25 Managing PDF Watermark
PDF Watermark can also add security features to PDF files as they are downloaded for viewing. Password security can be added, and the ability to print or copy the contents of the file can be enabled or disabled.
This chapter provides information about managing PDF Watermark:
25.1 Understanding PDF Watermark
This section discusses the following topics:
25.1.1 Types of Watermark
A static watermark is applied during content check-in as a follow-on step to the Inbound Refinery conversion. To select a watermark for content to be converted to PDF, enter a valid Watermark Template ID during check in. Only documents that Inbound Refinery converts to PDF can receive a static watermark. After a document receives a static watermark, all viewers of the document see the same watermark.
In the same way, content checked in by an automated process such as WebDAV or BatchLoader can also be given a static watermark, provided a valid Watermark Template ID is provided. For more information about creating templates and template IDs, see Templates.
Dynamic watermarks are generated as needed when a user requests to view or download a PDF document. Dynamic watermarks can contain variable information (for example, the user name or the requesting user, or the date and time of download). For this reason, different users may see the same content with different watermarks. With dynamic watermarks, only the web layout form is watermarked. The original PDF file is unchanged in its vault location.
Dynamic watermarking is rules-based. If a request for a PDF document satisfies a pre-defined rule, the template associated with that rule is used to watermark a copy of the content before the copy is returned to the requesting user. System administrators define rules and set up specific conditions for determining which requested content gets a dynamic watermark.
For more information about specifying rules for dynamic watermarks, see Dynamic Watermark Rules.
The following kinds of watermarks can be used:
-
Text: Specified the text which can include metadata values for the content item, and include special keywords, such as $DATE$, that provide information about the content item at the point it is watermarked.
-
Image: An image in any of the supported bitmap (raster) formats.
-
Signature: If Electronic Signatures is enabled, a watermark can be created from the electronic signature metadata associated with a content item.
Details are specified for type of watermark as well as placement. One or more watermarks of any type can be used in a given document. Defined watermarks are stored in a template that is checked in with a content ID and default metadata values.
25.1.2 Templates
Whether a watermark is applied statically at check-in or dynamically when the PDF file is requested, the watermark information is stored in a template which includes information about the text or image watermark itself and any rules defined for its use.
Legacy schema templates are supported for watermarking, but any change to the template results in an upgrade to the new schema. Consequently, any template which is changed in Content Server version 12c may not work correctly with older versions of Content Server.
For information about creating templates, see Adding or Editing Templates.
A template is checked into the content repository as a managed content item with default metadata and two additional metadata fields:
-
Watermark Template ID: The content ID (dDocName) for the template which can be assigned when the template is created. This is specified for static watermarks when the content item is checked in.
-
Watermark Template Type: A list of supported template types. Currently, a single option is provided, the default PDFW_Template.
In addition to these fields, additional metadata values can be specified. This helps ensure that default values are provided for fields that require a value.
25.1.2.1 Template Security
A user password requires the user to provide a password to open and view the PDF. An owner password restricts the ability to change the PDF file or modify the security settings within the PDF file.
These security settings set access restrictions within the associated PDF file itself using PDF security. These access restrictions are independent of access restrictions to the content item defined by Content Server.
User/Owner passwords are encrypted in the PDF Watermark Template with a third-party encryption library. Encryption is performed automatically when the template is saved and decryption is performed automatically when the template is used for a watermark.
Oracle does not provide an encryption library. The library bcprov-jdk14-138.jar
is a recommended third-party encryption library that is downloadable from BouncyCastle.org, but any library can be used. For information about specifying an encryption library, see Specifying the Classpath for an Encryption Library.
Passwords in legacy templates are not encrypted until the template is saved. A template cannot be saved unless it is changed. Therefore, to encrypt template passwords, edit each legacy template and make a minor change before saving.
25.1.3 Dynamic Watermark Rules
Rules are used to determine which template is applied for dynamic watermarking. After creating a template, the rules for the template can be defined. The same template can be used for static or dynamic watermarking. Rules are used only for dynamic watermarking.
If a template has multiple rules, the rules are applied in the order listed. Rules should be ordered with the most specific tests earlier in the list, and more general ones after that. All rules must test positive for the watermark to be applied.
Within a rule, criteria can be set based on the values of selected metadata fields. For example, you can test the dDocAuthor
field for specific authors or the dDocType
for a specific type of document. The order in which you define criteria for a rule does not matter. All criteria must be true for the associated rule to test positive.
25.1.4 PDF Optimization
PDFs that come from the PDF Converter may have been optimized for faster Web viewing. If a static watermark is applied to that content, the optimization is lost. Post-watermarking optimization requires a third-party optimizer which is not provided with PDF Watermark. To use optimization, a distiller engine/optimizer must be installed and fully operational. The chosen optimizer must be able to execute conversions with a command-line (for example, a script file or a .bat
file).
Note:
A PDF optimizer is not provided with PDF Watermark. If using the Optimization feature, install a third-party distiller engine before use and verify it is fully operational. The optimizer must be able to execute conversions on a command-line (for example, a script file or a .bat
file).
25.1.5 Watermark Placement
Options are available for placing text or image watermarks at the top (header), center, or bottom (footer) of the page or at a particular location on the page with X-Y coordinates. Multiple watermarks can be used on a given document.
In the image below, the reference points for each of the positions is indicated by a point. The example image in each of the positions shows the orientation relative to the associated reference point. Example text in each of the positions shows one of the available horizontal alignment options (left, right, center). All text alignment options are available at each of the positions.

