Security
This article gives you answers to questions regarding SPDocKit Consultant and security.
SPDocKit Consultant uses only Microsoft provided and supported SharePoint APIs and PowerShell to retrieve information about the structure of a SharePoint farm. During load operations nothing is being changed in the farm structure.
Our load process does not require access to SharePoint databases with the exception of the SharePoint logging database that we use to gather feature usage. Access to this database is an approach supported by Microsoft to retrieve information about usage. SharePoint administrators using SPDocKit Consultant can choose not to connect to this database during load operations.
As long as the folder where snapshots are stored is protected, no one will be able to open these files. The files are not encrypted. This is handled by Windows NTFS permissions.
We use APIs, not HTTPS, to retrieve information. The product can only run on a SharePoint server, so there is no server-to-server communication that can be intercepted.
Syskit has helped some of the largest organizations worldwide to work around this issue by installing SPDocKit Consultant on a testing or non-production server. This is the best solution if you are unable to access the SP production server/farm.
SPDocKit Consultant can store your passwords and products keys in the farm documentation files. If you decide to enter these, you will be prompted to provide an additional password (master password) that will be used to encrypt these files with AES 256bit encryption. You will only be able to retrieve these passwords if you provide the master password again.
Last modified 3mo ago