n the next page 6. (Optinal) In the Prperties sectin, click Add t assciate any prperties and values that are apprpriate fr the plicy. 7. (Optinal) In the Assign T sectin, click Add t select IDOL categries. The plicy will be assigned cntent assciated with the selected categries. 8. When yu finish adding phases, click OK. Temprary lcatins fr plicy executin Temprary lcatins fr plicy executins are shared netwrk directries t stre temprary files fr the plicy executin prcesses, such as Secure, Declare r Declare in Place plicy phases. HPE CntrlPint release 5.5 intrduces the feature f user-definable temprary lcatins fr each plicy. HPE CntrlPint (5.5) Page 91 f 195

92 Administratin Guide Chapter 5: Manage plicies Cnsideratins When yu save a plicy, the CntrlPint Scheduler validates whether the temprary lcatin is accessible frm the CntrlPint Scheduler. The temprary lcatin must be accessible frm the CntrlPint Scheduler and the cnnectrs. NOTE: The validatin in the Add Plicy page nly checks fr the accessibility frm the CntrlPint scheduler. It des nt check accessibility frm the cnnectrs. Yu will need t manually check the cnnectr accessibility t the temprary lcatins. TIP: Using the same user accunt fr CntrlPint scheduler service and fr all cnnectrs is a gd way t ensure cnnectr accessibility t temprary lcatins. As part f the plicy executin, all temprary lcatins are regularly cleaned up. The cleaner deletes any subflders that are lder than the defined expiratin perid frm the present fr all temprary lcatins, including the default temprary lcatin r the user-defined temprary lcatin under any plicies. The expiratin time is defined under Autnmy.CntrlPint.CllectCleanupTime in the GlbalSettings table in the CntrlPint database. The default expiratin time is 24 hurs. Define a temprary lcatin fr each plicy Unless therwise defined n the Add Plicy page, the CntrlPint Engine uses the default temprary lcatin defined in the Settings page f the Administratin Dashbard. NOTE: Adding a temprary lcatin is nly pssible during plicy creatin. Once the plicy is saved, the Temprary Lcatin field is n lnger mdifiable. This restrictin is t ensure that plicy executin will nt be affected by a change f temprary lcatins. The temprary lcatin is a field under the Settings area the Plicy Executin page. Fr mre infrmatin, see Create a plicy, n page 89. Search plicies If yu have a large number f plicies, yu can use the Plicies dashbard t srt and t filter the plicy list t find the plicies that yu want. T srt and filter, yu must cnfigure custm prperties that apply t plicies. See Custm prperties, n page 152. T srt the plicy list 1. Cnfigure ne r mre custm prperties that apply t plicies. See Create a custm prperty, n page On the Plicies dashbard, select ne f the criteria frm the Srt By list. The plicies are srted by the selected criteria. HPE CntrlPint (5.5) Page 92 f 195

93 Administratin Guide Chapter 5: Manage plicies T filter the plicy list 1. Cnfigure ne r mre custm prperties t apply t plicies. See Create a custm prperty, n page 152. The prperties appear n the left f the menu bar f the Plicy dashbard. 2. Select a value frm ne r mre prperty filters. The plicy list is filtered t display nly the plicies that have matching prperty values. Filters are cumulative, s yu can filter by ne prperty, fr example, Department, and then filter the list by anther prperty, such as Regin, and s n. T filter the plicy list by schedule plan On the Plicies dashbard, select a Schedule Plan frm the list. The plicies are srted by the selected schedule plan. T filter the repsitry list by text 1. On the Plicies dashbard, click. A Filter dialg bx pens. 2. Enter text in the Filter bx, and then click Filter. The plicy list updates. Edit a plicy Yu can change the settings fr a lcal plicy frm the Plicies page. T edit a plicy 1. On the Plicies dashbard, select a plicy panel and click the menu icn ( ). The Edit Plicy page pens. 2. In the Details sectin, change the fllwing infrmatin as required. Name f the plicy Descriptin f the plicy Phases. Specify a list f plicy executin phases r click the edit icn ( ) t edit a plicy phase. T specify ne r mre plicy phases, click Add. T grup several plicy phases tgether t run simultaneusly, hver ver the plicy phase and click. Select an item t grup with this item. T assign a different rder t the plicy phase sequence, hver ver a plicy phase and drag the entry t a new psitin. Actin The actin applies t the cntent when this phase executes. Declare cpies the item t the named lcatin. N cnflicts will ccur. There are three pssible actins fr the surce files. Leave creates a cpy in the target lcatin and the riginal file remains in the repsitry HPE CntrlPint (5.5) Page 93 f 195

