Thermo Foundation Administrator Guide

Transcription

1 Thermo Foundation Administrator Guide XCALI Revision B January 2011

2 2011 Thermo Fisher Scientific Inc. All rights reserved. Xcalibur, Surveyor, LTQ, and Accela are registered trademarks, and LCQ, BioWorks, and LCquan are trademarks of Thermo Fisher Scientific Inc. in the United States. The following are registered trademarks in the United States and other countries: Microsoft, Windows, Windows Vista, Access, and Excel are registered trademarks of Microsoft Corporation. Adobe, Acrobat, and Acrobat Reader are registered trademarks of Adobe Systems Incorporated. Agilent is a registered trademark of Agilent Technologies, Inc. in the United States and possibly other countries. Waters is a registered trademark of the Waters Corporation in the United States. All other trademarks are the property of Thermo Fisher Scientific Inc. and its subsidiaries. Thermo Fisher Scientific Inc. provides this document to its customers with a product purchase to use in the product operation. This document is copyright protected and any reproduction of the whole or any part of this document is strictly prohibited, except with the written authorization of Thermo Fisher Scientific Inc. The contents of this document are subject to change without notice. All technical information in this document is for reference purposes only. System configurations and specifications in this document supersede all previous information received by the purchaser. Thermo Fisher Scientific Inc. makes no representations that this document is complete, accurate or errorfree and assumes no responsibility and will not be liable for any errors, omissions, damage or loss that might result from any use of this document, even if the information in the document is followed properly. This document is not part of any sales contract between Thermo Fisher Scientific Inc. and a purchaser. This document shall in no way govern or modify any Terms and Conditions of Sale, which Terms and Conditions of Sale shall govern all conflicting information between the two documents. Release history: Revision A September 2010, Revision B January 2011 (to reflect Windows 7 compatibility) Software version: Thermo Foundation Service Pack 2 (Windows 7 operating system) For Research Use Only. Not for use in diagnostic procedures.

3 C Contents Preface v About This Guide v Relation Documentation vi Special Notices vi Contacting Us vi Chapter 1 Using the Thermo Foundation Auditing Database Configuration Manager Chapter 2 Establishing Secure File Operations Turning Off Fast User Switching for Local Workstations Confirming the Properties of Thermo Foundation DatabaseService Configuring Security Settings for Folders and Files Working with Accounts Set Up by the Foundation Application Adding Users Removing Users Setting Permissions Setting Permissions for Foundation Application Folders Sequential User Logon and Automatic Logoff Configuring Security Settings for the Database Registry Key Removing and Archiving Files Chapter 3 Defining Secure User Groups and Adding Users Planning User Groups Using the Thermo Foundation Authorization Manager Defining User Groups Editing User Groups Setting Permissions Setting the Permission Levels for an Individual Feature Setting All Permissions Inheriting Permissions Exporting and Importing Permissions Specifying Predefined Comments Viewing the Authorization Manager History Log Printing the Security Settings Saving the Security Settings Thermo Scientific Thermo Foundation Administrator Guide iii

4 Contents Chapter 4 Using the Thermo Foundation CRC Validator Checking Files with the Thermo Foundation CRC Validator Selecting Files Using Database Filters Selecting Files Using a Pattern Chapter 5 Auditing Accessing the Auditing and Workbook Databases Accessing the Global Auditing Database Accessing the Application Workbook Database Viewing Audit Viewer Pages Filtering Audit Viewer Entries Sorting Audit Viewer Entries Printing Audit Viewer Entries Printing the Audit Trail for the Global Auditing Database Printing the Audit Trail for an Application Workbook Database Appendix A Installing an Oracle Database Installing the Oracle Server Installing the Oracle Client Appendix B System Administration Reference Thermo Foundation Administrator Utilities Thermo Foundation Audit Viewer All Page, Audit Viewer History Page, Audit Viewer Event Page, Audit Viewer File Tracking Page, Audit Viewer Instrument Error Page, Audit Viewer Sort Entries Dialog Box Print Options Dialog Box Filter Entries Dialog Box Thermo Foundation Auditing Database Configuration Manager Thermo Foundation Authorization Manager Choose Secure Group Dialog Box Create Private Group and Edit User List Of Private Group Dialog Boxes Edit Comment List Dialog Box Users In Group Dialog Box New Comment Dialog Box Thermo Foundation CRC Validator Index iv Thermo Foundation Administrator Guide Thermo Scientific

5 P Preface The Thermo Foundation Administrator Guide describes how to provide system administration for standard system operation using the Thermo Foundation mass spectrometry data system. For information on how to use tools in the Foundation data system to support compliance with the Electronic Records and Electronic Signatures Rule, published by the United States Food and Drug Administration as 21 CFR Part 11, refer to the Thermo Xcalibur LCquan Administrator Guide. Contents About This Guide Relation Documentation Special Notices Contacting Us To provide us with comments about this document, click the link below. Thank you in advance for your help. About This Guide This guide has the following topics: Using the Thermo Foundation Auditing Database Configuration Manager Establishing Secure File Operations Defining Secure User Groups and Adding Users Using the Thermo Foundation CRC Validator Auditing Installing an Oracle Database System Administration Reference Thermo Scientific Thermo Foundation Administrator Guide v

6 Preface Relation Documentation Relation Documentation You will also find the information covered in this user guide in a Help system that comes with the Thermo Foundation software. Thermo Foundation includes Help in HTML format and the Thermo Foundation Administrator Guide as a PDF file. To view product manuals Go to Start > All Programs > Thermo Foundation 1.0 > Manuals. Special Notices Make sure you follow the precautionary statements presented in this guide. The special notices appear in boxes. Special notices include the following: IMPORTANT Highlights information necessary to prevent damage to software, loss of data, or invalid test results; or might contain information that is critical for optimal performance of the system. Note Highlights information of general interest. Tip Highlights helpful information that can make a task easier. Contacting Us There are several ways to contact Thermo Fisher Scientific for the information you need. To contact Technical Support Phone Fax us.techsupport.analyze@thermofisher.com Knowledge base Find software updates and utilities to download at mssupport.thermo.com. vi Thermo Foundation Administrator Guide Thermo Scientific

7 Preface Contacting Us To contact Customer Service for ordering information Phone Fax Web site To get local contact information for sales or service Go to To copy manuals from the Internet Go to mssupport.thermo.com, agree to the Terms and Conditions, and then click Customer Manuals in the left margin of the window. To suggest changes to documentation or to Help Fill out a reader survey online at Send an message to the Technical Publications Editor at techpubs-lcms@thermofisher.com. Thermo Scientific Thermo Foundation Administrator Guide vii

8

9 1 Using the Thermo Foundation Auditing Database Configuration Manager This chapter describes how to use the Thermo Foundation Auditing Database Configuration Manager to configure your database. The database keeps a record of auditable events and changes made to files that a Thermo Foundation application either creates or manages. Use the Thermo Foundation Auditing Database Configuration Manager to configure either a Microsoft Access database on your local computer or an Oracle database on a remote computer. To use an Oracle database, confirm completion of these tasks: An Oracle database has been installed on an accessible remote server. Consult your Oracle database administrator for more information, or see Appendix A, Installing an Oracle Database. The Oracle client software has been installed on your local computer. Consult your Oracle database administrator for more information, or see Appendix A, Installing an Oracle Database. Make sure that you know the User Name, Password, and Oracle Net Service Name of your Oracle database. Obtain this information from your Oracle database administrator. Thermo Scientific Thermo Foundation Administrator Guide 1

