Provision Test Accounts

This article introduces documented Walkthroughs then guides you through creation of a Test Account for related use.

Using Test Accounts

You will need an active SSProtect Account to work through Walkthrough STEPS. Though you can use a production Account, advanced topics require more than one Organization and use several associated Accounts. The next section provides guided instructions for creating the first Test Account, and Trial Licensing together with personal email is sufficient for all documented scenarios.

Gmail works well for these purposes because of its' support for email aliases. Create an alias by adding a plus sign to your existing Gmail address, then extending its' value with (appropriate) string characters to form a new address delivered to the same Gmail Inbox you already use. For example, when using definisec@gmail.com as the base address, we can create:

• Organization gmail-definisec_t1, Administrator -> definisec+test1@gmail.com
• Organization gmail-definisec_t2, Administrator -> definisec+test2@gmail.com
• Organization gmail-definisec_t1, User/ Delegate -> definisec+test1U1@gmail.com
• Organization gmail-definisec_t2, User/ Delegate -> definisec+test2U1@gmail.com

Start by provisioning your first Test Account with instructions in the next section. The Walkthroughs will subsequently guide you through the changes required to create associated Organizations, Accounts, and Trust Relationships.

IMPORTANT: Pay special attention to the Organization Names, noted above as gmail-definisec_t1/ gmail-definisec_t1. These must follow a specific naming scheme for Unattended Approval, else you run the risk of attempting to Convert the starting point Individual Account without a way to Cancel (a known problem being fixed in an upcoming Update). The first ordered instructions associated with this issue are in the Walkthrough, Migrate and Create Users.

Provision your First Test Account

After downloading and installing software, as noted in the article, Installing the :Foundation Client, create your Test Account using the Sign-Up procedure as follows:

STEP 1: Double-click the Desktop SSProtect Shortcut to display the Login dialog box. You can also right-click the SSProtect icon in the notification tray located in your taskbar next to the date/ time, then choose Refresh Login:

STEP 2: Click the Profile dropdown and choose, Create New... to display the Create Account dialog.

STEP 3: Enter the Email Address of an email account you control, which represents the SSProtect Account you will use for Walkthrough activity. Do NOT check the Org checkbox, but check the :Recover and :Email checkboxes, as shown above. Click Create... to continue:

STEP 4: Check your email's Inbox for a message entitled, [SSProtect] Create Account from ssp-admin@definisec.com. This message will include the Code you need to continue, as follows (noting that, in this, the email is from a development-specific service our internal team uses, slightly different for you):

STEP 5: Enter the Code, from the email (above), into the Code edit box of your Create Account dialog, as shown below. Continue with Verify:*

STEP 6: Create/ enter your New Pwd (twice) for this Account - you will use this to Login to SSProtect. Click Change to Provision:*

* Your Server designation will be ssp.secdefini.com or similar, rather than the non-public instance noted for our team's internal use.

1st Time Use Progression

The remaining part of this sequence represents 1st Time Use as described in the linked article of the same name. The following is specific to your Individual Account with the :Recover and :Email services noted above.

STEP 7: You will be prompted to set your Default Folder, which is the default location used for Reports, exported Key Files, and also a location that can be remapped on other host computers when you Remote Deploy your Profile. Choose Yes, then Browse to/ create C:\TestData (aligns with subsequent Walkthroughs). Choose Select Folder to continue:

STEP 8: You will be prompted to Export your Account Keys. Because you are operating as an Individual Account holder, you MUST do this before you can use the Account. Choose Yes to proceed:

STEP 9: Create and enter a new Password (and Confirmed value) for the Key File, different from your Account Login password, then choose OK. You will receive acknowledgment when Key Export is complete.

STEP 10: Finally, you will be prompted to install the :Email Add-In for Microsoft Outlook. Choose Yes. If Outlook is running, and SSProtect will close it before installing the Add-In. You will receive acknowledgment on completion.

Looking Deeper: Exported Keys

Note that your Key File Password cannot be the same as your Account Login Password. Normally, you would want to move the exported Key File to removable storage, such as a thumb drive, while also making certain you separately and securely maintain its' Password. This is important because, as an Individual Account, there is no way to Reset your Password without importing keys from this Key File - with its' Password.

This differs from an Organization that usually has more than one Privileged User. Though the one single Administrator can only reset his/ her Password using the Key File, if there is another, active Privileged User for the Organization, he/ she can Login and Export Keys for use with the Administrator Password Reset operation.

Finally, note that SSProtect supports Password Policies as described in the article of the same name.

Your Test Account and Profile Name/ Alias

After you Export your Key File, your Account is ready to use. SSProtect will take you back to the Login dialog so you can proceed (to enter your Account Password, establishing a Login Session):

Notice that your Profile has been given a Default Name - IND (user@host), which you can change with the Advanced..., Profiles..., Edit... progression followed by the New Name and Save (followed by Done to return to the Login dialog).

Additional Resources

You can search this site for more information on various topics, or use this link to submit a specific request. You can also send email directly to support@definisec.com, and our staff will respond to your needs as soon as possible.

In the meantime, don't forget to check out our primary website and Insights columns for information on current trends, security topics, and how our technologies relate.