Installation Manual

Introduction

HaloSHARE GenNXT secures internal and external business workflows by providing centralized bulk file protection. It supports classification, sensitivity labeling, encryption, password-based access control, digital signing, Controlled Unclassified Information (CUI) marking, and watermarking.

HaloSHARE GenNXT extends Microsoft Purview Information Protection (MPIP) to CAD, Microsoft Office, PDF, text, and other non-Office file formats stored in shared folders. It protects sensitive data by applying customizable sensitivity labels that support tracking, revocation, and expiration.

What distinguishes HaloSHARE GenNXT?

Digital transformation improves supply chain efficiency but also increases the risk of data exposure. Sharing unprotected files can lead to data breaches, operational disruption, and financial loss. In collaborative environments, unauthorized access and accidental file sharing are common risks. To protect business operations without disrupting workflows, organizations must secure project files by default.

HaloSHARE GenNXT automatically protects files placed in a predefined local folder (the HaloSHARE GenNXT radius) on systems where it is installed, such as Microsoft OneDrive or Microsoft SharePoint. When a file enters the radius, the application automatically encrypts it to prevent unauthorized access and accidental sharing, both inside and outside the organization.

HaloSHARE GenNXT also supports watermarking, CUI marking, digital signing, password protection, and metadata tagging. These capabilities help organizations securely share, track, and manage files while maintaining user productivity.

By implementing HaloSHARE GenNXT, organizations can reduce the risk of data breaches, support compliance with data protection regulations, and eliminate manual file protection tasks.

About this Manual

This manual provides step-by-step instructions for installing and configuring HaloSHARE GenNXT. It is intended for system administrators and IT professionals responsible for deploying HaloSHARE GenNXT in enterprise environments.

This manual covers the following tasks:

• Installing HaloSHARE GenNXT

• Configuring core features and security settings

• Troubleshooting common issues

Terminology

The following table defines the terms used throughout this manual.

Terminology used

Acronyms

The following table lists the acronyms used throughout this manual.

Acronyms

Features

HaloSHARE GenNXT provides the following capabilities:

• Protects multiple files in folders in bulk.

• Applies label-based protection by using Microsoft Purview Information Protection or user-defined custom permissions.

• Lets you customize protection settings.

• Enables you to remove protection from files.

• Enables you to relabel files by using existing sensitivity labels.

• Applies bulk watermarks with unique, date-stamped sharing information to improve content security and ownership visibility.

• Adds custom metadata to improve file classification, security, and contextual awareness.

Feature Availability and License Requirements

Feature set up

General FAQs

This section answers frequently asked questions about HaloSHARE GenNXT. If you need additional assistance, contact your Secude sales representative or the Secude Support team.

1. What does HaloSHARE GenNXT provide for an organization?
   This labeling solution protects your files and enforces security throughout their full life cycle.

2. Does it protect all native Computer-Aided Design (CAD) file types?
   Yes, HaloSHARE GenNXT supports all CAD native file types.

3. What happens if an unauthorized person attempts to open a HaloSHARE GenNXT-labeled file?
   HaloSHARE GenNXT first authenticates the user by verifying their identity. If authentication fails, access to the file is denied, and an error message is displayed.

4. Who decides what labels should be used for various supplier folders and how they are managed in the background?
   In an organization, an MPIP administrator is responsible for creating and managing labels (user rights) in the Microsoft Entra admin center. The choice of label can be made by engineers or designers who create drawings for a specific supplier.

5. What if I don't want a certain file type to be protected?
   HaloSHARE GenNXT encrypts any file based on the extension specified in the configuration. As a result, you can whitelist file types to be encrypted and blacklist file types by not defining them in the configuration.

6. Is it possible to apply custom permissions to protect a file?
   Yes. HaloSHARE GenNXT allows you to protect files by using user-defined custom permissions without applying MPIP sensitivity labels.

7. How to open a protected CAD file?

   You can open protected CAD files by using the HaloCAD Add-on for supported CAD applications.

8. How to open a protected PDF file?
   You can open protected PDF files by using Adobe Acrobat Reader DC, Adobe Acrobat DC, Microsoft Edge, or the Microsoft Purview Information Protection Viewer.

9. How do I view the watermark on a CAD file?
   To view watermarks in a HaloSHARE GenNXT-protected CAD file, install the HaloCAD Add-on for your supported CAD application.

Quick Start Installation Overview

The following figure provides a high-level overview of the HaloSHARE GenNXT installation process.

Quick start implementation steps

Architecture

In a typical deployment, designers share project files with external partners. HaloSHARE GenNXT enables administrators to configure workflows by assigning source and destination folders for each partner. Based on the configured workflow, HaloSHARE GenNXT automatically processes files and moves them from the source folder to the corresponding destination folder, as shown in the following figure.

Source and destination Folders

At a high level, the HaloSHARE GenNXT workflow consists of these steps:

Architecture

HaloSHARE GenNXT monitors the configured source folder and its subfolders for new files. Depending on the tasks configured in the workflow, it performs one of the following actions:

• MPIP Task: Applies the configured MPIP sensitivity label or custom permissions.

• Watermark Task: Applies the configured watermark.

• Compliance Mark Task: Applies the configured CUI markings.

• File Signing Task: Applies the configured digital signature.

• Password Protection Task: Applies the configured password protection.

• Metadata Mark Task: Embeds the configured metadata.

If Move to Destination is configured in the workflow, the processed file is moved to the configured destination folder, where external users, including suppliers, vendors, and consultants, can access HaloSHARE GenNXT-protected and watermarked CAD files only by using the HaloCAD Add-on. For more information, refer to the HaloCAD User Manual.

System Requirements

The following table outlines the minimum and recommended technical specifications, including software and network requirements, required to run the product.

Requirements

Last updated: October 26, 2026