10 1 Using the Thermo Foundation Auditing Database Configuration Manager To configure your auditing database using the Thermo Foundation Auditing Database Configuration Manager 1. From the Windows taskbar, choose Start > All Programs > Thermo Foundation 1.0 > Database Configuration. The Thermo Foundation Auditing Database Configuration Manager wizard opens (see Figure 1). Figure 1. Thermo Foundation Auditing Database Configuration Manager wizard 2. Select the database type in the Select Database Type area: When using a Microsoft Access database, select the Microsoft Access option and go to step 4. When using an Oracle database, select the Oracle on Network Server option and go to step To use an Oracle database, specify the Oracle database parameters: a. Type the database user name in the User Name box. b. Type the database password in the Password box. c. Select the Oracle Net Service Name for your database in the Oracle Net Service Name list. IMPORTANT Be sure to use the Oracle user name and password provided by your Oracle database administrator. 2 Thermo Foundation Administrator Guide Thermo Scientific

11 1 Using the Thermo Foundation Auditing Database Configuration Manager 4. Click Next. The DatabaseConfigManager dialog box opens (see Figure 2). Figure 2. DatabaseConfigManager dialog box 5. Confirm that the settings are correct and click OK. The Thermo Foundation Auditing Database Configuration Manager wizard, similar to Figure 3, appears. Figure 3. Thermo Foundation Auditing Database Configuration Manager wizard, showing restart settings Thermo Scientific Thermo Foundation Administrator Guide 3

12 1 Using the Thermo Foundation Auditing Database Configuration Manager 6. Select a restart option: To have the computer restart automatically after you click Finish, select the Restart Computer now option. To restart the computer manually at a later time, select the I will restart later option. IMPORTANT The changes you make in the Thermo Foundation Auditing Database Configuration Manager do not take effect until you restart the computer. 7. Click Finish to save your settings and close the Thermo Foundation Auditing Database Configuration Manager wizard. 4 Thermo Foundation Administrator Guide Thermo Scientific

13 2 Establishing Secure File Operations This chapter describes how to configure the required operating system security settings to make sure the auditing database, Authorization Manager, and other security features of applications installed on Thermo Foundation software operate correctly. Contents Turning Off Fast User Switching for Local Workstations Confirming the Properties of Thermo Foundation DatabaseService Configuring Security Settings for Folders and Files Configuring Security Settings for the Database Registry Key Removing and Archiving Files Turning Off Fast User Switching for Local Workstations Depending on the operating system, you can switch between users without actually logging off from the computer. This feature, called Fast User Switching, can be turned off so that the current user must log off before another user logs on. Turning off fast user switching is important because as the system administrator, if you do not turn off fast user switching, two users could log in at the same time, which can cause strange behavior when they try to control their mass spectrometer. The acquisition service can only handle one user logged in at a time. We recommend all labs turn off fast user switching, regardless of whether secure file operations are important to them or not. To maintain secure file operations, turn off Fast User Switching on all computers that provide this option. Windows XP Professional operating system provides Fast User Switching on computers that are not members of a network domain. Windows Vista operating system provides Fast User Switching on all computers. Windows 7 operating system provides Fast User Switching on all computers. Thermo Scientific Thermo Foundation Administrator Guide 5

14 2 Establishing Secure File Operations Turning Off Fast User Switching for Local Workstations To turn off Fast User Switching 1. From the Windows 7 taskbar, choose Start. 2. In the Run dialog box, type gpedit.msc and press ENTER. 3. In the Local Group Policy Editor window, navigate to the Local Computer Policy\Computer Configuration\Administrative Templates\System\Logon folder (see Figure 4). Figure 4. Local Group Policy Editor window 4. Double-click Hide Entry Points for Fast User Switching. 5. In the Hide Entry Points for Fast User Switching dialog box, select the Enabled option (see Figure 5). 6 Thermo Foundation Administrator Guide Thermo Scientific

15 2 Establishing Secure File Operations Confirming the Properties of Thermo Foundation DatabaseService Figure 5. Hide entry points for Fast User Switching dialog box 6. Click Apply, and then click OK. When a user logs out, the computer automatically shuts down any programs that are running. Confirming the Properties of Thermo Foundation DatabaseService The authorization and auditing functions of an application installed on the Thermo Foundation application rely on two system services: the Finnigan Security Server and the Thermo Foundation DatabaseService. These services are installed when you install the application software. They automatically start whenever a user restarts a workstation. The main function of the Finnigan Security Server is user authentication. If certain events require authentication, the Finnigan Security Server verifies the user names and passwords entered. Note The Finnigan Security Server is only installed with the Xcalibur application. For information related to Finnigan Security Server, refer to Thermo Xcalibur Getting Started. With the Thermo Foundation DatabaseService, layered applications can access the auditing database and make auditing entries. Thermo Scientific Thermo Foundation Administrator Guide 7

16 2 Establishing Secure File Operations Confirming the Properties of Thermo Foundation DatabaseService To confirm the properties of Thermo Foundation DatabaseService are set correctly 1. To open the Services window, choose Start > Control Panel > System and Security > Administrative Tools from your computer taskbar, and double-click Services. 2. Right-click Thermo Foundation DatabaseService and choose Properties from the shortcut menu. The Thermo Foundation DatabaseService Properties dialog box opens to the General page (see Figure 6). Figure 6. General page 3. On the General page, in the Startup Type list, select Automatic. 4. Confirm that Service Status reads Started. 5. Click the Log On tab to display the Log On page (see Figure 7). 8 Thermo Foundation Administrator Guide Thermo Scientific

17 2 Establishing Secure File Operations Confirming the Properties of Thermo Foundation DatabaseService Figure 7. Log On page 6. Under Log On As, select the Local System Account option. 7. Clear the Allow Service to Interact with Desktop check box. 8. Click OK to close the dialog box. 9. Close the Services window and close the Administrative Tools window. Thermo Scientific Thermo Foundation Administrator Guide 9

18 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files Configuring Security Settings for Folders and Files To confirm the security of your data, restrict access to the folder named INI (located by default in C:\Documents and Settings\All Users\Application Data\Thermo Scientific\) that contains the configuration files. Because the Thermo Foundation Authorization Manager reads the controlled feature information from the configuration files, prohibit access to these files by non-administrators. Note The Application Data folder containing the configuration files is hidden by default in Windows. To make it appear, go to Start > Control Panel > Appearance and Personalization > Folder Options > View > Hidden Files and Folders, and select Show Hidden Files and Folders. Set up specific user group access to folders and files with the NTFS file system (an advanced file system used within the computer operating system). When you set up permissions, specify the level of access for user groups, for example: Permit members of one user group to read the contents of a file. Permit members of another user group to make changes to the file. Prevent members of all other user groups from accessing the file. New subfolders and files inherit folder permissions automatically. After you set the appropriate permissions, an unauthorized user cannot maliciously or accidentally alter the contents of the folder with utilities such as Windows Explorer. In the procedures that follow, add an administrative user (or administrative group) and the Everyone group to the Security page Group or User Names list. Grant the administrator full access to the security folder and read-only access to everyone else. Tip When you require more restricted access to folders and files, grant access only to specific user groups. Set up appropriate user groups. See Chapter 3, Defining Secure User Groups and Adding Users. Complete the procedures that follow, but use your specific user group, instead of the Everyone group. Working with Accounts Set Up by the Foundation Application Adding Users Removing Users Setting Permissions for Foundation Application Folders 10 Thermo Foundation Administrator Guide Thermo Scientific