94 Administratin Guide Chapter 5: Manage plicies Remve mves the file frm the repsitry t the target lcatin Shrtcut. The file mves frm the repsitry t the target lcatin and a shrtcut remains in the repsitry. Declare in Place uses the HPE Cntent Manager Manage in Place feature: HPE CntrlPint sends an item t HPE Cntent Manager with additinal metadata, and HPE Cntent Manager issues a cnnectr hld actin n the item in its riginal lcatin Dispse remves the dcument frm the repsitry Hld places a hld n the dcument in its current lcatin N Actin perfrms n actin n the dcument Release Hld releases a hld n the dcument Secure secures the item in a target lcatin. Any cnflicts are detected and prevent the item frm being cpied r mved. There are three pssible actins fr the surce files. Leave creates a cpy in the target lcatin and the riginal file remains in the repsitry Remve mves the file frm the repsitry t the target lcatin Link Shrtcut. The file mves frm the repsitry t the target lcatin and a shrtcut remains in the repsitry. Tag Item tags the dcument in HPE IDOL with the defined field and value Update updates a prperty n an item with the specified value Wrkflw starts the selected wrkflw with the dcument attached Name Plicy Review Executin Rules f the new phase. specifies whether items must be reviewed befre HPE CntrlPint executes the assciated Actin. This ptin ensures that HPE CntrlPint nly applies the plicy actin after apprval by an authrized user. Yu can use the fllwing values. System Default (default) Review N Review The criteria that the cntent must meet fr HPE CntrlPint t apply the assciated Actin. Add Criteria Begin Grup creates a grup f cnditins and specifies whether all, any, r nne must be met. Repsitry Create Date Repsitry Last Mdified Date Dcument Create Date File Type HPE CntrlPint (5.5) Page 94 f 195

95 Administratin Guide Chapter 5: Manage plicies 3. In the Settings sectin, change the fllwing ptins as required. Assign Plicy selects whether t enable the plicy fr assignment, and specifies when it will be available fr assignment using the Date Optins field. Execute Plicy selects whether the HPE CntrlPint Engine checks the plicy fr items t execute. Cmpliance Plicy selects whether t include the plicy in the Overall Cmpliance metric fr repsitries. Pririty determines the pririty f the plicy that HPE CntrlPint uses during autmatic cnflict reslutin. See Autmatically reslve cnflicts, n page (Optinal) In the Prperties sectin, edit any existing prperties r values, r click Add t add new nes. 5. (Optinal) In the Assign T sectin, edit any HPE IDOLcategries, r click Add t select new nes. 6. Click Save. Changes t sme plicy settings affect the dcuments t which HPE CntrlPint previusly applied the plicy. Plicy Setting Execute Plicy Phases Executin Rules Categries Effect If yu deactivate a plicy (that is, change the setting frm Yes t N), HPE CntrlPint des nt execute it again until yu reactivate it. If the plicy was previusly active, the actin taken by the plicy remains. If yu add a new plicy phase, it applies t all items that meet the rules assciated with the plicy frm the time yu add it. The new phase des nt apply t existing items that HPE CntrlPint applied the previus phases t. Dcuments must meet the new rules fr HPE CntrlPint t apply the actin assciated with the plicy. The new rules d nt change existing dcuments that HPE CntrlPint previusly assigned t the plicy. HPE CntrlPint applies the plicy t dcuments in the current categry list. The plicy assciatin remains fr dcuments in ther categries that the plicy previusly applied t. Edit a plicy template T create a plicy template 1. On the Administratin dashbard, click Template Management. The Template Management page pens. 2. Select a plicy template panel. HPE CntrlPint (5.5) Page 95 f 195

96 Administratin Guide Chapter 5: Manage plicies The Edit Plicy Template page pens. 3. In the Details sectin, edit r select the fllwing infrmatin: Name f the template Descriptin is an ptinal descriptin f the plicy template Phases. Specify a list f plicy executin phases. T specify ne r mre plicy phases, click Add. T grup several plicy phases tgether t run simultaneusly, hver ver the plicy phase and click. Select an item t grup with this item. T assign a different rder t the plicy phase sequence, hver ver a plicy phase and drag the entry t a new psitin. Actin Name Plicy The actin applies t the cntent when this phase executes. Declare cpies r mves the item t the named lcatin. N cnflicts will ccur. Leave creates a cpy in the target lcatin and the riginal file remains in the repsitry Remve mves the file frm the repsitry t the target lcatin Shrtcut mves the file frm the repsitry t the target lcatin and a shrtcut remains in the repsitry Declare in Place uses the HPE Cntent Manager Manage in Place feature: HPE CntrlPint sends an item t HPE Cntent Manager with additinal metadata, and then HPE Cntent Manager issues a cnnectr hld actin n the item in its riginal lcatin. Dispse remves the dcument frm the repsitry Hld places a hld n the dcument in its current lcatin N Actin is perfrmed n the dcument Release Hld releases a hld n the dcument Secure secures the item in a target lcatin. Any cnflicts are detected and prevent the item frm being cpied r mved. There are three pssible actins fr the surce files. Leave creates a cpy in the target lcatin and the riginal file remains in the repsitry Remve mves the file frm the repsitry t the target lcatin Link Shrtcut mves the file frm the repsitry t the target lcatin and a shrtcut remains in the repsitry Tag Item tags the dcument in HPE IDOL with the defined field and value Update updates a prperty n an item with the specified value Wrkflw starts the selected wrkflw with the dcument attached Name f the phase. Specifies whether items must be reviewed befre HPE CntrlPint executes HPE CntrlPint (5.5) Page 96 f 195

