Skip to main content
M
Manav_Pampher10-Marble
10-Marble
March 7, 2024
Question

Setting up a secured vault in a remote location

  • March 7, 2024
  • 2 replies
  • 2256 views

I am using Windchill PDMLink Release 11.1 and Datecode with CPS M020-CPS27

Hi,

Our Windchill environment is hosted in Netherlands.
We need to setup a product/project container in our windchill environment. The data within this container is supposed to be stored (cached and mastered) only in UK.
We are exploring setting up a local vault in UK or a replica file server in UK, but there are some challenges related to this.
We need advise on what is the best PTC recommended approach for this requirement.

2 replies

B
23-Emerald III
BenLoosli23-Emerald III
23-Emerald III
March 7, 2024

A replica vault will still upload files to the main server.

You would have to setup a separate vault server and establish rules that only certain files must be stored in the new vault.

Can others in the company still access or see the UK only files?

M
Manav_Pampher10-MarbleAuthor
10-Marble
March 7, 2024

Hi @BenLoosli 

Others in the company can not access or see UK only files.

M
mmeadows-316-Pearl
16-Pearl
March 7, 2024

What are the content sharing rules between the Netherlands and UK?

  • Just share the Windchill database?
  • UK content is exclusive to UK but Netherlands content is accessible to Netherlands and UK?
  • UK content is exclusive to UK and Netherlands content is exclusive to Netherlands?
  • Other?
R
rhart16-Pearl
16-Pearl
March 7, 2024

Another option is to configure security labels, you can define a separate site principle (system user account) for each vault then add the principal to the security label group. Data with NL security label are uploaded to NL cache/vault by principal. Data with UK eyes only label are uploaded to UK vault by UK principal. Data with UK label can’t go to the NL vault because the NL principal can’t access it.

    M
    mmeadows-316-Pearl
    16-Pearl
    March 7, 2024

    Setting up security labels can be fun, but @rhart offers a better solution than relying on the user's preferred file server (a preference the users can change).

      Terms & ConditionsAccessibility statement