19 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files Working with Accounts Set Up by the Foundation Application To support system security, the Foundation application sets up these files: Xcalibur_System IUSR_localPCname IWAM_localPCname ASPNET ASPNET.postgres (user account) The Foundation application creates this account with administrative privileges. The account name and password are embedded. The account is not interactive. No one ever logs in to this account except the application itself. Proteomics Browser (software included on the BioWorks product CD) requires the installation of Internet Information Services (IIS) to run correctly. Do not delete this file. Installing IIS creates these two accounts. The expression localpcname in the user account name represents the name of your local PC. All accounts appear to interface with Microsoft IIS 5.0 for either starting out of process accounts, using anonymous access, or running.net objects. Proteomics Browser also creates two additional accounts upon installation: Might have been installed by a non-thermo Scientific application. The layered application ProSight PC uses the Microsoft asp.net network framework and creates a user account. ProtUserBioWorks 3.2 and later. Created by Proteomics Browser upon installation. If you delete these files, recover them using these actions: If you deleted this file Xcalibur_System IUSR_localPCname IWAM_localPCname ASPNET postgresprotuser Action to restore Reinstall the Thermo Foundation software. Reinstall IIS using the instructions in the CD jewel case and the user guide for Bioworks Browser. Apply for the license to be renewed. If installing ProSight PC software causes this file to be installed, then reinstall ProSight PC. If ASPNET was installed by your IT department or another application, then get instructions from the responsible party locally. Reinstall Proteomics Browser using the instructions in the CD jewel case and the user guide for Bioworks Browser. Adding Users Before setting permission levels for a folder or registry key, you might need to add users and groups to the Groups or User Names list on the Security page. Thermo Scientific Thermo Foundation Administrator Guide 11

20 . 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files To add users and groups 1. Locate the Foundation application folder in Windows Explorer. (The default path is C:\Program Files\Thermo\Foundation.) 2. Right-click the folder with the application name and choose Properties from the shortcut menu. The Foundation Properties dialog box for the folder opens. 3. Click the Security tab to display the Security page (see Figure 8) Figure 8. Security tab Note The Security tab is unavailable by default. To make it available, go to Start > Control Panel > Appearance and Personalization > Folder Options > View, and select Use Sharing Wizard. 4. Click Edit on the Security page of the Properties dialog box. The Permissions for Foundation dialog box opens (see Figure 9). 12 Thermo Foundation Administrator Guide Thermo Scientific

21 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files Figure 9. Permissions for Foundation dialog box 5. Click Add. The Select Users or Groups dialog box opens (see Figure 10). Figure 10. Select Users or Groups dialog box 6. Confirm that the Select This Object Type box lists the object types that you require (for example, Users, Groups, Built-in Security Principals). To change the list, click Object Types. The Object Types dialog box opens. Add or remove object types as needed. Thermo Scientific Thermo Foundation Administrator Guide 13

22 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files 7. Confirm that the From This Location box lists the root location that contains your users and groups. To change where to search, click Locations to open the Locations dialog box and specify a new location. 8. Enter the users or groups in the Enter the Object Names to Select box: If the Everyone group was missing from the Group or User Names list on the Security page, type Everyone. If the user name of the administrator (or the name of the administrator group) was missing from the Group or User Names list on the Security page, type the appropriate user name or group name. Tip To enter multiple object names at the same time, separate the names with a semicolon. 9. Click Check Names to search for users or groups with the names that you specified in the box. All similar or matching object names that were found appear underlined in the box (see Figure 11). Figure 11. Select Users Or Groups dialog box, showing the Everyone group 10. Confirm that only the correct object name or names are listed in the box and click OK to close the dialog box and return to the Properties dialog box. 11. Examine the Group or User Names list on the Security page of the Properties dialog box again. The Everyone group and the name of the administrator are now available in the list. When additional groups or users appear in the Group or User Names list, go to the next topic, Removing Users. If no additional groups or users appear, go to Setting Permissions on page Thermo Foundation Administrator Guide Thermo Scientific

23 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files Removing Users Setting Permissions To remove users or groups from the Group or User Names list on the Security page 1. Select the name of the user or group. 2. Click Remove to remove the selected user or group. 3. Repeat these steps to remove any other users or groups. You are now ready to set the permission levels for your users and groups. After the correct users and groups are in the Group or User Names list on the Security page of the Properties dialog box, set the permissions as follows: 1. On the Security page of the Foundation Properties dialog box, select the administrator (or the administrator group) in the Group or User Names list, then click Edit (see Figure 12). Figure 12. Security page in the Foundation Properties dialog box Thermo Scientific Thermo Foundation Administrator Guide 15

24 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files 2. In the Permissions for Foundation dialog box, select the Allow check box for the Full Control option. All of the other check boxes in the Allow column are automatically selected (see Figure 13). Figure 13. Security page showing the correct administrator settings Note Groups or users granted Full Control for a folder can delete files and subfolders within that folder regardless of the permissions protecting the files and subfolders. 3. In the Group or User Names list, select Everyone. 4. In the Permissions for Everyone list, select the Allow check box for the Read option and clear the Allow check box for all other actions in the list. Note Setting these permissions confirms that you cannot delete any of the files in the folder using Windows Explorer. 5. Click OK to close the Permissions for Foundation dialog box and return to the Security page. 6. To confirm that the inheritance setting is correct, on the Security page click Advanced. The Advanced Security Settings dialog box opens (see Figure 14). 16 Thermo Foundation Administrator Guide Thermo Scientific

25 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files Figure 14. Advanced Security Settings dialog box 7. Click Change Permissions. The Permissions page opens (see Figure 15). Figure 15. Permissions page Thermo Scientific Thermo Foundation Administrator Guide 17

26 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files 8. Clear the Include Inheritable Permissions from This Object s Parent check box. The Windows Security dialog box opens (see Figure 16). Figure 16. Windows Security dialog box 9. Click Add and then OK to close the dialog box and return to the Permissions page. 10. Click OK to return to the Security page. 11. Click OK to close the Foundation Properties dialog box and save the permission assignments. You have configured the security settings for the security folder. Setting Permissions for Foundation Application Folders When you configure a system with multiple users who might work with a Foundation application files or folders that they did not create, make sure these users have access with the necessary permissions. If these permissions are not set correctly, users might not be able to open or modify files created by other users. In the procedure that follows, add the Everyone group to the Security page in the Group or User Names list, and grant appropriate access to that group. Tip When you require more restricted access to folders and files, grant access to only specific user groups. Set up appropriate user groups. Complete the procedures that follow, but use specific user groups instead of the Everyone group. 18 Thermo Foundation Administrator Guide Thermo Scientific

27 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files To set permissions for Foundation application folders 1. Locate the application folder in Windows Explorer. (The default path is C:\Program Files\Thermo\Foundation.) 2. Right-click the application folder and choose Properties from the shortcut menu. The Properties dialog box for the folder opens. 3. Click the Security tab to display the Security page (see Figure 17). Figure 17. Security page 4. Click Advanced. The Advanced Security Settings dialog box for the application folder opens (see Figure 18). Thermo Scientific Thermo Foundation Administrator Guide 19

28 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files Figure 18. Advanced Security Settings dialog box 5. Click Change Permissions. The Permissions page opens (see Figure 19). Figure 19. Permissions page 20 Thermo Foundation Administrator Guide Thermo Scientific

29 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files 6. Clear the Include Inheritable Permissions from This Object s Parent check box. The Windows Security dialog box opens (see Figure 20). Figure 20. Windows Security dialog box 7. Click Add to copy the inherited permissions to the new folder. The Windows Security dialog box closes. Click OK to close the Advanced Security Settings dialog box. Correct the permission settings later. (See Setting Permissions on page 15.) 8. Make sure that the Everyone group appears in the Group or User Names list in the Properties dialog box. If it does not appear in the list, add it. (See Adding Users on page 11.) 9. Select Users in the Group or User Names list. 10. Confirm that the Allow check boxes are selected for the following settings: Modify (This setting allows the user to delete by default. To turn off delete, you must configure the advanced permissions.) Read and Execute List Folder Contents Read Write 11. To save the permission assignments, click OK. The Properties dialog box closes. 12. Repeat steps 1 to 10 for any additional folders not in the application folder hierarchy that you use to store the application data. Thermo Scientific Thermo Foundation Administrator Guide 21

