October 14, 2014 update for Audit and Control Management Server 2013 (KB2881010)

This update provides the ability for Audit and Control Management (ACM) Server to track changes in encrypted Microsoft Excel documents if the following conditions are true:

• The organization must configure their desktop computers to enable usage of the Office 2013 DocRecrypt tool. See how to use the DocRecrypt tool to remove or reset passwords in Office 2013.
• Support in ACM Server for password-encrypted files will be limited to only the file types that are supported by the Office 2013 DocRecrypt tool. See documentation about DocRecrypt for more information.
• It is required that the Office 2013 DocRecrypt is configured suitably on the applicable ACM Server(s).The appropriate escrow key must be added to the certificate store so that a service account can use the DocRecrypt tool to decrypt the necessary files. This update does not configure DocRecrypt tool. Therefore, you have to download and install it together with this update for this feature to work.
• You should verify that DocRecrypt can be run by the ACM Server service account through command-line to decrypt Excel workbooks on the server. If this is unsuccessful, then the ACM Server will be unable to track changes in the encrypted files.
• Any files that are encrypted without using the designated public key that enables DocRecrypt to decrypt the files are unsupported.
• Carefully review and understand the need to keep the private key safe as described in the DocRecrypt online technical documentation.
• If a new key pair is put into use for encrypting/decrypting files in your organization, any previous private keys will be required for ACM Server to decrypt and process the earlier version of tracked Excel Workbooks. This is because ACM Server must be able to compare the previous and current version of the file in order to detect changes that have occurred in the files.

Note When tracking changes to encrypted files that are stored on file shares, ACM server may be unable to determine the identity of the user who changed the file, or the precise modification time of the file. This is because this information may not be retained during the decryption process. For best results, we recommend storing important spreadsheets in a SharePoint document library.