97 Administratin Guide Chapter 5: Manage plicies Review Executin Rules the assciated Actin. Yu can use the fllwing values. System Default (default) Review ensures that HPE CntrlPint nly applies the plicy actin after apprval by an authrized user N Review The criteria that the cntent must meet fr HPE CntrlPint t apply the assciated Actin. Add Criteria Begin Grup creates a grup f cnditins and specifies whether all, any, r nne must be met. Click the dwn arrw t select an ptin. Repsitry Create Date Repsitry Last Mdified Date Dcument Create Date File Type 4. In the Settings sectin, specify the fllwing ptins. Assign Plicy selects whether t enable the plicy fr assignment, and specifies when it will be available fr assignment using the Date Optins field. Execute Plicy selects whether the HPE CntrlPint Engine checks the plicy fr items t execute. Schedule Plan selects hw frequently HPE CntrlPint checks the plicy fr items t execute. The default values are: High every 10 minutes Nrmal every fur hurs. The default is Nrmal. Lw every 24 hurs See Schedule plans, n page 141 fr mre details. Cmpliance Plicy selects whether t include the plicy in the Overall Cmpliance metric fr Managed repsitries. Pririty determines the pririty f the plicy that HPE CntrlPint uses during autmatic cnflict reslutin. See Autmatically reslve cnflicts, n page (Optinal) In the Prperties sectin, click Add t assciate any prperties and values that are apprpriate fr the plicy. The prperties are defined in Administratin > Settings > General > Prperties. 6. (Optinal) In the Assign T sectin, click Add t select ne r mre HPE IDOLcategries. The plicy will be assigned cntent assciated with the selected categries. 7. Click Save. Plicy executin rules When yu create a plicy phase, yu must create a set f rules fr when t execute the plicy phase actin. HPE CntrlPint (5.5) Page 97 f 195

98 Administratin Guide Chapter 5: Manage plicies A plicy phase that des nt have executin rules executes immediately. Yu can use this ptin, fr example, t immediately apply a legal hld t a set f dcuments. Yu can cnstruct rules using field names, peratrs, and values. Add Rule Builder fields Yu add fields thrugh the Rule Builder that is accessible thrugh the Administratin dashbard. The Rule Builder allws yu t select fields and peratrs frm lists. Yu can nly select Match, NumericDate, r Date type fields. T use ther fields, yu must first define them as ne f these types. By default, the Rule Builder cntains the fllwing fields. Lcatin (CPLOCATION) This is shwn n Categry nly. Repsitry Create Date (AU_REPOSITORY_CREATEDDATE_EPOCHSECONDS) Repsitry Last Mdified Date (AU_REPOSITORY_MODIFIEDDATE_EPOCHSECONDS) Dcument Create Date (CPDOCUMENT_CREATEDDATE_EPOCHSECONDS) File Type (IMPORTMAGICEXTENSION) T add a field 1. On the Administratin dashbard, click the Settings panel. The Settings page pens. 2. On the General tab, click Fields. The Rule Builder page pens. 3. Under Details, click Add. The Add New Field dialg bx appears. 4. Enter a Display Name fr the field, click the Field bx, and then select an HPE IDOL field frm the list. 5. Click Save. The rule appears in the Rule Builder Fields list. Apply plicies Yu can apply plicies t dcuments in HPE CntrlPint either manually r yu can set up an autmatic prcess t apply plicies. Apply plicies autmatically Yu can autmatically apply a plicy by assciating it with ne r mre server categries, either when yu create the plicy r when yu edit it. After yu set up categry assciatins, a scheduled task assigns plicies t dcuments by categry assciatin. By default, this task executes every hur. Yu can change this frequency frm the Schedule Management page that is accessible frm the Administratin dashbard. Yu can als cntrl plicy assignment and executin at the repsitry level. Autmatic plicy assignment nly applies t Managed repsitries. T specify whether repsitries supprt autmatic HPE CntrlPint (5.5) Page 98 f 195

99 Administratin Guide Chapter 5: Manage plicies plicy assignment and executin, edit the repsitry, select the apprpriate ptins, and then change the status t Managed. Apply plicies manually Yu can apply plicies t dcuments manually frm any file list. T apply a plicy manually 1. Select ne r mre files t apply a plicy t, and then click. 2. A plicy list pens, including all active and inactive plicies. 3. Select ne r mre plicies t apply t the dcuments, and then click Apply. HPE CntrlPint applies the plicies t the dcuments. Re-evaluate plicy assignment based n categry changes Upn creating a new categry, a plicy assciated with the new categry, and a repsitry in the Managed state, yu can run the Assign Plicy scheduled task t assign the plicy t dcuments based n the categry matches. See Assign plicies, n page 84 and Default scheduled tasks, n page 139. Remve Plicy Assignment scheduled task When yu need t change the categry definitin s that the new categry matches a different set f files and yu have assigned a plicy based n the previus categry definitin, yu run the Remve Plicy Assignment scheduled task. It remves the plicy assignments, based n the previus definitins, accrding t the fllwing cnditins: Dcuments are unassigned frm the plicy if the dcuments matching the previus categry have nt gne int the Executing state. After yu remve the plicy assignment frm dcuments using the Remve Plicy Assignment scheduled task: Yu must wait 24 hurs t use the Assign Plicy scheduled task t assign the same plicy t the same dcument again. NOTE: This limitatin is t avid dcuments being repeatedly assigned t the same plicy based n categry. Yu can still manually assign the same plicy t the same dcument by using the HPE CntrlPint dashbard. Expected behavirs Cnsider the fllwing interactins f the Remve Plicy Assignment n different repsitry types. HPE CntrlPint (5.5) Page 99 f 195