30 2 Establishing Secure File Operations Configuring Security Settings for Folders and Files Sequential User Logon and Automatic Logoff Use the Sequential User Logon feature to allow a user to log on to a workstation, start data acquisition, and then log off while the system continues to acquire the data. A subsequent user can log on to the workstation, queue acquisition sequences, and process data while the acquisition that the first user started continues. To enable or disable Automatic Logoff 1. Choose Start > All Programs > Thermo Foundation 1.0 > AutoLogoff. The Thermo Foundation Automatic Logoff Setup dialog box appears (see Figure 21). Note By default, Automatic Logoff is disabled (the Enable check box is cleared). Figure 21. Automatic Logoff Setup dialog box 2. Do one of the following: To turn on the feature, select the Enable check box. Type a value (1 1000) in the Auto logoff time (minutes) box to specify how long the system waits before logging off the current user. To turn off the feature, clear the Enable check box. IMPORTANT If your Foundation application system is on a computer that has the Windows Vista operating system installed, provide the following instruction to your users after you turn on AutoLogoff: Each time a user logs on, The Windows Vista operating system prompts the user for permission to run AutoLogoff in the background. The user must choose Allow every time. Add this instruction to your standard operating procedures. If this procedure is not acceptable, run the application on a Windows XP system. 3. Click OK. Note If the Windows XP screen saver is set to display on the computer at an earlier time than the Auto Logoff time, the automatic logoff still occurs at the specified time, even though the user cannot see evidence of the logoff because the screen saver is active. 22 Thermo Foundation Administrator Guide Thermo Scientific

31 2 Establishing Secure File Operations Configuring Security Settings for the Database Registry Key Configuring Security Settings for the Database Registry Key As the administrator, when you run the Database Configuration tool for the first time, the tool creates a registry key for the computer that stores information about the database. To confirm the security of the auditing database, the security settings for this registry key must be set so that only the workstation administrator can make changes to the key. To configure the security settings for the database registry key 1. From the Windows 7 taskbar, choose Start. 2. Type regedit in the Run dialog and press ENTER. The Registry Editor window opens (see Figure 22). Figure 22. Registry Editor window, showing CFR_Database key selected 3. Navigate to the Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ Thermo Scientific\Foundation\Auditing\CFR_Database folder in the left pane of the Registry Editor window. 4. Right-click the CFR_Database folder and choose Permissions from the shortcut menu. The Permissions dialog box for this registry key opens (see Figure 23). Thermo Scientific Thermo Foundation Administrator Guide 23

32 2 Establishing Secure File Operations Configuring Security Settings for the Database Registry Key Figure 23. Permissions dialog box for CFR_Database 24 Thermo Foundation Administrator Guide Thermo Scientific

33 2 Establishing Secure File Operations Configuring Security Settings for the Database Registry Key 5. Click Advanced. The Advanced Security Settings dialog box opens (see Figure 24). Figure 24. Advanced Security Settings dialog box 6. Clear the Inherit from Parent the Permission Entries that Apply to Child Objects check box. The Windows Security dialog box opens (see Figure 25). Figure 25. Security dialog box 7. To copy the inherited permissions to the CFR_Database registry key, click Add. Click OK to close the Advanced Security Settings dialog box. Thermo Scientific Thermo Foundation Administrator Guide 25

34 2 Establishing Secure File Operations Configuring Security Settings for the Database Registry Key 8. Examine the Group or User Name list in the Foundation Properties dialog box and note that only the name of the administrator (or the administrator group) and the Everyone group appear in this list. If the administrator (or the administrator group) does not appear in the list, add it. (See Adding Users on page 11.) If the Everyone group does not appear in the list, add it. (See Adding Users on page 11.) If other users or groups appear in the list, remove them. (See Removing Users on page 15.) 9. To set the permissions for the registry key, select the administrator (or the administrator group) in the Group or User Name list. 10. In the Permissions for Administrators list, select the Allow check box for the Full Control option. The Read check box in the Allow column is automatically selected (see Figure 26). Figure 26. Permissions dialog box for CFR_Database, showing permission settings for the Administrators group 26 Thermo Foundation Administrator Guide Thermo Scientific

35 2 Establishing Secure File Operations Removing and Archiving Files 11. Select Everyone in the Group or User Name list. 12. In the Permissions list, select the Allow check box for the Read option. Clear the Allow check box for all other actions in the list. 13. To save the permission settings, click OK. The Permissions dialog box closes. 14. Choose File > Exit to close the Registry Editor. Removing and Archiving Files To archive files, use third-party software designed for this purpose. In addition, develop and implement standard operating procedures for archiving files and security procedures to protect the archived data. Thermo Scientific Thermo Foundation Administrator Guide 27

36

37 3 Defining Secure User Groups and Adding Users To control access to certain features of the Thermo Foundation application, define secure user groups and grant these groups appropriate permission levels. By design, every member of a secure user group holds the same rights and permissions. Use the Thermo Foundation Authorization Manager to create new groups and define permission levels. After you define secure user groups and set permission levels, only those users who are in a secure user group can access the application. All others are prohibited access. Contents Planning User Groups Using the Thermo Foundation Authorization Manager Thermo Scientific Thermo Foundation Administrator Guide 29

38 3 Defining Secure User Groups and Adding Users Planning User Groups Planning User Groups Before you begin, decide how many user groups you require or, if more appropriate, how many levels of access to grant to your users. For example, consider a laboratory where both scientists and technicians work. The standard operating procedures for this laboratory state that technicians cannot perform certain operations with the software in contrast to scientists who have no restrictions. In this case, if you are the laboratory administrator, you must create at least two user groups one for technicians and one for scientists. There is no limit to the number of user groups defined. For simplicity, if all users are to have the same privileges, define a single user group. IMPORTANT As a precaution, define at least one user group. If no user groups are configured in the Authorization Manager, access to controlled features is unrestricted. A user group can be either a preexisting Windows domain logon group or a private group: The domain administrator must create and manage Windows domain logon groups. For help with domain logon groups, contact your domain administrator. The workstation administrator can create and manage private groups. However, before the administrator can add a user to a private group, the user must be a member of a domain group. If an intended user is not a user on the domain, grant a domain account for that person. Contact your domain administrator for help in completing this task. A single user can belong to more than one user group. If the groups have different permission levels, the most lenient permission level applies to the user. Using the Thermo Foundation Authorization Manager Procedures for using the Thermo Foundation Authorization Manager follow: Defining User Groups Editing User Groups Setting Permissions Specifying Predefined Comments Viewing the Authorization Manager History Log Printing the Security Settings Saving the Security Settings Note Shut down all applications before running the Authorization Manager. Otherwise, if you make changes to permissions for an application when the application is open, the changes might not take effect until you exit and restart the program. 30 Thermo Foundation Administrator Guide Thermo Scientific

39 3 Defining Secure User Groups and Adding Users Using the Thermo Foundation Authorization Manager Defining User Groups To define user groups 1. From your computer taskbar, choose Start > All Programs > Thermo Foundation 1.0 > Authorization Manager. The Thermo Foundation Authorization Manager opens (see Figure 27). Figure 27. Thermo Foundation Authorization Manager 2. Select the appropriate Available Groups option to specify the type of user group: To use preexisting Windows logon groups, select the Domain/Workstation option. Contact your domain administrator to create or change logon groups. Continue with step 3. To use (or to create) a local user group, select the Private option. The administrator of the workstation can create private groups. Skip to step 4. Thermo Scientific Thermo Foundation Administrator Guide 31

