Content Store

All documents in STP Documents are stored on the server in a directory structure. In this directory structure, the documents are available in all existing versions, and each document has a management file. This directory structure is referred to as the ContentStore.

The index data and the data for full-text search are stored in an SQL database. All documents are found via a unique document ID.

The service STP LEXolution.DMS Server provides the data and documents to the clients.

Note
Never delete or change files or folders directly in the directory structure of the ContentStore. This could destroy the system.

Note
Creating a ContentStore on a non-NTFS partition or on a shared network drive

The ContentStore should be created on an NTFS drive. If this is not the case, the configuration file ContentStore.config of the ContentStore must be adjusted. The value for CheckNtfs must then be changed to false. The value for CheckNtfs must also be changed to false if the ContentStore is created on a network share.

Make ContentStore MultiStore-capable

From STP Documents version 7.0.314, you can distribute the ContentStore across more than one drive. Viewing and editing documents is possible in all configured ContentStores. However, only one drive can be used for writing to the ContentStore at any time.

To activate a second ContentStore, perform the following steps:

1. Open a text editor with the option "Run as Administrator"

2. Load the configuration file STP.Ecm.Remoting Server.exe.config into the text editor.

In the <Stores> section, add the new ContentStore, e.g. <add StoreId="1" Type="STP" Root="C:\ProgramData\STP AG\ContentStore\"></add> <add StoreId="2" Type="STP" Root="G:\ContentStore\"></add>

3. To configure the new ContentStore as the current ContentStore where newly imported documents are stored, change the key "StoreID" in the "StoreService" section to the value for the key "StoreID" of the newly created ContentStore, e.g. <StoreService Strategy="Simple" InsertId="2">

4. Save the configuration file and restart the service STP LEXolution.DMS Server.

Encrypting the ContentStore with EFS

To protect the documents stored in STP Documents from unauthorized access, you can encrypt the ContentStore of STP Documents with EFS.

Note
Never use the Windows login of a real existing employee as a technical user! The password of the technical user must not expire and should not be changed. Store the access data for the technical user with the encryption certificate in a secure place. Without the stored certificate and without the access data of the technical user, you can lose all documents in the ContentStore of STP Documents, as they can no longer be decrypted.

Note
The disk must be formatted with the NTFS file system.

To encrypt the ContentStore directory, perform the following steps:

  • Stop the service STP LEXolution.DMS Server.
  • Create a technical Windows user.
  • Log in to Windows on the server with this user.
  • Navigate to the ContentStore directory (Default: C:\ProgramData\STP AG) and open the context menu for the folder.
  • Select "Properties" in the context menu.
  • In the "ContentStore Properties" window, click the Advanced button.
  • Check the box Encrypt contents to secure data and click the OK button.
  • In the "ContentStore Properties" window, click the OK button.
  • If necessary, check the box Apply changes to this folder, subfolders, and files and confirm the security prompt in the "Attribute Changes" window with the OK button.
  • Export the certificate created during encryption and copy it to a secure location.
  • Start Services.msc, select the service STP LEXolution.DMS Server, and open the context menu of the service.
  • Select "Properties" in the context menu.
  • In the "STP LEXolution.DMS Server Properties" window, go to the "Log On" tab.
  • Check the box This account and enter the Username (e.g. <MyDomain>\<Technical.User>) and the password of the newly created technical user.
  • Click the OK button.
  • Determine the TCP/IP address of the computer where the DMS server is installed. Open the configuration file STP.Ecm.Remoting Server.exe.config in the server's program directory (e.g. C:\Program Files (x86)\STP AG\LEXolution.DMS Server\) in a text editor started with administrative rights.
  • In the line <add key="ServerAddress" value="<ComputerName>"></add>, replace the computer name with the TCP/IP address and save the configuration file.
  • Start the service STP LEXolution.DMS Server.

To export the certificate for the encrypted file system, perform the following steps:

  • Start the MS Internet Explorer.
  • Open the Internet Options and switch to the "Content" tab.
  • Click the Certificates button.
  • If necessary, select the certificate issued for the technical user and click the Export button.
  • In the "Certificate Export Wizard" window, click the Next button.
  • If necessary, check the box Yes, export the private key and click the Next button.
  • If necessary, check the box Personal Information Exchange - PKCS #12 (.PFX).
  • If necessary, check the box Include all certificates in the certification path if possible and click the Next button.
  • In the "Security" step, add additional users for recovering the certificate and set a password. Note down the users and the password and store both pieces of information in a secure place. Click the Next button.
  • Specify a file name and path for the certificate. Note down the path and file name. Click the Next button.
  • In the "Completion" step of the wizard, click the Finish button.
  • Confirm the message "The export was successful." with the OK button.

Related to