This article shows you how to Restore and Replicate managed content.
Managed Files/ Restore (:Confidential Files)
When :Recover is available to your Organization and specifically enabled for your Account, you can access Archive content as described in this article. For configuration details, refer to the article, Using :Recover.
Note that :Recover can by independently, dynamically enabled/ disabled for Organization Accounts. If/ when the case, Restore/ Replicate (temporarily) fail (the purpose of disable).
Accessing Restore/ Rebuild
Navigate to the Managed Files/ Restore display using the notification panel's context menu item of the same name. When using :Recover, you can Restore content from the Hostlist, Versionlist, or Archivelist Panels (though Replicate is only available from the Archivelist):
General Restore/ Rebuild Operation
Select one (or more) files from any of the UI Panels, then choose Restore. SSProtect will loop through each selected item and attempt to acquire the Latest Qualified Version (see below) from the KODiAC Managed Data Archive and place results in the last-used location. In this example, staffwrite_candidates.xlsx will be placed in the C:\Support folder.
If the target folder does not exist, the file is placed in the Default Folder, which in this case happens to match the native destination. Success utilizes INFO notification text in Host Debug Logs, while failure is reflected with ERROR entries.
If you are not configured for INFO level logging, check the Log Restore option. This automatically includes INFO Restore entries without affecting your log settings.
Restoring Versioned Instances
When you Restore a Versioned Instance from the Versionlist Panel, the resulting file reflects the individual Version you selected from the list (you can select more than one here as well). As such, the target filename will be <filename>-vx.<ext>, where x reflects the Version instance for each selected item.
Restore (and Replicate) operations, in all other cases, use the native Filename shown in the UI.
Archive Instances Used for Restore/ Rebuild
For each file, when you Restore from the Hostlist or Archivelist, the latest available Version instance is used. Availability is restricted to items present in the KODiAC Managed Data Archive and also those created by certain Sharing Peers. Details depend on the Operating Mode you use to create the items. This determines the Latest Qualified Version further described at the end of this article.
Date/ Time Information
:Recover retains Versioned instance date/ time information for the resulting file. Times are mapped to the local time zone (though displayed in UTC time). This allows you to retain visibility into secured, managed access over time, despite moving content from one host to another. This also facilitates name collision processing, as described below.
Prompts for File Conflicts
If a target file already exists in local storage, you will be prompted to Replace the target file or Skip the given instance:
Choose Apply to remaining cases if you wish to use the same answer for any future conflict (in the present multi-select operation), then click Replace or Skip.
Replacing Existing Files
Once SSProtect has been instructed to overwrite existing content, the pending Archive instance is compared with the existing instance to determine which of the two is more recent. The older file is renamed to <filename>.<ext>.000, and the newer file replaces the target <filename>.<ext>. If/ when <filename>.<ext>.000 exists, SSProtect increments the counter until an appropriate target filename is found.
As such, after a multi-select Restore/ Replicate operation, you can review the target file and associated numbered instances to retain items of interest and delete unnecessary content (as all files are Restored in protected Ciphertext format).
NOTE: Though the final target file will not be different, multi-select specifics change the order in which content is processed. This is reflected by the sorting you use and resulting multi-select scope. Operation begins with the top item in the selected set, then proceeds downward through the selection set, in order. If you change the sort order and choose the same set of files, then repeat the operation (with a clean set of target folders), interim file content that uses numbered extensions (noted above) will not be ordered the same way.
Replicate vs. Restore
Rebuild seeks to re-create a file's native folder structure inside your Default Folder, whereas Restore attempts to utilize an existing (matching/item-native) path. In some cases, however, Restore cannot recreate the necessary target folder(s), for example when Archive content comes from a D:\ volume that does not exist on the current Host. In this case, Restore operates like Replicate, creating the necessary folder structure inside the Default Folder. This allows you to Restore/ Replicate content then re-position entire portions of the result for local use.
Remote Deployment and :Expand -rebuild
:Expand supports Remote Profile Deployment with the -deploy command. Use the optional -rebuild switch to initiate an Archive Replicate operation that supplements automated deployment.
Latest Qualified Version
As previously noted, Restore/ Replicate finds the Latest Qualified Version of a file to recall from the KODiAC Managed Data Archive. In some instances, legitimate, stored content is not acquired simply because you will not be able to access it. This is obviously the reality when content is not available (i.e. Size=0) due to the use of Optimized Offloading (purposed or as a result of failure fallback) or Retention Policy removal. It is also the reality in certain circumstances based on other Operating Modes as follows:
Accessible - Double Conversion from an Organization Peer
Accessible - Double Conversion from a Third Party Trust
Accessible - Hybrid Conversion from an Organization Peer
Not Accessible - Hybrid Conversion from a Third Party Trust
Not Accessible - Optimized Offloading (Size=0), from Any User
The Operating Mode is set by the Data Owner, the Account that creates Version 1 of any managed file. Sharing Peer activity follows the existing Conversion method, only changing if for example the Data Owner doesn't have enough Quota space for KODiAC Managed Data Archive storage. In that case, the Sharing Peer will, "fallback" to Optimized Offloading. Else, the Conversion method changes only when the Data Owner's Account Policy changes - subsequent access to managed content utilizes the Operating Mode active at that time.
You can verify the Data Owner of a Version Chain by navigating to the Versionlist and scrolling down to the Version 1 instance to see the associated Username. As of v9.3.2, you should never find an item that holds a Version 1 instance with a Username different from your own. This is by design and specific to the requirement that :Recover Restore/ Replicate functionality limit access to content stored in your KODiAC Managed Data Archive (and thus accruing storage space against your Quota).
Finally, :xRecovery may scope data differently, depending on the KODiAC instance deployed in your default Server Set. For more information, refer to :xRecovery Section articles.
Additional Resources
Refer to the Walkthrough, :Recover w/ Shared Content, for more insight on related terms as well as ordered guidance through examples that show you how to take advantage of SSProtect's data management facilities.
You can also search this site for more information on various topics, or use this link to submit a specific request. You can also send email directly to support@definisec.com, and our staff will respond to your needs as soon as possible.
In the meantime, don't forget to check out our primary website and Insights columns for information on current trends, security topics, and how our technologies relate.
This article was updated w/ v10.7.1 of the :Foundation Client