40 3 Defining Secure User Groups and Adding Users Using the Thermo Foundation Authorization Manager 3. To define secure domain/workstation logon groups, select a group in the Available Groups list to define as a secure group and click. The group appears in the Secure Groups box. To define more groups as secure, repeat this process. When you have created all needed groups, go to the next procedure Editing User Groups on page To define secure private groups, click Create in the Secure Groups area. The Create Private Group dialog box opens (see Figure 28). Figure 28. Create Private Group dialog box, showing two users in the new private group, Xcal Users 5. Type a name for the group in the Group Name box. 6. Select a domain in the System group list. The application displays the domain user accounts in the Users in system group box. 7. Select a user account and click Add to add it to the new private group. The user account appears in the Users in Private group box. 8. To add users in other domains to the private group, repeat steps 6 and 7. Otherwise, click OK. The new private group appears in the Secure Groups box. 9. To create additional private groups, repeat steps 4 to 8. If you have created all needed private groups, continue with the next procedure. 32 Thermo Foundation Administrator Guide Thermo Scientific

41 3 Defining Secure User Groups and Adding Users Using the Thermo Foundation Authorization Manager Editing User Groups Setting Permissions After defining a secure user group, you can view and (for private groups only) change the members of the group. To do this, right-click the user group in the Secure Groups box and select Members from the shortcut menu. If the group is a private group, the Edit user list of private group dialog box opens. Add or remove names from the user group by using the arrow keys. If the group is a domain/workstation logon group, the Modify users in group dialog box opens. Because membership in these groups is controlled by the domain administrator, the lists in the Modify users in group dialog box are read-only. (To make changes to domain/workstation logon groups, see your domain administrator.) For each secure user group, set the permission levels in the Permission Level area for certain features in the software application. The available permission levels are listed in Table 1. All new secure user groups, whether domain/workstation groups or private groups, have all features set to Disallowed. Table 1. Permission levels and descriptions Permission level Disallowed Signature List Supervisor Password Password Allowed Description Not permitted. Specify whether the user interface control for the disallowed operation is hidden or grayed out. To perform the desired action, enter the names and passwords of everyone on the signature list. A series of dialog boxes (one for each signature) appear when a user attempts to perform this action in the software application. To perform the desired action, enter the supervisor name and password. A dialog box for the supervisor signature opens when a user attempts to perform this action in the software application. To perform the desired action, enter the user password. A dialog box for the user password opens when a user attempts to perform this action in the software application. No restrictions. Thermo Scientific Thermo Foundation Administrator Guide 33

42 3 Defining Secure User Groups and Adding Users Using the Thermo Foundation Authorization Manager Set permission levels in the following ways: Setting the Permission Levels for an Individual Feature Setting All Permissions Inheriting Permissions Exporting and Importing Permissions Setting the Permission Levels for an Individual Feature To change the permission level of an individual feature 1. Select a user group in the Secure Groups box. 2. Select the name of your software application from the list in the lower left of the Authorization Manager. 3. Click Expand Tree to show the entire list of controlled features for the application. 4. From the list, select the feature whose permission level you want to change. Note You can set permissions only for individual features, not subgroups. After selecting a feature, the Permission Level options are active. If they are unavailable, you probably selected a subgroup, not a feature. 5. Select one of the Permission Level options: Disallowed Signature List Supervisor Password Password Required Allowed Tip To define the permission level of a feature, right-click the feature and select the permission level from the shortcut menu. 6. If you selected Disallowed, specify the appearance of the user interface control in the Disallowed State area: If you do not want the user interface control to appear at all, select the Hidden option. To gray out the user interface control, select the Grayed option. 34 Thermo Foundation Administrator Guide Thermo Scientific

43 3 Defining Secure User Groups and Adding Users Using the Thermo Foundation Authorization Manager 7. For Permission Level, if you selected Signature List, use the Signature List Groups area to define the signature list groups: Note When you choose a feature in the software application with a permission level of Signature List, a series of password dialog boxes appear, one for each signature (the name and password of every member of the designated group). The order of the groups shown in the Available groups box defines the order of appearance for the password dialog boxes. a. Select a user group in the Available groups box and click. The group appears in the Signature required box. b. Add other groups to the signature list in the same manner as needed. c. To require that the current user of the software application be placed on the signature list, select the Current User Must Sign check box. d. If you must rearrange the order of the groups in the signature list, select a group and click Up or Down in the Move Group area. 8. To permit the user to enter a comment after performing an action, select the Comment check box under Other requirements. (This option is available for all permission settings, except Disallowed.) After the user enters a comment, it appears in the audit log for the software application. 9. Set the permission levels for any or all of the remaining features: To set the permission level of an individual feature, repeat steps 4 to 8. To set all of the other features for this application to the same permission level that you just set, select the This application option in the All Features area and click Set To Same. The Permission Level setting, the Disallowed state setting (if applicable), and the Comment setting are copied to all of the other features for the currently selected application. To set all other features for all applications to the permission level that you just set, select the All applications option and click Set To Same. The software copies the Permission Level setting, the Disallowed state setting (if applicable), and the Comment setting to all other features for all applications. 10. To set the permission levels for other user groups in the Secure Groups box, repeat steps 1 to 9. IMPORTANT Permission level settings are retained when you move a user group out of the Secure Groups box and into the Available Groups box. When you move the group back into the Secure Groups box, the permission settings remain intact. When you delete a user group from the Secure Groups box, however, all permission settings are lost. Thermo Scientific Thermo Foundation Administrator Guide 35

44 3 Defining Secure User Groups and Adding Users Using the Thermo Foundation Authorization Manager Setting All Permissions Inheriting Permissions Exporting and Importing Permissions You can set every feature to the same permission level in either of two ways: After you set the permission level for one feature, click Set To Same (as described in step 9 of the preceding section). Right-click the user group name in the Secure Groups box, and choose Globally Set To > Permission Level from the shortcut menu. To copy a complete set of permission levels from one secure user group to another secure user group 1. Select the user group in the Secure Groups box that is to receive the set of permission levels. 2. Right-click the selected group and choose Inherit From from the shortcut menu. The Choose Secure Group dialog box opens and displays a list of the secure groups (minus the current one). 3. Select the group containing the permission levels to copy and click OK. Both user groups now have the same set of permission levels. Importing the permission list that contains the user groups and permissions from a workstation saves time when you have more than one workstation in your lab and plan to provide users access to all stations. Instead of setting up identical user groups on each workstation, copy the permission list from a workstation that has the user groups and access permissions that you require. IMPORTANT To maintain the security of the permission list, export it to a secure location. The security folder (with proper security settings) on the current workstation is an ideal location. To export and import the permission list 1. On the workstation where the correct users and permission levels are set, start the Authorization Manager and click Export. The Save As dialog box opens. 2. Save the permission list in the security folder as a file with the.eperm extension. (The default path for this folder is C:\Documents and Settings\All Users\Application Data\Thermo Scientific\INI; the default file name is permissions.eperm.) 3. Copy the file into the security folder on the new workstation. 36 Thermo Foundation Administrator Guide Thermo Scientific