100 Administratin Guide Chapter 5: Manage plicies 1. If the repsitry type is Cntent, after yu change the categry definitin: a. Run the Assign Plicies task. This assigns the plicy t dcuments that match the current categry definitin and des nt match the previus categry definitin. b. Run the Remve Plicy Assignment task after at least five (5) minutes. This remves the plicy assignment frm all dcuments that match the previus categry definitin. c. Run the Assign Plicies task. This assigns the plicy t the dcuments that were excluded in step 1a, which are dcuments that match bth current and previus categry definitins. Fr example: Assume that an riginal categry definitin matches Dcuments A, B and C. Dcuments A, B, and C are assigned with a plicy assciated with the categry. An updated categry definitin matches Dcument B, C and D. All dcuments are still in the Plicy Assigned state. Results Step 1a wuld assign t D. Step 1b wuld remve the plicy frm Dcuments A, B and C. Step 1c wuld assign t B, C. NOTE: This scenari als applies t Cntent repsitries whse categries are trained by the fllwing means: Blean training text Training text Blean training text and field text Training text and field text. 2. If the repsitry type is Repsitry Metadata Only r Metadata Only, after yu change the categry definitin: a. Run the Assign Plicies task. This assigns the plicy t dcuments that match the current categry definitin, regardless f whether the dcuments match previus categry definitins. b. Run the Remve Plicy Assignment task after at least five (5) minutes. This remves the plicy assignment frm dcuments that match the previus categry definitin and des nt match the new categry definitin. Fr example: Assume that an riginal categry definitin matches Dcuments A, B, and C. Dcuments A, B, and C are assigned with a plicy assciated with the categry. An updated categry definitin matches Dcument B, C and D. All dcuments are still in Plicy Assigned state. Results Step 2a wuld assign t D. Step 2b wuld remve the plicy frm A. NOTE: This scenari als applies t Cntent repsitries whse categries are trained by the HPE CntrlPint (5.5) Page 100 f 195

101 Administratin Guide Chapter 5: Manage plicies fllwing means: Field text Limitatins After yu change the categry definitin, yu must run the Assign Plicies scheduled task nce befre yu can run the Remve Plicy Assignment scheduled task effectively. The time interval between running the Assign Plicies and Remve Plicy Assignment scheduled tasks must be at least five (5) minutes. The Remve Plicy Assignment scheduled task is based n categry versining, nt actual categry matches. If yu change the categry definitin such that the new categry matches the same set f dcuments, the scheduled task will still remve the plicy assignment because there is a new versin f the categry. After 24 hurs, yu can run the Assign Plicy scheduled task t assign the same plicy t the dcument again. View the plicies n items The HPE CntrlPint Plicies dashbard allws yu t view: a summary f the plicy infrmatin items that have a particular plicy applied. This infrmatin can help yu evaluate hw widely and accurately a plicy applies. plicies that a particular item belngs t. This infrmatin can help yu t identify whether a plicy has been applied incrrectly r accidentally by a categry match r a plicy assigner. View plicy summaries Plicy summaries prvide an verview f plicy infrmatin. T view a plicy summary On the Plicies dashbard, click the plicy panel The summary page pens, displaying the date, number f plicy items, the plicy settings and phases, and the mst cmmn issues. View items assigned t a plicy Yu can view all the items that a plicy applies t. Yu can als apply a filter t view items that have a specific status. T view items that are assigned t a particular plicy 1. On the Plicies dashbard, click the plicy. The Plicy summary page pens. 2. Click the Plicy Items tab. HPE CntrlPint (5.5) Page 101 f 195

102 Administratin Guide Chapter 5: Manage plicies The Plicy Items page pens, displaying a list f plicy items n the right f the page. 3. (Optinal) T filter the view f items assigned t a particular plicy select ne f the plicy statuses frm the bx n the left f the page One r mre f the fllwing statuses may appear. Status Plicy Assigned Plicy Executed Executing Awaiting Executin Awaiting Review Awaiting Cnflict Reslutin Executin Rules nt met Executin Rejected Prevented Due t Cnflict Descriptin Items with a plicy assigned t them, but whse executin criteria have nt been checked. Items where the plicy has executed. Items that are currently being prcessed by the scheduler. Items that meet executin criteria, yet have nt yet been executed. Items that are ready t execute, but that require review befre executin can prceed. Items that are ready t execute, but that require yu t reslve a cnflict befre executin can prceed. Items that d nt meet the plicy executin rules. Items that were prevented frm executing after review. Items that were prevented frm executing after reslutin f a plicy cnflict. View the plicies that apply t an item Yu can view a list f plicies that have been assigned t an individual item, and see their current states. T view a list f plicies that apply t an item 1. Lcate the item in the Repsitry dashbard view. 2. Select the check bx beside the item. 3. Click Actins > Prperties. The Prperties dialg bx pens. 4. Open the Plicies tab. View summary reprt f items prcessed by a plicy Yu can add a summary reprt f items prcessed by a plicy t the Dcument Activity reprt generated by SQL Server Reprting Services. HPE CntrlPint (5.5) Page 102 f 195

103 Administratin Guide Chapter 5: Manage plicies NOTE: T enable this reprt, yur CntrlPint envirnment must have SQL Server Reprting Services cnfigured with the CntrlPint data surce. Befre yu begin 1. Cnfigure the CntrlPint data surce in SQL Server Reprting Services. 2. During the CntrlPint database installatin, select Uplad Reprts n the Audit Reprts page f the HPE CntrlPint Database Installer wizard. Fr mre infrmatin, see the HPE CntrlPint Installatin Guide. T enable the summary reprt 1. On the Administratin dashbard, click Settings. The Settings page pens. 2. Click the General tab. 3. In the Details sectin, click Yes fr the Audit Activity setting. 4. Specify any ther settings as needed. 5. Click Save. 6. Navigate t the CntrlPint Reprts site, select English > Dcument Activity.rdl. 7. Specify any necessary parameters, such as dates, and click View Reprt. The Dcument Activity reprt displays a summary reprt f items prcessed by a plicy. Remve a plicy frm an item Yu can manually remve a plicy frm a dcument if, fr example, it was incrrectly r accidentally assigned by a categry match r a plicy assigner. T remve a plicy frm a dcument 1. On the Plicies dashbard, click the plicy. The Plicy summary page pens. 2. Click the Plicy Items tab. The Plicy Items page pens, displaying a list f plicy items n the right f the page. 3. Select the check bx next t the item that yu want t remve the plicy frm. 4. Click Actins > Remve Plicy. If yu are remving a plicy that was autmatically applied by an HPE IDOL categry, yu can prevent the plicy frm being reassigned autmatically. HPE CntrlPint (5.5) Page 103 f 195

