New! DMS Credential Manager

As a Transflo (Pegasus) administrator, perform the following Credential Manager update one time per customer. If the target database server has existing credentials for multiple customers with separate customer names and IDs, the conversion application will convert all of them. You will see the customer names and IDs in the logs.

1. Verify you already installed and upgraded your Transflo DMS database and admin configurations to 5.1.1 or newer.

2. Download the ConverterToCredentialManager.zip file.

3. Unzip (extract) the contents of the ConverterToCredentialManager.zip file to a directory.

4. Run the ConverterToCredentialManager.exe application.

5. In the Connection String section, complete the following database fields:

   • Database Server

     Example:sandbox-sqlserver.mycompany.edu,<port-number>

     Tip: You can copy the database server name from Microsoft SQL Server Management Studio.

   • Database Name

   • Username

   • Password

      

6. Click the Test button. The system validates your connection string and credentials. The following entry appears in the logs:

   - Connection string is good to go!

    

   

    

7. In the Execution Logs section, click the Execute button.

   

8. Detailed log entries with date-time stamps appear.

9. When the conversion tool is finished, the following entry appears in the last line at the bottom of the logs:

   - Conversion completed!

    

10. To confirm the credentials were converted:

    1. Launch the Transflo DMS 5.1.x or newer Administration Tool.

    2. Select a company.

    3. In the left navigation menu, click Credential Manager.

       

       No Credentials is a default entry for all configurations. However, if the No Credentials entry is the only entry that appears, it indicates one of the following is true:

       • The conversion tool was not run yet.

       • The conversion tool ran but found no credentials to move.

    4. You can also click Storage, Queues, and other nodes to verify the user access credentials were migrated to the new Credential Manager.

    5. The Used Count column shows the number of active instances where each credential is used in other areas of the system such as storage or queues. When the Used Count is zero (0), it is possible to delete the credentials.

With administrator permissions, you can create a new set of user login credentials for controlled access to storage, queues, and other DMS components. When necessary, you can also edit or delete credentials.

1. Log in to the DMS admin tool.

2. In the left navigation menu, click Credential Manager.

3. Click the Selected Company drop-down menu at top right.

   

4. Select a company.

5. (Optional) Enter a value or part of a value and apply any filter logic necessary to find a company.

   

6. On the right, click +New to add a new set of credentials.

   

7. Complete the required fields.

   1. Friendly Name

   2. Username

   3. Domain

   4. (Optional) The Tags field is optional.

   5. Password and Confirm Password (to very you know the obfuscated password)

   6. Click Save.

8. Your new entry appears in the Credential Manager list.

9. You can now click Storage, Queues, and other nodes to configure user access to those areas.

   Example: We defined a new storage name and path, and then we assigned access to the DemoName credentials with an ID of 19.

   

10. To edit credentials, select an entry in the Credential Manager list and then click Edit.

    • If the Confirmation of Changes setting is enabled, a confirmation message box appears. Click Yes to save your changes or No to revert.

      

    • If the Confirmation of Changes setting is turned off, your changes are saved without the extra confirmation step.

11. To delete credentials, the Used Count column shows the number of active instances where each credential is used in other areas of the system such as storage or queues. When the Used Count is zero (0), it is possible to delete the credentials:

    1. Click the Delete button.

    2. In the confirmation box, click Yes.

       

1. Log in to the DMS admin tool.

2. In the left navigation menu, click Credential Manager.

3. Click the Selected Company drop-down menu at top right.

   

4. Select a company.

5. In the left navigation menu, click Settings. Configure the following settings for Credential Manager:

   1. Reminder Days: In alignment with your network security policies, set a number of days between zero (0) and 9999:

      • 0: User zero (0) to skip any reminders from Transflo DMS. This setting might expose user credentials to risk unless you have some other practices in place to keep credentials safe.

      • 30, 60, 90, or 120: These are common values that remind users in the Reminder Email List to change the shared credentials at regular intervals. Longer durations are not recommended because they can expose a security risk (for example, if a password is breached, an attacker might have 180 days of access).

        

   2. Reminder Email List: Enter one or more email addresses separated by a comma. These recipients are alerted after the expiration of the Reminder Days value to change the credentials as a security best practice.

      

      Example: em1@test.edu, em2@trans.flo, em3@domain.net

   3. Confirmation of Changes: Select this option to help prevent accidental edits in the Credential Manager list. When enabled, admin users are prompted to confirm their changes and have a chance to revert. When disabled, edits are saved without confirmation.

      

   4. Click Save.

1. Log in to the DMS admin tool using credentials configured for you as a single user or a user in a group.

2. In the left navigation menu, click an area of the system you believe you are already configured to access such as Exception Manager or Document Class.

3. You might encounter an error message such as:

   • This user has insufficient rights for this feature.

     

   • No DocClasses were found. Try using wildcard (*) characters.

     

4. These errors can sometimes result when global users do not have permissions to the Administrators group. To resolve these errors, click Global Users and edit the global users to give them access to the Administrators group.

5. Click Save.

   

6. Log back in as a global user.