Thursday Oct 14, 2010

New Release of Oracle IRM Wrapper version 1.5.0

The wrapper tool has been updated again - this time to provide an installer script for Linux systems, and to improve compatibility between the IRM Desktop and the wrapper when installed on the same machine.

For further info, see the 1.4.0 announcement.

If you download and experiment with this tool, drop us a line to let us know how you get on.

Monday Sep 27, 2010

New release of Oracle IRM Wrapper version 1.4.0

Yet another release of a highly useful tool in the Oracle IRM kit bag. The Oracle IRM Wrapper is a Java based client which demonstrates some of the powerful ways in which you can create extensions of the Oracle IRM technology to extend the protection of files beyond the out of the box features. The IRM Wrapper uses the IRM API to allow for the encryption of any file, similar in nature to functionality as PGP, however with the difference that the rights control of decrypting files is the same powerful classification system that is used across the usual gambit of IRM files.

In this release support for existing sealed extensions has been added. This is a significant feature because it means that files wrapped by Oracle IRM Wrapper can be opened by the Oracle IRM desktop, and files sealed by the Oracle IRM desktop can be unwrapped by Oracle IRM Wrapper. In a mixed community of end users, where most have the Oracle IRM desktop installed but some do not (they may be on MacOS or Linux), no users need be excluded from workflows - they can all use the same sealed files! It is only necessary to add the Wrapper users to a special group assigned a role with unrestricted export rights.

Download this latest version from here.


  • NEW! Support for sealed extensions, e.g. .sdoc, .spdf
  • Installation scripts for easy installation on Windows and MacOS X
  • Written in 100% pure Java so runs on any Java-compatible operating system
  • Internationalized and localized into English, Japanese and (bad) schoolboy French
  • Right-click wrapping and unwrapping
  • Easily configure per-context drag-n-drop wrapping icons on your desktop
  • Automatically checks that you have the rights to wrap and unwrap files
  • Automatically select a default context
  • More robust configuration handling (ignores leading or trailing whitespace)


And a few screen shots of the tool running in Windows and Linux.



Friday Jul 16, 2010

New version of IRM Hot Folders, 2.2.0

Activity galore at the moment, a new release of IRM 11g in the past month, the IRM Wrapper utility was born and released and now an update to the very useful HotFolders application. A feature request from a few days ago has already been written into the handy tool, allowing an integration of the IRM Wrapper and HotFolders. Essentially HotFolders monitors a folder for new files and then automatically seals them to a predefined Oracle IRM classification. However it only worked for the formats that are supported by Oracle IRM.

The IRM Wrapper however addressed the use case where people wanted to just use the Oracle IRM service to encrypt and securely deliver/store ANY file. Whilst this doesn't come with any of the superb persistent document and email security controls that ensures constant protection of IRM supported files even in use. It does mean that you can leverage the same scalable classification system in IRM to protect the transfer and storage of sensitive files. This is a nice and simple encrypted delivery mechanism, much like PGP, but with a more scalable and usable classification system behind it.

So the latest version of HotFolders, 2.2, now has the ability to wrap files in IRM encryption. This means you can now monitor a folder, and ANY file that is placed in it will be protected with Oracle IRM. Supported formats will gain persistent protection, whilst non-supported formats get wrapped with encryption. Keep an eye out on the blog, we will soon have an update to the IRM Wrapper utility as well...

As a reminder, here is the list of the functionality available in this utility.

  • NEW! "Wrap" files in previously non-sealable formats using core IRM encryption/classifications
  • Easy to configure
  • Automatically scan and seal multiple file system folders, and sub-folders
  • Warn, delete or quarantine when unable to seal
  • Support for multiple IRM Servers
  • Cross-platform (Java and IRM web services)
  • Support for any network-accessible file system
  • Easily scheduled using cron or Windows scheduler
  • Configurable file and console based logging, with log rotation
  • Fully internationalised (but only EN resource bundles supplied)
  • Pass files over-the-wire or by relative path (far faster)
  • Easy to configure, built-in scheduling
  • Huge performance improvements via in-memory caching of file modification timestamps
  • Automatically scan and seal SharePoint folders
  • Automatically scan and seal WebDAV folders
  • Automatically scan and seal web folders, content management and collaborative repositories
  • Easily develop Java plugins to perform post-sealing actions
  • Shovel - a file relocation plugin (return sealed files from quarantine to original locations!)
  • Full source code available on in a CollabNet TeamForge repository that includes a Subversion version control repository - so feel free to join the project and contribute your own source code (bug fixes, features, plugins, localisations, etc.).
  • Support for Oracle IRM 11g and Oracle IRM 10g servers.
  • Support for secure HTTPS connections between Oracle IRM Hot Folders and Oracle IRM 11g servers.
  • Checklist to guide you through the simple steps required to get Oracle IRM Hot Folders up and running.
  • Support for grid deployment (Oracle IRM core and sealing servers running on different hosts)
  • Optional prompting for credentials (so no need to store in configuration file)


Monday Jun 14, 2010

To 'seal' or to 'wrap': that is the question ...

If you follow this blog you will already have a good idea of what Oracle Information Rights Management (IRM) does. By encrypting documents Oracle IRM secures and tracks all copies of those documents, everywhere they are shared, stored and used, inside and outside your firewall. Unlike earlier encryption products authorized end users can transparently use IRM-encrypted documents within standard desktop applications such as Microsoft Office, Adobe Reader, Internet Explorer, etc. without first having to manually decrypt the documents. Oracle refers to this encryption process as 'sealing', and it is thanks to the freely available Oracle IRM Desktop that end users can transparently open 'sealed' documents within desktop applications without needing to know they are encrypted and without being able to save them out in unencrypted form.

So Oracle IRM provides an amazing, unprecedented capability to secure and track every copy of your most sensitive information - even enabling end user access to be revoked long after the documents have been copied to home computers or burnt to CD/DVDs. But what doesn't it do?

The main limitation of Oracle IRM (and IRM products in general) is format and platform support. Oracle IRM supports by far the broadest range of desktop applications and the deepest range of application versions, compared to other IRM vendors. This is important because you don't want to exclude sensitive business processes from being 'sealed' just because either the file format is not supported or users cannot upgrade to the latest version of Microsoft Office or Adobe Reader. But even the Oracle IRM Desktop can only open 'sealed' documents on Windows and does not for example currently support CAD (although this is coming in a future release). IRM products from other vendors are much more restrictive.

To address this limitation Oracle has just made available the Oracle IRM Wrapper all-format, any-platform encryption/decryption utility. It uses the same core Oracle IRM web services and classification-based rights model to manually encrypt and decrypt files of any format on any Java-capable operating system. The encryption envelope is the same, and it uses the same role- and classification-based rights as 'sealing', but before you can use 'wrapped' files you must manually decrypt them. Essentially it is old-school manual encryption/decryption using the modern classification-based rights model of Oracle IRM. So if you want to share sensitive CAD documents, ZIP archives, media files, etc. with a partner, and you already have Oracle IRM, it's time to get 'wrapping'!


Please note that the Oracle IRM Wrapper is made available as a free sample application (with full source code) and is not formally supported by Oracle. However it is informally supported by its author, Martin Lambert, who also created the widely-used Oracle IRM Hot Folder automated sealing application.


Oracle IRM protects and tracks your sensitive information no matter where it goes. It combines business friendly encryption with role based usage rights and auditing.

11g quick guide


« July 2016