104 Administratin Guide Chapter 5: Manage plicies Plicy summary T view a plicy summary 1. On the Plicies dashbard, duble-click a plicy. The Plicy Summary page displays the fllwing infrmatin: Date that this versin f the plicy was published Items number Executing status Assigning status Schedule Plan type Pririty number Phases list Plicy Assignment Rate shws a chart f the number f items that this plicy has been assigned t by date Plicy Executin Rate shws a chart f the number f items that this plicy has been executed n t by date 2. T change the granularity f the time axis n the plicy activity charts, select an Interval ptin: Hur, Day, Week, Mnth, Quarter, Year. HPE CntrlPint (5.5) Page 104 f 195

105 Chapter 6: Manage target lcatins Yu can create target lcatins t allw yu t create plicies that mve, cpy, r declare dcuments t the fllwing lcatins. Target lcatins Add a target lcatin Edit a target lcatin Map repsitry fields t the target lcatin metadata Define file naming cnventins Direct target lcatins Remve a target lcatin Target lcatins Target lcatins are repsitries t which plicies declare, cpy, r mve dcuments. When yu create a plicy t d s, yu must specify the name f the target lcatin. Yu can nly specify defined target lcatins. The dcuments in a target lcatin repsitry are nt necessarily imprted int HPE IDOL server, althugh in sme cases yu may want t scan them. Example HPE CntrlPint may cpy dcuments int a file system target lcatin, and then apply dispsal schedules t them in that lcatin. The Manage Target Lcatins n the Target Lcatins page is accessible thrugh the Administratin dashbard. Different target lcatins supprt different types f plicies. Fr mre infrmatin n plicy phase actins, see Plicy phases, n page 83 Fr mre infrmatin n plicy phases by repsitry, see Repsitries, n page 69. Supprted plicy phases by target lcatin Declare Declare in Place Secure File System x Hadp x HPE Cntent Manager 1 2 x x x 3 SharePint 2007 x SharePint 2010 x SharePint 2013 x HPE CntrlPint (5.5) Page 105 f 195

106 Administratin Guide Chapter 6: Manage target lcatins Supprted plicy phases by target lcatin, cntinued Declare Declare in Place Secure SharePint 2016 x SharePint Remte x 1 With HPE CntrlPint5.5, the HPE Cntent Manager cnnectr replaces the HPE Recrds Manager and HPE TRIM cnnectrs. 2 HPE Cntent Manager requires the client installatin n the HPE CntrlPint server. 3 The HPE TRIM cnnectr des nt supprt Secure. Add a target lcatin Use the fllwing prcedure t add a target lcatin t yur HPE CntrlPint system. T add a target lcatin 1. On the Administratin dashbard, click Target Lcatins. The Target Lcatins page pens. 2. Click +. The Add New Target Lcatin page pens. 3. In the Details sectin, specify the fllwing infrmatin. NOTE: Sme ptins vary based n the type selected. Name Descriptin Cnnectr Grup Type via Cnnectr Direct Direct Type Path Insert Name f the target lcatin. Descriptin f the target lcatin. t use when sending wrk t the target lcatin Select the type f target lcatin. Select via Cnnectr fr a lcatin that must be accessed by a HPE CntrlPint cnnectr. Required fr all plicies that execute centrally. Select Direct fr a lcatin that is accessed directly by the surce repsitry cnnectr. Required fr Archive plicies that execute n the surce repsitry. Select the Direct Target Lcatin type. Select t archive using the Edge File System Cnnectr. Predefined settings t use when sending items t the specified target HPE CntrlPint (5.5) Page 106 f 195

107 Administratin Guide Chapter 6: Manage target lcatins Cnfiguratin Settings lcatin. Administratrs must create Insert Cnfiguratins. 4. In the Settings sectin, specify the repsitry-specific target lcatin values. NOTE: Settings are nt required in full fr the target lcatin. Any required parameters that are nt supplied in the target lcatin definitin must be specified when a plicy is created that references this target lcatin. 5. Click Save. Direct target lcatins HPE CntrlPint uses direct target lcatins fr archiving and stubbing files with the Edge Filesystem cnnectr. Path. The archived file will be stred n a shared directry specified by the UNC path. Edit a target lcatin Yu can alter the settings fr a target lcatin frm the Target Lcatins page. T edit a target lcatin 1. On the Administratin dashbard, click Target Lcatins. The Target Lcatins page pens. 2. On a target lcatin panel, click the menu icn ( ), and then select Edit. The Edit Target Lcatin page pens. 3. In the Details sectin, edit the fllwing infrmatin as required. Name Descriptin Cnnectr Grup Insert Cnfiguratin Settings f the target lcatin f the target lcatin name f the cnnectr grup that the required HPE IDOL cnnectr registers with the distributed cnnectr (Optinal) Predefined settings t use when sending items t the specified target lcatin. Administratrs must create Insert Cnfiguratins. NOTE: Insert cnfiguratin settings are nt required in full fr the target lcatin. Any required parameters that are nt supplied in the target lcatin definitin must be specified when a plicy is created that references this target lcatin. 4. In the Settings sectin, edit the repsitry-specific target lcatin value as required. File System. Specify the UNC Target Flder. SharePint 2007, 2010, 2013, r Remte. Enter the Target URL. HPE Cntent Manager. Enter the name f the Cnnectr Cnfig Sectin, Wrkgrup Server HPE CntrlPint (5.5) Page 107 f 195

