Skip to main content

FAQ

◈ General FAQ​

Q. What kind of solution is Document Security?​

Encrypt electronic documents generated within companies and organizations.Endpoint Document Security Orchestration Solution to Prevent Important Information from Being Leaked Externallyis.

  • We bridge the gap between the previously complex internal security and flexible cloud collaboration through integration with cloud environments like Microsoft 365.
  • Strategy for Coexisting Internal DRM and Cloud SecurityResponding to changes.
  • To solve document security issues arising in cloud environmentsCoexistence and OrchestrationProvides an approach.

Q. What features have been improved in Document Security version 6 compared to previous versions?​

  • Improvements in Security Aspects
    • KOSYASResponding to institutional requirements
      • Improvement of security vulnerabilities such as offline functionality and header key management
    • Strengthening Encrypted Communication and Responding to Latest Protocols
    • CC CertificationSecuring Trust through Acquisition
  • Support for the latest versions of Windows and Office
    • DS6 isReferenceOfficially supports Windows 11, Office 2024, and Hangul 2024, and quickly responds to the rapid changes in the IT environment.
  • UX/UI Improvement
    • Improvement of user experience with the introduction of a new UI exclusive to DS6 version
    • Provides an intuitive and user-friendly interface compared to the previous version.
    • Improving accessibility and usability of document security features

Q. What should be prepared before the introduction of Document Security 6?​

The main preparations are as follows.

  • Understanding the Current Status of Existing DRM Solutions- Review integration options with the currently used document security solution
  • Check Cloud Environment Configuration- Preparation for integration with cloud collaboration tools such as Microsoft 365, Google Workspace
  • Establishing Security Policy- Document encryption policy, conversion policy when uploading to the cloud, etc.
  • Network and Firewall Configuration- Network Environment Setup for Secure Communication

SOFTCAMP presents optimized document security orchestration solutions tailored to various scenarios such as the customer's DRM adoption status, cloud environment characteristics, and compliance requirements.

Q. How is integration with the cloud environment supported?​

Document Security 6 provides the following cloud integration features.

  • Automatic conversion support during cloud document upload
    • Internal DRM encryption document is automatically converted optimized for cloud environment.
    • Microsoft 365 Support: Automatic Conversion of AIP Documents When Uploading OneDrive, SharePoint, Teams
  • Providing Equality in the Use of Collaboration Tools
    • Providing equal accessibility and usability for encrypted documents, regardless of the environment or collaboration tools used.
  • Cloud Plaintext Document Leakage Prevention
    • Real-time detection and policy enforcement for plaintext documents downloaded or shared in cloud services

Q. What is the document visibility feature?​

Track the flow of the document to see what has happened since the document was created.Enhancing security management by making distribution channels traceableis a function.

  • Tracking the entire lifecycle from document creation to distribution and usage
  • Document Access History and Usage Pattern Analysis
  • Establishing a real-time notification and response system for security policy violations

◈ User FAQ​

Integrated Login and Account Linking​

Q. I closed the integrated login window, but a notification to log in again appears. What should I do?​

If you manually close the integrated login window and do not proceed with the login, a notification window requesting login will appear.

  • 로그인Clicking the button will display the unified login window, allowing you to perform a unified login.
  • The integrated login process is to use Microsoft 365.Essential Proceduresis.
  • For more details,Account Linking Notification GuidePlease refer to.

Q. A notification window has appeared stating that account verification is required. What should I do?​

This is the process of checking the Document Security account linked to your Microsoft 365 account.

  • If the account verification is not completedYou cannot use features related to Microsoft 365.
  • 계속하기Press the button to go to the user account verification window.
  • SSO support status
    • SSO Application Environment: Automatically logged in, with no separate login process visible.
    • SSO Not Applied Environment: You may need to log in to verify your account.
    • Please check your network connection status in case of SSO errors or login failures, and if the issue persists, contact the customer support team.
  • For more details,Account Linking Notification GuidePlease refer to.

