Identity Finder - KBA 8846

Use on institutional machines

Identity Finder can be downloaded from the Software Center at softwarecenter.case.edu. It is free for use on institutional computers of faculty and staff.

As mandated by the President and Provost in 2010, Identity Finder™ enterprise software must be installed and run on university machines to support the strategy of removing all non-essential social security number data from the public campus computing environments. The Identity Finder enterprise system searches local machines for Restricted and other sensitive data. When identified, the user is prompted to protect or destroy the data as appropriate. Researchers are encouraged to prompt Identity Finder to search for keywords such as SSN, Credit Card Numbers and MRN (medical record number) in an effort not only to verify sensitive data presence, but also to confirm its absence. Identity Finder is to be run on campus machines once per semester and once during the summer. The end user is responsible for data cleanup.

Server resources are to have monthly scans performed.

Identity Finder works like an anti-virus product. The client software installs locally, and communicates logs to a management reporting console operated by the Information Security Office. It scans local and external storage media (hard drives) for patterns that match SSNs, Credit Card Numbers, password files, and other potentially sensitive information that could lead to the risk of identity theft. The users will then be given the option of shredding (preferred) vulnerable data, or moving the data to a secured file vault for later shredding. Of primary interest is the search for SSNs, with CCNs being of secondary interest.

SSN usage policy, as found in tier 3 controls policy: I-2 SSN Use Policy.

Subset of updated mandate:

1. As part of the university's phased compliance strategy, the university shall be entitled to take all reasonable steps to assess whether existing and/or legacy administrative processes, systems and applications are in compliance with this policy and the Case Acceptable Use Policy. Each individual subject to this policy has a responsibility to help with this assessment. This responsibility includes these elements:
   1. Identification of any older data containing SSNs that were used in administrative or academic processes.
   2. Isolation and purge of any non-essential files containing SSN data. Removal of these files shall be performed in a manner which eliminates the risk of disclosure or data loss.
   3. Application of established security controls, known as Tier III Controls, to protect sensitive information such as SSN data when its preservation is warranted and sanctioned.
   4. Mandatory reporting of security events, theft, or loss involving SSN data.
   5. Providing notice to ITS when the individual needs assistance in determining whether they are in compliance with this policy, such as whether their legacy processes, systems, and applications still retain or store SSN.

Any individual violating this policy may be subject to disciplinary action in accordance with the applicable policy on Confidentiality (HR Policy I-12).

Use on personal machines

Identity Finder 4 Personal Home Edition is available to faculty and staff for their personal computers at a significant discount. It can be reached through the Software Center at softwarecenter.case.edu.

Case students may receive a personal home license at no cost. Please note that only one free license is available to students.

All Identity Finder Personal Home Use licenses are issued from the Identity Finder website. The download link on the Software Center will take you to the correct site. Please note that a valid Case Email address using the "case.edu" domain must be entered when ordering Identity Finder or the order will not be processed.

Problems with Identify Finder

The ordinal 30 could not be located in the dynamic link library MAPI32.dll The ordinal 23 could not be located in the dynamic link library MAPI32.dll Unable To Find MAPI32.dll

MAPI32.dll is a Windows operating system file that is installed on every Windows system. This file is used by email applications and it is required for Identity Finder to work correctly as it contains the Windows messaging interface that allows Identity Finder to search email clients' (e.g., Outlook and Outlook Express) messages and attachments.

This file can become outdated, corrupted, or replaced by some mail programs and cause any of the following errors to be displayed when Identity Finder is launched or a search begins:

• The ordinal 30 could not be located in the dynamic link library MAPI32.dll
• The ordinal 23 could not be located in the dynamic link library MAPI32.dll
• Unable To Find MAPI32.dll

To resolve this issue, please perform steps 1-3, in order, and stop when the error is no longer displayed. If you are using Eudora, you may skip to step 4; however, we recommend that you try step 1 first.

1. Microsoft is aware that this file can become corrupted and provides a utility with every copy of Windows named "fixmapi" To run fixmapi:
   1. Click Start
   2. Click Run
   3. Type "fixmapi" (without the quotes)
   4. Click OK.
   5. There is no visual indication that it ran or that it did anything and has no user interaction. Wait 30 seconds and then reboot your computer.
   6. After restart, launch Identity Finder to see if the issue is resolved. If it is not, move on to step 2.
2. Ensure that you have all the latest operating system updates and patches installed on your system, especially the latest Windows Service Pack.
   1. Click Start
   2. Click Control Panel
   3. Click Windows Update
   4. Install any available updates.
   5. After installing updates, restart the computer.
   6. Launch Identity Finder to see if the issue is resolved. If it is not, move on to step 3.
3. Launch Outlook or Outlook to see if that initializes the MAPI interface
   1. Click the Start button
   2. Click Run
   3. Type "msimn" without the quotes.
      1. If the Windows E-Mail application does not run, there is another problem with your operating system that must be resolved before Identity Finder will function.
      2. If the application opens successfully, launch Identity Finder to see if the issue is resolved. Try launching Identity Finder with the application open and with it closed. If the issue is not resolved, we will be unable to assist you further and recommend that you use your original operating system installation CD to repair Windows.
4. If you are using Eudora (or if Eudora is installed on the system without being used), it may have replaced the Windows version of MAPI32.dll with a version incompatible with Identity Finder.
   1. Open Eudora and determine if it is set to use its MAPI server, "Always".
   2. If so, switch the value to "Only When Eudora Is Running" and then reboot your computer.
   3. After restart, launch Identity Finder to see if the issue is resolved. If the issue is not resolved, please follow steps 1-3 above.