45 3 Defining Secure User Groups and Adding Users Using the Thermo Foundation Authorization Manager Specifying Predefined Comments 4. On the new workstation, start the Authorization Manager and click Import. The Open dialog box opens. 5. Locate the permission list file (.eperm file) and click Open. The user groups and permission levels appear in the Authorization Manager. 6. Confirm that the user groups and permissions are correct and click OK to save the settings and close the Authorization Manager. As an option, you can require users to select comments from a predefined list rather than typing in comments when they use features that require comment entry. To do this, select the Predefined Comments check box in the Global Security Features area. When predefined comments are active, a dialog box opens whenever a user performs an action that requires a comment. The user must select a comment from a list before proceeding. To define comments 1. Confirm that the Predefined Comments check box is selected. 2. Click Edit. The Edit Comment List dialog box opens. 3. Click Add New Comment. The New Comment dialog box opens. 4. Type comment text and click OK. 5. Repeat steps 3 and 4 to add each predefined comment. 6. Make any additional changes to the comment list: To delete a comment from the list, select the comment and click Remove Comment. To move a comment up or down in the list, select it and click Move Up or Move Down. 7. Click OK to save your changes and close the dialog box. Thermo Scientific Thermo Foundation Administrator Guide 37

46 3 Defining Secure User Groups and Adding Users Viewing the Authorization Manager History Log Viewing the Authorization Manager History Log The Authorization Manager automatically maintains a history log to record all changes made to the security settings. The log records the following events: The creation of a private group The addition or deletion of members from a group A change in group permissions A switch between private and domain/workstation groups The manipulation of the signature list To display the history log for the Authorization Manager, click History Log. Each entry in the history log contains the time and date, the user ID and full name, and a description of the event. Sort and filter the entries in the history log by field (for example, sort and filter by date and time) or print the log. Printing the Security Settings To print a report of the security settings for each secure user group, click Print. The report contains a list of the members of the group, the controlled feature information for each application, and the names of any secure folders for each application. Saving the Security Settings After defining your user groups, setting the appropriate permission levels, and specifying the type of application auditing, click OK to save your settings and exit the Authorization Manager. The controlled feature information is saved in a configuration file. (The default path for this file is C:\Documents and Settings\All Users\Application Data\Thermo Scientific\INI.) Prohibit non-administrator access to this folder by properly setting the security for this folder. If you have not already done this, see Establishing Secure File Operations on page Thermo Foundation Administrator Guide Thermo Scientific

47 4 Using the Thermo Foundation CRC Validator The Thermo Foundation CRC Validator compares the cyclic redundancy check (CRC) value stored in the database for a file with the CRC value computed from the file stored on the hard disk. If the stored CRC value and the computed CRC value do not match, the file might have been corrupted or altered from the time when a Foundation application saved it. This chapter describes how to use the Thermo Foundation CRC Validator to check your files. Contents Checking Files with the Thermo Foundation CRC Validator Selecting Files Using Database Filters Selecting Files Using a Pattern Note Close any open Foundation applications before running the Thermo Foundation CRC Validator. Thermo Scientific Thermo Foundation Administrator Guide 39

48 4 Using the Thermo Foundation CRC Validator Checking Files with the Thermo Foundation CRC Validator Checking Files with the Thermo Foundation CRC Validator To use thethermo Foundation CRC Validator 1. From the Windows taskbar, choose Start > All Programs > Thermo Foundation 1.0 > CRC Validation. The Thermo Foundation CRC Validator dialog box opens (see Figure 29). Figure 29. Thermo Foundation CRC Validator dialog box 2. Select a method for selecting files for validation in the File Selection area: To select files that match a database filter, see Selecting Files Using Database Filters on page 41. To select files that match a pattern, see Selecting Files Using a Pattern on page Click Check to check the selected files. 4. Examine the results displayed in the Check Results area. The Status column in the file list indicates the status of each file as described in Table Click Exit to close the CRC Validator dialog box. 40 Thermo Foundation Administrator Guide Thermo Scientific

49 4 Using the Thermo Foundation CRC Validator Selecting Files Using Database Filters Table 2. Status values for CRC Validation Status CRCs Match CRCs Do Not Match File Not In Database File Not On Disk Description The CRC stored in the database matches the CRC just calculated for the file. The CRC stored in the database does not match the CRC just calculated for the file. Most likely, the file has been modified since the tracking record was created. The file was found on the hard disk, but not in the database. It might not be a tracked file. The file was found in the database, but not on the hard disk. The file might have been archived or deleted. Selecting Files Using Database Filters When you select files using database filters, select files for validation based on information about those files that is stored in the auditing database. For example, select files created by a particular Foundation application or select files created or modified at certain times. Create two types of filters: non-date filters and date filters. Non-date filters are based on fields from the auditing database. Use them to select files based on characteristics, such as the application used to create the file or the name of the user who created the file. Use date filters to select files based on the date when they were created or last modified. Combine multiple non-date filters using the AND and OR operators. The default filter is the most recently selected dataset name. Thermo Scientific Thermo Foundation Administrator Guide 41

50 4 Using the Thermo Foundation CRC Validator Selecting Files Using Database Filters To select files using a database filter 1. Click the Files Matching Database Filter option in the File Selection area. 2. Click Edit filter. The Filter Entries dialog box opens (see Figure 30). Figure 30. Filter Entries dialog box 3. To add a non-date filter, do the following: a. Select AND or OR from the first list in the Add Non-Date Filter area. b. Select the database key to filter on from the second list. c. Type the value for the database key in the equals box. For example, if you selected Application Name in the second list, you might enter Home Page or Qual Browser in the equals box. d. Click Add to add this filter to the list of current filters. e. Repeat steps a through d to add other non-date filters. 4. To add a date filter, enter the starting date and time for your filter in the Add Date Filter area in the From boxes and enter the ending date and time for your filter in the To boxes. Click Add to add this filter to the list of current filters. 5. To remove unwanted filters from the filter list, click the filter name in the list and click Remove Filter. 6. When you have made all needed changes, click OK to save your changes and close the dialog box. 42 Thermo Foundation Administrator Guide Thermo Scientific

51 4 Using the Thermo Foundation CRC Validator Selecting Files Using a Pattern Selecting Files Using a Pattern When selecting files that use a pattern, specify the folder containing the files and the format type of the files (for example, a.raw file). To select files using a pattern 1. Select the Files Matching Pattern option in the File Selection area. 2. In the File Path list, select the path to the folder containing the files to check or click Browse to find the folder. 3. Select the file extension of the files to check in the File Name list. 4. Select the Include Subfolders check box to have the CRC Validator check files in subfolders of the selected folder. 5. Click OK to save your changes and close the dialog box. Thermo Scientific Thermo Foundation Administrator Guide 43

52

53 5 Auditing Using the Thermo Foundation Audit Viewer utility, you can perform these auditing functions: Display all auditable events and changes made to files created or managed by various Thermo Scientific layered applications. View a history of what has been done during data acquisition and data processing to produce results. Get information about all events that have occurred within the application. Contents Accessing the Auditing and Workbook Databases Viewing Audit Viewer Pages Filtering Audit Viewer Entries Sorting Audit Viewer Entries Printing Audit Viewer Entries Accessing the Auditing and Workbook Databases A Thermo Scientific application writes to the Global Auditing database and maintains the application s workbook databases. The Global Auditing database stores the application start and stop events. All other application events are stored in the workbook databases for the application. IMPORTANT You must configure the database in the Thermo Foundation Auditing Database Configuration Manager before you can access the Global Auditing database. See Using the Thermo Foundation Auditing Database Configuration Manager. Thermo Scientific Thermo Foundation Administrator Guide 45