Q. The user account verification window displays the Document Security account and the Microsoft 365 account. How should I proceed?​

After checking the displayed account information,계속하기Click the button to proceed with the connection.

  • Document Security Account: This is the user account information confirmed in Document Security.
  • Microsoft 365 account: User account information verified in Microsoft 365. This account is used to access OneDrive and Microsoft 365 related services.
  • 계속하기When the button is pressed, the result of the linkage will be displayed as either success or failure.
  • For more details,Account Linking Notification GuidePlease refer to.

Q. The account linkage was successful. Can I change to another account afterwards?​

Once the linkage is complete, you cannot change to another account.

  • Once the account linking is complete, the account between Microsoft 365 and Document Security will be connected, allowing you to use Microsoft 365-related features thereafter.

Q. Account linking failed. What should I do?​

Even if the account linking fails, the Microsoft 365 service and Document Security service can be used normally since the login has been completed during account verification.

  • Retry Method
    • You can reconnect your account when logging out & logging in to Document Security.
    • Depending on the situation, if the Document Security logout feature is not available, you need to reboot the PC.

Login Status and Document·Drive Usage​

Q. I am trying to move/copy files to OneDrive from Explorer while offline. Why is it not working?​

Integrated Login (Document Security) In a non-logged-in state, documents to OneDrive of the local explorerCannot move/copy.

  • OneDrive is a cloud-based storage service, and if you are not logged in, access permissions cannot be granted.
  • Login Method: Right-click on the taskbar tray icon →로그인→ Enter Microsoft 365 account information in the integrated login window
  • If the problem persists after logging in, please check your network connection status, and if it is not resolved, contact the customer support team.
  • For more details,Account Linking Notification GuidePlease refer to.

Q. You cannot access the security document without logging in. What should I do?​

You cannot access secure documents (DRM encrypted documents) without logging into Document Security.

  • Login Method: Right-click on the taskbar tray icon →로그인→ Complete the login by entering your account information in the integrated login window.
  • After completing the login, you can reopen the security document and view it normally.
  • If you are unable to log in or the issue persists
    • Checking the network connection status.
    • If the issue is still unresolved, please contact the customer support team.

Conversion Progress Guide at Document End​

When closing the document, the document conversion and security level application will be automatically processed according to the company's security policy, and a notification window like the one below will be displayed. We have compiled frequently asked questions related to this window.

Q. What is this guide window?​

At the time of closing the document, according to the company's security policy**Document conversion (and security level application) is performed automatically.**and this guide window shows the progress.

  • Displays which files are currently being processed and the progress for each file.
  • without separate manipulationThe window will close automatically once all processing is complete.
  • You can close multiple documents at once, but all files willGather in one windowIt will be displayed in order.

Q. During the conversion, the program execution and document opening are temporarily restricted. Why is that? How long does it take?​

If the file being converted is opened or modified, the result may be corrupted,Temporarily restricted until processing is completeIt will be released automatically when completed.

  • The time required varies depending on the number and size of files.
  • Closing multiple documents at the same timeProcess one at a timeIt may take that much longer (while one is being processed, the others are waiting).

Q. 확인The button is not responding. Can I close the window?​

During processing,확인The button is disabled, so you cannot close the window.

  • When all file processing is complete 확인The button is activated, and thenThe window will automatically close in 5 seconds.
  • Do not forcibly close the window during processing. Even if the completion signal is delayed, the window will automatically transition to the completed state and close, so you can leave it as is.

Q. What do the status icons displayed in the notification window mean?​

The status indicator on the right of each file means the following.

  • Converting(rotating icon) : Processing the file. Please wait a moment.
  • success(Green Check) : Conversion and security level application has been completed.
  • failure(red exclamation mark) : Failed to process the file. Please refer to the items below.

Q. "There is a failed file" is displayed. What should I do?​

It is displayed when the conversion and grading application of some files have not been completed.

