Installation Manual

Introduction

Companies in industries such as automotive, aviation, and high-tech create and manage intellectual property (IP) through engineering drawings. These drawings are created digitally using computer-aided design (CAD) applications and are often shared with external users for business collaboration. It is important to understand the risks associated with sharing sensitive business information. Protecting sensitive engineering data requires comprehensive security measures. HaloCAD is a data protection solution that helps organizations protect sensitive engineering data.

How HaloCAD for PLM Protects Data

HaloCAD for PLM continuously monitors file upload and download operations within the PLM environment. It integrates with Microsoft Purview Information Protection to download sensitivity labels and perform file encryption and decryption.

• During file upload, HaloCAD for PLM checks whether the file is protected. If the file is encrypted, HaloCAD for PLM decrypts it before storing it in the PLM Vault.

• During file download, HaloCAD for PLM applies protection based on the configured action rules before delivering the file to the user.

For file uploads, HaloCAD for PLM performs file processing independently. For file downloads, HaloCAD for PLM relies on HaloENGINE GenNXT to evaluate the configured classification and action rules.

About this Manual

This manual describes the installation and configuration procedures specific to HaloCAD for Windchill.

Reference Manuals

The following table describes the HaloCAD documentation set and the information available in each manual.

HaloCAD reference documentation

Component Functions

The following components are involved in the HaloCAD architecture when deployed in an integrated environment:

1. HaloCAD Add-on for Creo

2. HaloCAD for Windchill

3. HaloENGINE GenNXT

4. Microsoft Purview Information Protection

The following sections describe the functions of each component.

HaloCAD Add-on for Creo

• HaloCAD Add-on for Creo - Operates within Creo Parametric.

• Receives protected files from Windchill and displays their associated labels while enforcing permissions.

• Logs all add-on related activities for auditing purposes.

HaloCAD for Windchill

• Resides on the server hosting Windchill PLM Server.

• Listens for check-in and check-out actions initiated via the browser or Creo.

• Connects to Microsoft Purview Information Protection to download sensitivity labels.

• Collects metadata for the user-selected file.

• Obtains action and label information for the selected file from HaloENGINE GenNXT.

• Encrypts the file and forwards the file stream to the CAD client during check-out operations.

• Decrypts the file and stores the unprotected file in the PLM Vault during check-in operations.

• Logs HaloCAD for Windchill activities to the local log and sends monitoring logs to HaloENGINE GenNXT.

HaloENGINE GenNXT

• Is a Java-based server component that exposes a web service to HaloCAD for Windchill.

• Connects to Microsoft Purview Information Protection to download sensitivity labels and make them available for configuration.

• Implements business logic.

• Logs events received from HaloCAD for Windchill.

Microsoft Purview Information Protection

HaloCAD integrates with Microsoft Purview Information Protection to protect sensitive documents. Microsoft Purview Information Protection is an enterprise document security solution that ensures only authorized users can open protected content while controlling the actions they can perform, such as printing, editing, or saving. Even if sensitive data is accidentally or maliciously disclosed, unauthorized users cannot view the content in clear text.

Last updated: October 28, 2026