54 5 Auditing Accessing the Auditing and Workbook Databases Accessing the Global Auditing Database The Global Auditing database is a log of auditable events for all the application-related data files and applications that it recognizes. You can access the Global Auditing database when you start Audit Viewer from the Windows desktop. To start Audit Viewer from your Windows taskbar Choose Start > All Programs > Thermo Foundation 1.0 > Audit Viewer. The Audit Viewer window opens. Figure 31. An audit view window displaying entries for the Global Auditing database Accessing the Application Workbook Database The workbook database for an application is a a log of auditable events associated with the current workbook, including the entries that have not been saved to the database. Each workbook database also includes a log about the raw files that are acquired as part of the workbook. Each workbook for an application has its own database. When you start Audit Viewer from an application workbook, the audit view window displays the saved and unsaved entries for the current workbook. The unsaved entries are highlighted in yellow in the audit view window. Note The Audit Viewer entries can also include unsaved changes from another workbook, if the changes are still in memory. 46 Thermo Foundation Administrator Guide Thermo Scientific

55 5 Auditing Accessing the Auditing and Workbook Databases To access the auditing database for a workbook Note The following procedure uses the LCquan application as an example. 1. Open the LCquan workbook. 2. In the LCquan Workbook window, choose File > Audit Trail. The audit view window opens and displays the entries for the open workbook (Figure 32). Yellow highlights indicate any unsaved entries. To access the auditing database for a different workbook, repeat step 1 and step 2. A second instance of Audit Viewer starts and displays the entries for that workbook. Figure 32. An audit view window for an LCquan Workbook Thermo Scientific Thermo Foundation Administrator Guide 47

56 5 Auditing Viewing Audit Viewer Pages Viewing Audit Viewer Pages The Audit Viewer window contains the following pages, each of which has a different function. Page All History Event File Tracking Description Provides a summary of all entries for the current database. To display the Audit Viewer page associated with an entry on the All page, double-click the entry on the All page. Provides a chronological listing of all the changes made to method files and result lists. Lists all user-initiated auditable software events. All events that are subject to authorization control are auditable. Provides the following types of information: Global Auditing database: Lists the changes that are made by any program to the application-created files. Application workbook database: Lists the changes made within the application to any application-owned files in the workbook, including the workbook file (.lqn), processing method (.pmd), instrument method (.meth), sequence (.sld), and any imported sample data files (.raw). The File Tracking page does not include the data files (.raw) acquired from within the application workbook that are tracked in the Global Auditing database. Instrument Error If any of the workbook files are modified outside of the application, the Foundation application displays a file-tracking error message. Lists significant events that occur to instruments that the application creates or manages. Note Entries are not saved to the database until you save the workbook. Unsaved entries are highlighted in yellow in the Audit Viewer. 48 Thermo Foundation Administrator Guide Thermo Scientific

57 5 Auditing Filtering Audit Viewer Entries Filtering Audit Viewer Entries By applying a filter, you can display a subset of the entries in the audit view window. You can set up two types of filters: filters based on dates and filters not based on dates (non-date filters). You can use a combination of the two types of filters. To set up a non-date filter 1. In the audit view window, click Filter. The Filter Entries Dialog Box opens. Figure 33. Filter Entries dialog box 2. In the Add Non-Date Filter area, select AND or OR from the first list. 3. In the list to the right, select a column to filter on. 4. In the equals box, type the text string that you want the filter to match and click Add. The filter statement appears in the box. 5. Repeat steps 2 to 4 to add additional filters. 6. When you have defined all your filters, click OK. The audit view window displays the results. Note The non-date filter accepts partial matches. For example, if you have a user name of john.doe, then a filter string of john or doe matches entries for that user name. Thermo Scientific Thermo Foundation Administrator Guide 49

58 5 Auditing Sorting Audit Viewer Entries To set up a date filter 1. Under Add Date Filter, enter the beginning date and time in the From box. 2. Enter the ending date and time in the To box. 3. Click Add and click OK to apply the filter. The audit view window displays the results. To remove a filter 1. In the Filter Entries dialog box, select the filter statement you want to remove. 2. Click Remove Filter. 3. Click OK. The audit view window displays the results. Sorting Audit Viewer Entries You can sort the entries by column headings on each of the audit view pages. To sort the entries on an audit view page 1. In the audit view window, click the tab of the page you want to view. 2. Click Sort. The Sort Entries dialog box opens. Figure 34. Sort Entries dialog box using all three sort fields 3. In the 1st Sort Field list, select the column heading and select the Ascending or Descending option. Repeat this step for the 2nd Sort Field and 3rd Sort Field. 4. Click OK. The audit view page displays the entries in the specified sorting order. 50 Thermo Foundation Administrator Guide Thermo Scientific

59 5 Auditing Printing Audit Viewer Entries Printing Audit Viewer Entries The printing options vary depending on whether you are printing the audit trail for the Global Auditing Database or a workbook database. Printing the Audit Trail for the Global Auditing Database Printing the Audit Trail for an Application Workbook Database Printing the Audit Trail for the Global Auditing Database To print the audit trail for the Global Auditing database 1. From the Windows desktop, choose Start > All Programs > Thermo Foundation 1.0 > Audit Viewer. 2. In the audit view window, click the tab of the page you want to print. 3. Click Print. 4. In the Print Options dialog box, select printing options, and then click OK. Printing the Audit Trail for an Application Workbook Database You can print the entries from an application workbook database only when you save all displayed records on the audit view page. To print the audit trail for an application workbook database 1. In the application Workbook window, choose File > Audit Trail. If the workbook already contains saved entries, go to step 3. If the workbook contains any unsaved entries, the Foundation application displays a View Audit Trail message prompting you to save the workbook before continuing. 2. In the View Audit Trail dialog box, do one of the following: Click Yes to save the workbook entries. The Foundation application logs the automatic save in the audit trail and starts Audit Viewer. Click No to start Audit Viewer without saving the workbook. Note If you select the Don't tell me about this again check box, the Foundation application automatically applies the last requested behavior (Save or Not Save) each time you start Audit Viewer when the application workbook contains unsaved entries. To restore the message, choose Options > Enable Warnings. 3. In the audit view window, click the tab of the page that you want to print. Thermo Scientific Thermo Foundation Administrator Guide 51

60 5 Auditing Printing Audit Viewer Entries 4. Make sure the displayed page contains only saved entries. Yellow highlights appear on the rows of any unsaved entries. If you have a mix of saved and unsaved entries, you can do one of the following: In the application workbook window, choose File > Save to save the application workbook. In the audit view window, click Refresh. In the audit view window, click Filter, and then add filter rules so that only the saved records appear on the page you want to print. See Filtering Audit Viewer Entries on page 49 for details. 5. Click Print. 6. In the Print Options dialog box, select printing options, and then click OK. 52 Thermo Foundation Administrator Guide Thermo Scientific

61 A Installing an Oracle Database This appendix describes the procedure used by Thermo Fisher Scientific to install the Oracle Server and Client software. Consult your Oracle database administrator for advice and instructions on how to install this software for your application. The installation information in this chapter supplements the documentation that Oracle provides and does not replace it. Refer to your Oracle manuals for installation and configuration details. Note The procedures contained in this chapterdescribe how to install the Oracle9i Database. The installation procedures for other versions or releases of the database might differ from those described here. Contents Installing the Oracle Server Installing the Oracle Client Thermo Scientific Thermo Foundation Administrator Guide 53

62 A Installing an Oracle Database Installing the Oracle Server Installing the Oracle Server To install the Oracle Server 1. Insert the Oracle Database compact disc. The Autorun installation program starts automatically. If the installation program does not start automatically, find and double-click the setup.exe file. 2. Click Install/Deinstall Products in the installation program. The Welcome page opens (see Figure 35). Figure 35. Welcome page IMPORTANT Do not install the Oracle Server if a previous version of the software is already installed. Remove previous versions before installing the new version. If you have data in the other database, back it up and use the Oracle Data Migration Assistant to migrate it to the new database during or after the installation. Refer to your Oracle documentation for more information. 54 Thermo Foundation Administrator Guide Thermo Scientific