  • First, retry: After a moment, try reopening and then closing the document. Temporary issues are often resolved by restarting.
  • Contact the administrator if you continue to fail.: Providing the information below will speed up the identification of the cause.
    • File name (including extension)
    • Capture of the guide window (to show the failure indication)
    • Occurrence time and the program being used (Word / Excel / PowerPoint, etc.)
  • The causes of failure can vary, including company security policies, file status (such as password protection, read-only, etc.), and temporary environmental issues. The exact cause can be verified by the administrator through policies and logs.

◈ Administrator FAQ​

MIP Document Permissions and Owners​

Q. How do the permissions used for releasing and creating MIP documents differ?​

In Document Security 6, permissions are distinguished and used as follows:

MIP Document Release

  • **Application Permissions (Azure Application Permission)**use
  • Processed in the same way as SHIELD DRM

MIP Document Creation

  • Current user permissions (user token) logged into DS6use
  • Performed with a user token issued by Microsoft, and label permission control is applied based on that user.

Q. What is the reason for the change of ownership during the MIP → DRM → MIP conversion process?​

The authority subjects by transformation flow are as follows:

  1. MIP Release: App Permissions
  2. Creating DRM: Current DS6 Login User Permissions
  3. MIP Regeneration: Current DS6 Login User Permissions

Change of Ownership Reason:

  • The subject is fixed as 'Logged-in User' when regenerating the final MIP.
  • MIP creation is performed with the logged-in user token, and it is not possible to set another user as the owner with just app permissions/user tokens.
  • Therefore, it can behave as if the "Owner/Subject of Application" of the original document has changed.

Q. What is the reason for the difference in perceived authority when converting MIP documents?​

Due to the current operation of DS6, the following changes in perceived permissions may occur:

  • MIP Release: Perform with app permissions
  • Creating MIP: Perform with logged-in user permissions

As a result, during the conversion from MIP → DRM → MIP, the owner/applying entity of the final MIP may be attributed to 'logged-in user', which can change the perception of authority.

Q. Is there another way to solve the owner change issue when creating MIP documents?​

Yes, you can resolve the owner change issue when creating MIP documents through policy settings.

How to set up the DS_MIP_INIT policy:

"creatorAppAuth" : "use"

Setting Effect:

  • "creatorAppAuth" : "use"When set to __PH_0__, integrated login users __PH_1__App PermissionsGenerate MIP document.
  • This is not the token of the logged-in user.App TokenThis is how to configure a custom policy to generate MIP documents.
  • This can solve the ownership change issue.

Application Result:

  • Using app permissions when creating MIP documents will resolve ownership change issues.
  • MIP → DRM → MIP conversion process can maintain a consistent authority subject.

Q. The reason why the SaveZoneInformation value in the registry changes again when the DSHLdr.exe process is executed after modifying it for the purpose of saving the ADS value is what?​

To test saving the ADS value, the SaveZoneInformation value in the registry was changed to 0 (Able), but when the DSHLdr.exe process of Document Security is executed, that value changes back to 1 (Disable).

Cause:

In the case of DRM encrypted documents downloaded from the internet, there are instances where the document does not open correctly during the opening process due to the SaveZoneInformation setting. This is because the OS blocks access based on security settings when the SaveZoneInformation setting is applied.

System Operation Method:

  1. The settings for SaveZoneInformation are reset when SDSMan.exe is executed and the login is completed.
  2. Specific Operation Method:
  • Delete conditions for SaveZoneInformation value:
    • DS_SHIELDEX_CDR_SERVER_IPIf a custom policy exists
    • DS_SHIELDEX_CDR_SERVER_IPIf there is no policy,DS_NOT_USE_SENDLOG_ZONE_IDFIf a custom policy is not set or is set to 0
    • If the above conditions are met, delete the SaveZoneInformation value that exists in the Current User.
  • If the above conditions are not met:
    • Sets the SaveZoneInformation value in Current User to 1 forcibly.

Solution:

To maintain the SaveZoneInformation value at 0 for the ADS value storage test, one of the following settings must be applied.

  • DS_NOT_USE_SENDLOG_ZONE_IDFSet custom policy to 1
  • DS_SHIELDEX_CDR_SERVER_IPProperly configure the policy