108 Administratin Guide Chapter 6: Manage target lcatins name, Wrkgrup Server prt, Database Identifier, and Origin Name. 5. Click Save, and then click OK. Map repsitry fields t the target lcatin metadata If yu want HPE CntrlPint-specific metadata t persist acrss target lcatins, yu can map repsitry dcument fields t custm fields in target lcatins. Field mapping ccurs at the grup level. Fr example, yu cnfigure custm field mapping fr the Exchange cnnectr, and the mapping applies t all Exchange repsitries. T map fields t target lcatin metadata 1. On the Administratin dashbard, click Insert Cnfiguratin. The Insert Cnfiguratin page pens. 2. Select the Cnnectr Grup. The available ptins depend n which cnnectrs are active. 3. Select the Insert Cnfiguratin file t custmize. Yu can mdify the default file, create a new ne, r duplicate a cnfiguratin file. 4. In the Field Mapping sectin, enter a part f the field name in the Surce Field bx. As yu type, a list f matching fields is displayed. Select the field frm the list. 5. (Optinal) Click t select a Preprcessing ptin. Any preprcessing ptins mdify the final utput. Fr example, yu can map the date field and, by selecting ne f the date ptins, change the date frmat frm Epch time t M/D/Y frmat. If yu select an ptin, the icn darkens. 6. In the Target Name text bx, type the target metadata field name. 7. (Optinal) Repeat steps 4 t 6 t add as many custm mappings as required. 8. Click Save. The custm mappings take effect the next time a plicy that includes the mapping runs. Define file naming cnventins T rganize data in target lcatins effectively, yu can use naming cnventins t ensure uniqueness and cnsistency in stred data. Yu can define a file naming cnventin in HPE CntrlPint t use when cpying, mving, r declaring dcuments t target lcatins. The HPE CntrlPint naming cnventin cnsists f a series f field names r text. The default naming cnventin is the field AU_CP_TITLE, underscre text, and a UUID (universal unique identifier) field. Target lcatin files receive names in the fllwing frmat by default. AU_CP_TITLE_UUID HPE CntrlPint (5.5) Page 108 f 195

109 Administratin Guide Chapter 6: Manage target lcatins TIP: HPE recmmends that yu use a unique identifier in yur naming cnventins t ensure that there are n duplicate file names. T define a naming cnventin 1. On the Administratin dashbard, click Insert Cnfiguratins. The Insert Cnfiguratins page pens. 2. Select the Cnnectr Grup. The available ptins depend n which cnnectrs are active. 3. Select the Insert Cnfiguratin file t custmize. Yu can mdify the default file, create a new ne, r duplicate a cnfiguratin file. 4. Open the Name Mapping sectin. Each bx in the name mapping sectin indicates a single field name r text string. Text bxes are marked with a T. Yu can add r remve fields and text. Click t add field r text bxes, r click t remve field r text bxes. 5. Define the naming cnventin as required. In field bxes, enter a part f a field name. As yu type, a list f matching fields is displayed. Select a field frm the list. In text bxes, enter the desired text string. Yu can nly use characters that are allwed in Windws file names. (Optinal) Click t the right f any field r text bx t select a Preprcessing ptin. Preprcessing ptins mdify the final utput. Fr example, yu can map the date field and, by selecting ne f the date ptins, change the date frmat frm Epch time t M/D/Y frmat. If yu select an ptin, the icn darkens. 6. Click Save. The naming cnventin updates and applies t any future dcuments that are cpied, mved, r declared t target lcatins. Remve a target lcatin When yu n lnger require a target lcatin, yu can remve it frm HPE CntrlPint. NOTE: The target lcatin that yu are trying t remve must nt exist as the target lcatin fr any current plicy. Befre yu remve the target lcatin, yu must amend all plicies that reference it t pint t a different target lcatin. T remve a target lcatin 1. On the Administratin dashbard, click Target Lcatins. The Target Lcatins page pens. HPE CntrlPint (5.5) Page 109 f 195

110 Administratin Guide Chapter 6: Manage target lcatins 2. On a target lcatin panel, click the menu icn ( ). 3. Click Delete... A cnfirmatin message pens. 4. Click Delete. The target lcatin is remved. HPE CntrlPint (5.5) Page 110 f 195