For standard placement, text and images reference a point at the top-center, middle-center, or bottom-center of the page. Images center horizontally around the associated reference point. With text, you can specify the horizontal alignment of the text with respect to this reference point (left, right, or center aligned).
For explicitly placed watermarks, the coordinates are in points, with each point equal to 1/72". The origin (0, 0) is the lower left corner of the page. For images, these coordinates specify the lower left corner of the image with the image extending up and to the right. For text, these coordinates specify the horizontal reference point for the alignment options, similar to the standard placement options.
25.2 Configuring PDF Watermark
This section describes tasks that are used to manage PDF Watermark.
25.2.1 Specifying the Classpath for an Encryption Library
The passwords defined in a template set corresponding passwords within the PDF file itself when the PDF file is rendered. The passwords stored in the template are encrypted using a third-party encryption library. A reference to an encryption library used with PDF Watermark must be provided for the Content Server to encrypt passwords stored in the template.
Oracle does not provide an encryption library for encrypting passwords. This procedure assumes the use of a third-party encryption library. One such library is the Bouncy Castle Crypto APIs for Java which is downloadable from BouncyCastle.org, but any library can be used. Use a version that matches the JDK version on your machine.
- Download an encryption library
.jar
file and save it to a location that the Content Server can access. - launch the System Properties application. For more information, see Running Administration Applications in Standalone Mode.
- On the Systems Properties applet, open the Paths tab.
- Specify the path to the encryption library jar file from step 1.
- Click OK to save the changes and exit the System Properties utility.
25.2.2 Starting PDF Watermark Administration
Templates, rules and configuration for PDF Watermark are managed in using the PDF Watermark Administration page.
25.2.3 Adding or Editing Templates
Define any required metadata field values before creating a template. After checking in the template, it can be modified as needed.
25.2.3.1 Defining Metadata Fields
To define specific metadata fields for template check in:
-
From the main menu, choose Administration then PDF Watermark Administration.
-
On the PDF Watermark Administration page, click the Configuration tab.
-
Highlight the Field Name and Value pair to define/edit and click Edit.
-
On the Edit Default Value page, set the value to be applied for the Field name selected.
-
Click Apply.
25.2.3.2 Adding a Template
To add a template:
-
On the PDF Watermark Administration page, select the Templates tab.
-
To edit an existing template, select the template and click Edit. To create a new template, click Add.
-
On the Add New/Edit Template page, name the template and assign it a meaningful content ID. The ID cannot be changed after the template is checked in.
-
To add security to the template, click the Security tab.
-
Select an encryption bit-depth for Security Level. The higher the number, the stronger the encryption. This encryption level applies to the passwords defined in the PDF file itself, not the watermark template. Oracle does not provide an encryption library for encrypting passwords stored in the template. For more information about adding an encryption library, see Specifying the Classpath for an Encryption Library.
-
To restrict access to the PDF file associated with the template, specify a User Password. Users are required to specify this password to view or download the PDF.
-
To restrict the ability to change the PDF file or modify the security settings within the PDF file, specify an Owner Password.
This password applies to the associated PDF file itself, not the current watermark template. Access to the template is governed by Content Server's security model.
-
To prevent the user from printing any portion of the PDF file, set Print Allow to No. To permit printing at low resolution, selected Degraded.
-
To prevent the user from copying portions of the PDF file, set Copy Allow to No.
-
-
Click OK when done.
25.2.3.4 Add or Edit an Image Watermark
Images must be checked in before use. To add or edit an image watermark:
25.2.4 Creating and Editing Rules
A template must be created before rules can be defined. For more information, see Adding or Editing Templates.
To add or edit a rule:
25.3 Watermarking Scenarios
This section discusses the following topics:
25.3.1 Static Watermarking Scenario
Content Server receives processed content from Inbound Refinery. Inbound Refinery must have PDF Converter installed, enabled, and configured to convert the necessary file formats into PDF. When the PDF file is presented, the watermark template selected during the content check in is applied.
Watermark elements are pre-defined in the template used to watermark the incoming PDF. The watermark is applied and is delivered to requesters without regard for dynamic watermarking rules. Rules-based watermarking (Dynamic) can also be applied in addition to a static watermark.

25.3.2 Dynamic Watermarking Scenario
When a Web-viewable PDF is requested by a user, a check is performed based on the defined rulesets to determine if a watermark is applied to the Web-viewable PDF delivered to the requester.
If a request for a PDF document satisfies a pre-defined rule, the template associated with that rule is used to watermark a copy of the content before the copy is returned to the requesting user.

Note:
A PDF optimizer is not provided with PDF Watermark. If using the Optimization feature, install a third-party distiller engine before use and verify the optimizer is fully operational. The optimizer must be able to execute conversions on a command-line (for example, a script file or a .bat
file).