Suggest a feature
Would you like to see a new feature
in VetRex?

Report a bug
Think you found a bug in VetRex? Tell us about it.

 
Knowledgebase
NVO Information Systems, Inc. > VetRex Support Desk > Knowledgebase

KB6540016 Configuring and using the VetRex Security System

Solution VetRex uses a unique encrypted file called “CONTROL.DAT” which is located in the VetRex data folder along with VetRex database files. This file is double encrypted and will foil most efforts to break it or change the file contents. As with every encrypted file, resourceful people with knowledge of file encryption techniques may be able to circumvent the encryption, but this is highly unlikely. A great amount of skill would be necessary to break the coding method used to encrypt the file. Standard disclaimers apply however, and you are warned that there exists the possibility that someone with great skill could break the coding and change the file. The authors assume no liability for damage caused by unauthorized persons gaining access to the VetRex database by circumventing the security system.

The application "VRSecurity.exe" is used to add, delete and change usernames and passwords. This application is available to VetRex Administrators or IT personnel only. Please contact NVOIS to obtain a copy of it.

The CONTROL.DAT file supplied with the distribution version of VetRex contains a few dummy names and passwords that you will need to change. They are included so that you can see how to enter and change passwords.

Before getting started, you should assign a username and password for each person that will be using VetRex. Create a master list for yourself on paper and then write down each username and password on a separate piece of paper and give it to the person who will be using it. You should keep your master list under lock and key. Tell your users to memorize their information and destroy the piece of paper you gave them.

Copy VRSecurity.EXE into the VetRex data folder.

If you are using VetRex on a local network, it should be copied to and executed on the computer where the data files are located. If you are using VetRex on only one computer, VRSecurity.EXE should be copied to the data folder on that computer. Bear in mind that VRSecurity.EXE is operating on the data files, not on the program files. It will only be necessary to run it once to implement security. It does not need to be run on each workstation.

Normally, the VetRex data files are located in the “C:VETREX4DATA” folder. If you have changed the location of the data files, you must change the folder location so the security program can find the CONTROL.DAT file.

When the program loads, click the button marked “LOAD FILE”. This will decrypt the CONTROL.DAT file and load it into the editor.

You will see that the entry on the top line has “Doug McArthur” as the name and “nopassword” as the password. The name on this line is considered to be the "Supervisor". If the password on the top line is set to “nopassword”, the security system is disabled and no one will be required to enter a name and password to operate the VetRex database system. If the password on the top line is anything OTHER than “nopassword”, every user will be required to enter their username and password before gaining access to the VetRex database.

Each line of the CONTROL.DAT is 32 characters long. The leftmost 16 characters is for each name and the rightmost 16 characters are for the user’s password. The name must begin at the leftmost position on the line and may consist of only one word or several. "John Smith", "John J Smith" and "johnjsmith" are all examples of valid usernames.

The password must begin on the 17th character position on the line and should only be one continuous word. You should use a combination of numbers and letter. The case doesn't matter. Use the existing examples as a guide for entering or changing names and passwords. A guide appears above the editor box to help position the names and passwords. Once you have entered at least one name and password on the top line you can delete the dummy examples.

When you have finished entering or changing names and passwords, write them down on separate slips of paper and give them to the people who will be using VetRex so that they can gain entry to the database. You might wish to keep a copy of all names and passwords for your own security purposes. It is suggested that you keep the complete list under lock and key.

Be sure to save the new or changed CONTROL.DAT file with the “Save File” button.

Don't forget to delete VRSecurity.EXE from the \data folder when you are finished with it. Make sure you keep it in a safe place for future use.

Why Use Security?

In addition to keeping unauthorized users out of the VetRex system, the security system also serves another purpose: This and future versions of VetRex have a diary system that records many functions for report purposes. When a form or macro document letter is printed, an entry is made in the veteran’s diary such as “01/15/96 at 11:10:03 - Printed VA Form 21-526 by {logged in user}.”

Please see the VetRex documentation for information about reports and files.

Article details
Article ID: 15
Category: All Versions
Date added: 2009-08-18 19:03:30
Views: 217

 
<< Go back