111 Chapter 7: Manage plicy cnflicts The Cnflict Management page, which is accessible thrugh the Administratin dashbard, displays plicy executin cnflicts that HPE CntrlPint encunters as it applies and executes plicies against cntent. The page allws an administratr t define the actin t take fr each plicy cnflict scenari encuntered and lists each cnflict reslutin decisin that was previusly been defined. Plicy cnflicts Plicy cnflict set Reslve plicy cnflicts Plicy cnflicts A plicy cnflict ccurs whenever a plicy phase is ready t execute n a dcument and ther plicies were applied t that dcument. HPE CntrlPint autmatically reprts plicy cnflicts when it encunters them. When HPE CntrlPint first encunters a cnflict, it des nt execute the plicy fr affected dcuments until the cnflict is reslved. NOTE: A Hld plicy actin is nt evaluated fr cnflicts and always executes. Plicy cnflict set The Plicy Cnflict Set is the cmbinatin f the plicy phase that is running n the dcument (the executing plicy), and ther plicies present n the dcument (cnflicting plicies). Fr example, Dcuments A and B have three plicies applied t them. Plicy1. Dispse 5 years after creatin. Plicy2. Dispse 10 years after creatin. Plicy3. Secure Cpy 1 year after date f last mdificatin. If HPE CntrlPint attempts t execute Plicy3 first n dcument A because it meets the plicy executin rule, then the plicy cnflict set is: Executing plicy Plicy3 Cnflicting plicies Plicy1, Plicy2 If HPE CntrlPint attempts t execute Plicy1 first n dcument B because it meets the plicy executin rule, the plicy cnflict set is: Executing plicy Plicy1 Cnflicting plicies Plicy2, Plicy3 HPE CntrlPint (5.5) Page 111 f 195

112 Administratin Guide Chapter 7: Manage plicy cnflicts Reslve plicy cnflicts Yu can cnfigure HPE CntrlPint t attempt t autmatically reslve cnflicts, r yu can reslve them manually. There are advantages and disadvantages t each apprach. Reslving cnflicts autmatically is fast, but may cause sme undesirable reslutins Reslving cnflicts manually ensures that cnflicts are reslved the way yu want, but is less efficient and mre time-cnsuming Autmatically reslve cnflicts Yu can enable a cnfiguratin setting t allw HPE CntrlPint t autmatically reslve cnflicts based n the pririties f the cnflicting plicies. If the plicy trying t execute has a higher pririty than all ther plicies, HPE CntrlPint allws it t execute. If the plicy has a lwer pririty than the thers, HPE CntrlPint prevents it frm executing. If the cnflicting plicies have the same pririty, the cnflict remains unreslved and yu must reslve it manually. T enable autmatic cnflict reslutin 1. On the Administratin dashbard, click Settings. 2. The Settings page pens. 3. On the General tab, click Details. 4. In the Details sectin, change the Autreslve Cnflicts ptin t Yes. 5. Click Save. Manually reslve cnflicts Yu can manually reslve a plicy cnflict in tw ways: Allw the Executing Plicy phase t execute. Prevent the Executing Plicy phase frm executing. Allwing r preventing a plicy phase frm executing des nt impact the additinal plicies in the plicy cnflict set. These plicies still execute when the plicy executin rules are met. HPE CntrlPint stres the cnflict reslutin decisin (Allw r Prevent) and autmatically applies this reslutin t any dcuments that encunter the same Plicy Cnflict Set in the future. T reslve a plicy cnflict 1. On the Administratin dashbard, click Cnflict Management. The Cnflict Management page pens. 2. Select the plicy cnflict t reslve. Unreslved plicy cnflicts shw an Actin f Undefined. 3. In the menu bar, click Actins, and then click Edit. HPE CntrlPint (5.5) Page 112 f 195

113 Administratin Guide Chapter 7: Manage plicy cnflicts 4. If necessary, view the details f the Executing Plicy and the Additinal Plicies by clicking their names in the relevant sectins. 5. Select the required Actin frm the list. Available actins are: Allw. The Executing Plicy is always allwed t execute. Prevent. The Executing Plicy is prevented frm executing. 6. (Optinal) Update the autmatically generated Name and add a Descriptin fr the current plicy cnflict. 7. (Optinal) Click the plicy cnflict name t view the dcuments that match the assciated plicy cnflict set t assist with plicy cnflict reslutin decisins. HPE CntrlPint (5.5) Page 113 f 195

114 Chapter 8: HPE IDOL categries HPE IDOL Categries identify what cntent HPE CntrlPint plicies apply t. HPE IDOLCategries allw plicies t be applied autmatically t new cntent entering an rganizatin. This sectin describes hw t create HPE IDOL categries, hw t train them t match apprpriate cntent, and hw t measure their effectiveness. Taxnmy Categries Taxnmy HPE IDOL Categries exist in a hierarchical structure called a taxnmy. The taxnmy has a single, tplevel, rt categry. All categry ndes have at least ne parent categry and can have zer r mre children (sub-categries). Categries Mst categries are used t find dcuments r files using metadata and cncepts fund within unstructured text. A categry definitin is a mathematical rule against which each dcument can be evaluated fr membership in that categry. Yu can train a categry by using ne r mre f the fllwing methds: Training Text is a list f keywrds that is highly relevant t the type f dcuments yu wish the categry t lcate. Enter the keywrds in the Training text bx in the fllwing manner: wrd1 wrd2 wrd3 wrdn IMPORTANT: D nt use qutes in this list. Blean Training Text is a Blean query expressin cntaining, wrds, phrases (in qutes) and peratrs. Enter a query expressin in the fllwing manner: (human DNEAR resurces OR HR OR persnnel) AND "HR plicies and prcedures". Field Text is a cmbinatin f field criteria that identifies a set f dcuments based n a prperty value match. The prperty value can either be frm the dcument r frm the strage lcatin f the dcument. Training Dcuments is set f sample dcuments, chsen n the basis f their cntent. HPE IDOL extracts the cncepts frm the training dcument, in the frm f a set f terms and assciated weights, and then uses them t train the categry. HPE CntrlPint (5.5) Page 114 f 195