63 A Installing an Oracle Database Installing the Oracle Server 3. To remove a previous version of Oracle software before proceeding with this installation, click Deinstall Products. The Inventory dialog box opens. Select the previous version from the list and click Remove. 4. Click Next on the Welcome page. The File Locations page opens (see Figure 36). Figure 36. File Locations page IMPORTANT The Source Path box automatically fills with the location of the installation files. Do not change the path. 5. In the Name box under Destination, type or select a name for the Oracle Home. 6. In the Path box, type or select the location for the Oracle components. Or click Browse to search for a different location. Thermo Scientific Thermo Foundation Administrator Guide 55

64 A Installing an Oracle Database Installing the Oracle Server 7. Click Next. The Available Products page opens (see Figure 37). Figure 37. Available Products page 8. Select the product to install. 9. Click Next. The Installation Types page opens (see Figure 38). Figure 38. Installation Types page 56 Thermo Foundation Administrator Guide Thermo Scientific

65 A Installing an Oracle Database Installing the Oracle Server 10. Select the type of installation. 11. Click Next. The Database Configuration page opens (see Figure 39). Figure 39. Database Configuration page 12. Select an appropriate database. 13. Click Next. The Database Identification page opens (see Figure 40). Thermo Scientific Thermo Foundation Administrator Guide 57

66 A Installing an Oracle Database Installing the Oracle Server Figure 40. Database Identification page 14. Type the global database name for the database and enter the Oracle System Identifier (SID) in the fields provided. 15. Click Next. The Database File Location page opens (see Figure 41). Figure 41. Database File Location page 58 Thermo Foundation Administrator Guide Thermo Scientific

67 A Installing an Oracle Database Installing the Oracle Server 16. Enter the directory location for the database files. The directory location must be a mapped drive. 17. Click Next. The Database Character Set page opens (see Figure 42). Figure 42. Database Character Set page 18. Select the character set to use in your database. 19. Click Next. The Summary page opens (see Figure 43). Thermo Scientific Thermo Foundation Administrator Guide 59

68 A Installing an Oracle Database Installing the Oracle Server Figure 43. Summary page 20. Review the space requirements on the Summary page to confirm that you have enough disk space. 21. Click Install to start the installation. When the installation is complete, the Configuration Tools page opens and a series of tools starts automatically creating and configuring your database and Oracle Net Services environments.the Configuration Tools page displays the results of running these tools (see Figure 44). 60 Thermo Foundation Administrator Guide Thermo Scientific

69 A Installing an Oracle Database Installing the Oracle Server Figure 44. Configuration Tools page If the Oracle Database Configuration Assistant tool runs, continue with step 22. If the Oracle Database Configuration Assistant tool does not run, go to step 27 on page If the Oracle Database Configuration Assistant tool runs, wait for it to complete. The Oracle Database Configuration Assistant dialog box opens (see Figure 45). Make note of the database information that is listed in this dialog box. Figure 45. Oracle Database Configuration Assistant dialog box 23. Click Password Management. The Password Management dialog box opens (see Figure 46). Thermo Scientific Thermo Foundation Administrator Guide 61

70 A Installing an Oracle Database Installing the Oracle Client Figure 46. Password Management dialog box 24. Change the default passwords for all user accounts. 25. Lock or unlock the database user accounts as necessary by selecting or clearing the appropriate row in the Lock Account column. 26. Click OK to save the changes and close the dialog box. 27. When all of the tools on the Configuration Tools page have finished running, click Next. The End Of Installation page opens. 28. Click Exit to exit from the Oracle Universal Installer. The database is installed. Installing the Oracle Client To install the Oracle Client software 1. Insert the Oracle Database Client compact disc. The Autorun installation program starts automatically. If it does not, find and double-click the setup.exe file. 2. Click Install/Deinstall Products in the installation program. The Welcome page opens. IMPORTANT Do not install the Oracle Server if a previous version of the software is already installed. Remove previous versions before installing the new version. Refer to your Oracle documentation for more information. 3. To remove a previous version of the Oracle client software before proceeding with this installation, click Deinstall Products. The Inventory dialog box opens. Select the previous version from the list, and click Remove. 4. Click Next on the Welcome page. The File Locations page opens (see Figure 47). 62 Thermo Foundation Administrator Guide Thermo Scientific

71 A Installing an Oracle Database Installing the Oracle Client Figure 47. File Locations page IMPORTANT The Source Path box automatically fills with the location of the installation files. Do not change the path. 5. In the Name box under Destination, type or select a name for the Oracle Home. 6. In the Path box, type or select the location for the Oracle components. Or click Browse to search for a different location. 7. Click Next. The Installation Types page opens (see Figure 48). Thermo Scientific Thermo Foundation Administrator Guide 63

72 A Installing an Oracle Database Installing the Oracle Client Figure 48. Installation Types page 8. Select the type of installation. 9. Click Next. The Summary page opens (see Figure 49). Figure 49. Summary page 64 Thermo Foundation Administrator Guide Thermo Scientific

73 A Installing an Oracle Database Installing the Oracle Client 10. Review the space requirements on the Summary page to confirm that your system has enough disk space. 11. Click Install to start the installation. When the installation is complete, the Configuration Tools page opens. A series of tools automatically starts creating and configuring your database and Oracle Net Services environments. The Configuration Tools page displays the results of running these tools (see Figure 50). Figure 50. Configuration Tools page Thermo Scientific Thermo Foundation Administrator Guide 65

74 A Installing an Oracle Database Installing the Oracle Client If the Oracle Net Configuration Assistant runs (see Figure 51), continue with step 12. Figure 51. Welcome page If the Oracle Net Configuration Assistant does not run, go to step 25 on page Select the No, I will create net service names myself option. 13. Click Next. The Net Service Name Configuration, Database Version page opens (see Figure 52). Figure 52. Net Service Name Configuration, Database Version page 14. Select the Oracle 8i or later database or service option. 66 Thermo Foundation Administrator Guide Thermo Scientific

75 A Installing an Oracle Database Installing the Oracle Client 15. Click Next. The Net Service Name Configuration, Service Name page opens (see Figure 53). Figure 53. Net Service Name Configuration, Service Name page 16. Enter the global database name in the Service name field. 17. Click Next. The Net Service Name Configuration, Select Protocols page opens (see Figure 54). Figure 54. Net Service Name Configuration, Select Protocols page 18. Select the protocol used for the database, and click Next. The next page that opens depends on what protocol you selected. Thermo Scientific Thermo Foundation Administrator Guide 67

76 A Installing an Oracle Database Installing the Oracle Client For example, if you selected the TCP protocol, the Net Service Name Configuration, TCP/IP Protocol page opens (see Figure 55). Based on your choice of protocol, the software requests protocol parameter information. 19. Complete the specification for the selected protocol and click Next. For example, on the Net Service Name Configuration, TCP/IP Protocol page, type the host name for the computer where the database is located and select the Use the standard port number of 1521 option (see Figure 55). Figure 55. Net Service Name Configuration, TCP/IP Protocol page 20. Click Next. The Net Service Name Configuration test page opens. 21. On the Net Service Name Configuration, Test page, select the Yes, perform a test option and click Next. The Net Service Name Configuration, Connecting page opens and the Oracle Net Configuration Assistant performs a connection test. If the test is successful, click Next. The Net Service Name Configuration, Net Service Name page opens (see Figure 56). If the test fails, click Back to review the information that you entered. Make any necessary changes and try the test again. 68 Thermo Foundation Administrator Guide Thermo Scientific