When you start SSProtect, you login with your email address as a Username, which uniquely identifies your Account. Each Account is associated with an Organization, and every Account/ Organization association is unique for a given SSProtect Server. To see this information, choose Advanced from the Login dialog:
In the Advanced Login, both the Server and the Organization are displayed. You cannot change these values, though you can edit the Profile name with the Profiles... button (see below). Note that Individual Accounts use the Username (email address) as the Organization, as shown in this example.
Registering a Second Account
When a new Account is provisioned for you, you will receive a Registration Email message at your new Account's email address. You can register this second account by doing the following:
- Right-click the SSProtect notification tray icon and choose, Refresh Login...:
- Click the Profile dropdown control and choose the Register Existing... entry*:
Enter the Username and Password provided by the Registration Email, then choose Register. You will be prompted to create and enter your new Password, at which point you choose Change to complete Registration.
*NOTE: This procedure works the same way if you choose Create New... instead of Register Existing..., with the primary difference being the method used to create the new Account. For more information, refer to the article, Creating an Account.
Logging into Different Accounts
After you register a 2nd Account, you will have two choices in the Profile dropdown control presented during Login. Choose the Profile that matches the Account you wish to login to, enter your Password, then choose Login.
You can modify a Profile by choosing Advanced... from the Login dialog, as noted at the beginning of this article, then choose Profiles.... Pick the Profile you want to modify using the Profile control, then choose Edit...:
Choose a new name for your Profile, then choose Save. You can also Delete the Profile or Cancel to retain the existing configuration. Note that Delete removes Profile information from your local configuration, which you can restore as noted below.
NOTE: When you Delete a Profile, all information remains intact in the cloud, though your service provider cannot access specifics.
Deploying Existing Accounts
SSProtect allows you to Remote Deploy a Profile on another host computer running the software. Though you probably don't want to use the same Profile in more than one location at the same time (see below), you can use this process to quickly "move" a Profile, or Restore a Deleted Profile to the same host from which it was removed.
The procedure is simple - follow the same Registration steps noted above, however for your Username/ Password, enter existing credentials, as if you were Logging in. This will reconstruct your Profile for immediate local use.
This is helpful when you have a host computer that needs to be attended to by others - you can in response deploy your Profile to another (replacement) machine or laptop. When using :Recover, you can also quickly Restore files you are managing. This is automated as a result of Startup logic that detects the state of your host computer as further described in the article, Remote Profile Deployment.
Concurrent Use of a Single Profile on Multiple Hosts
When you deploy your Profile to another machine, and you use both Profiles on both computers, you may have issues with the 2nd-factor token if (ironically enough) you are not using 2FA. This results from internal use of a simulated software 2nd-factor, since it's required and built into the SSProtect KODiAC protocol. If you encounter this scenario in error, you may need to resync your 2nd factor. Individual Account holders can make this request to Support, and Organization Users should speak to a Privileged Account holder.
If, however, you are using a Hardware Token for 2FA, you can use the Profile in both locations as required. Remember, though, in some cases, certain actions have to be sourced from a single public IP address, such as privileged :xRecovery requests (and follow-up). For this - and other reasons beyond the scope of this article - it's best to work with one Profile at a time, Logging out on one Host before Logging In on another.
Shared Data Considerations
Remember that Accounts you provision do not necessarily share data. Sharing depends on the Organizations you are working with and/ or Individual Account Third Party Trust relationships.
When you have Accounts that are members of the same Organization, they can by default share data. If not, they must use Third Party Trust associations.
This type of operation is not recommended, as it's too easy to forget the context from which you are operating and access content as if you are the original creator/ owner. Though SSProtect specifically partitions access and does not support transitive sharing extensions, you may still think you are impacting an Organization or sharing peer in one respect while actually operating from another. This will always be reflected in audit records/ :Assess Reports.
Recovering Profile Data
If you aren't able to deploy a Profile to a remote host, or you are for some reason not able to login to your Account, you may need to Recover your Profile context. Send your request and error details to Support and, when in response you receive a set of files with instructions to Recover your Profile, perform the following actions:
- Return to the SSProtect Login display with the notification icon's Refresh Login...
- IMPORTANT: Choose the Profile you with to Recover from the Profile Dropdown*
- Choose Advanced
- Check the Recovery checkbox in the lower right of the display
- Save the files you received from Support to your Configuration folder (below)
- Enter your Password
- Choose Login
The Profile Configuration folder is as follows:
- OR, Equally -
...where <WinUsername> is your Windows Login Name
If Login fails, you may further need a Password Reset. Speak to Support or a Privileged Organization User for assistance.
*IMPORTANT: If your Profile is not in the Login display's Profile Dropdown list, you will need to first Register a new Account with the target email address. Though this will likely fail (if not, you can use the resulting Profile), it will create an entry you can then use with subsequent steps. If you do not end up with a Profile that matches your email address, contact Support for specific instructions to manually create one.
Recovered Profile State
Recovered Profiles generally read an older instance of configuration specifics that are then used going forward. When you Logout, your Profile context is packaged and secured before it is uploaded and archived for future use. The delta between a current Profile and a previous Profile depends on what you have changed with your Account's configuration. In most cases, very little changes - though of course the list of files you have protected may vary significantly.
You can always access protected files to which you have access. If after Recovering a Profile you find Yellow Explorer icon Overlays for content you've created, you can open/ close to re-establish ownership and the Red Overlay, or you can Restore content from the Archivelist available with the Managed Files/Restore notification icon menu selection.
Keep in mind, when restoring context, that shared items maintain their Yellow Overlay status icons in Explorer.
For More Information
For more information on the use of Accounts, Organizations, and Servers, see the articles, Understanding Accounts and Organizations and Managing Organization Users. You can also send additional questions or suggestions to firstname.lastname@example.org.
This article was updated w/ v4.9.7 of the :Foundation Client