115 Administratin Guide Chapter 8: HPE IDOL categries Cntainer Categry A cntainer categry is an untrained categry that serves as a parent fr ne r mre trained categries. HPE CntrlPint cnfiguratin uses cntainer categries when defining: a single set f categries t use t analyze a repsitry and ppulate the Of Interest metric n the summary page ne r mre sets f categries t use t analyze a repsitry and t display n the Analysis by Categry page Trivial r Sensitive cntent in analysis Ptential Sets Categry training In mst cases, the default settings fr categrizatin return gd results, yet fr sme data sets yu may be able t imprve yur results by cnsidering the fllwing factrs. The default settings f the Categry are values fr training. Yu can restrict ptins, such as Language, t cntrl the number f terms extracted frm training dcuments and the threshld that the results must meet. Training dcuments must be at the Cntent level. Ensure that yu have gd quality training dcuments. HPE IDOL Server uses the cntent f the analysis fields f training dcuments as training, s pay attentin t the cntent f thse fields. Fr example, if the analysis fields cntain a lt f useless metadata frm web pages, yu are unlikely t receive meaningful results. Each dcument shuld cntain at least 50 wrds f text, and the mre wrds it has, the better. Check the quality f training data as the first pririty if the categrizatin results are disappinting. The training dcuments shuld nt be t large. If the training data includes nly a few very large dcuments, the results may be wasteful r misleading. This is because the HPE IDOL Server assigns a greater imprtance t ccurrences f wrds in different dcuments than t multiple ccurrences in the same dcument. The training data must be typical f the type f dcuments that yu want t categrize. Fr example, t categrize web pages, yur training dcuments shuld be similar web pages. The best categries are clearly defined and are different frm ther categries. Ensure that yur training data is crrectly categrized. Cnsider the entire cntent f the dcument, nt just the title r the first few lines. Generally, the mre categries yu have, the mre training data yu need t distinguish between them. The categries that are the least distinct frm thers require mre training data than categries withut verlap with thers. Avid using a list f wrds as training. The HPE IDOL Server calculates the mst apprpriate cncepts frm training dcuments and des nt rely n a few human-chsen terms. Categrizatin depends n the cntents f the whle analysis and nt just n the training dcuments. If yu have tw HPE IDOL Server analysis that cntain different dcuments, they categrize differently, even if yu use the same training dcuments. The weights that training gives t terms depend n hw ften thse terms ccur in the analysis, nt just in the training dcuments. Fr categrizatin, yu btain the best results if the analysis cntains the cmplete set f training dcuments and nthing else. HPE CntrlPint (5.5) Page 115 f 195

116 Administratin Guide Chapter 8: HPE IDOL categries Avid using URLs t train yur categries because the linked file is likely t cntain extra cntent, such as advertisements, which is nt useful. It is best t use the dcuments in the data analysis that generally have been scrubbed f extraneus cntent and are in a useful frmat. Ensure that HPE CntrlPint can access yur training dcuments. Use Fine Tuning t define which terms can and cannt be used t derive the terms and weights (TNWs) fr a categry frm its training. Only terms in the Allwed Terms list can be used in TNWs. N terms in the disallwed list can be used in the TNWs. Categries trained using Repsitries and FieldText wrk fr Repsitries that are belw Cntent. Additinal training ptins such as training text will nly return dcuments that are in Cntent Repsitries (HPE IDOL). Define a categry When yu define a categry, yu can use benchmark dcuments t measure the quality f the categry training. Benchmark dcuments d nt impact training; they shw the impact f training n specific dcuments. Psitive benchmark dcuments cntain categry training cntent at r abve a desired threshld. A negative benchmark dcument is typically a false psitive that yu identify in the results list f a categry. Yu can mark it and use it t retrain the categry with the bjective t get all negative benchmark dcuments belw the threshld and excluded frm categry results. Ideally, a categry wuld include all psitive benchmark dcuments abve the threshld and all negative benchmark dcuments belw the threshld. Benchmark dcuments that are incrrectly lcated (that is, psitive and belw the threshld, r negative and abve the threshld) are highlighted in the Benchmark Dcument grid, with an Alert icn and a TlTip. HPE CntrlPint (5.5) Page 116 f 195

117 Administratin Guide Chapter 8: HPE IDOL categries An indicatin f the quality f a categry appears abve the benchmark dcument grid. The quality is based upn the rati f psitive benchmark dcuments, which are abve the threshld, and the number f negative benchmark dcuments, which are belw the threshld. Categry quality is reprted n a scale f 1-5. T define a categry 1. Click the Categries tab. The taxnmy appears n the left f the page. 2. Add a categry at the desired level f the taxnmy: T add a categry immediately under the tp-level, rt nde, click. T add a child categry f an existing categry, first select the categry, and then click. 3. On the General page, enter a categry Name and an ptinal Descriptin. 4. On the Training page: a. Select ne r mre Repsitries fr the categry t search b. Specify ne r mre methds t train the categry: Training Text. Enter the training text int the text bx. Blean Training Text. Enter the Blean query text int the text bx. Field Text. Frm the Add Criteria list, select the HPE IDOL fields and values t use fr training. HPE CntrlPint (5.5) Page 117 f 195