Configuring a WORM Policy

Context

Write Once Read Many (WORM) enables you to set a protection period during which data can be read but cannot be modified or deleted.

Prerequisites

• You have obtained the access certificate and security certificate of an activated account.
• A bucket has been created.

Precautions

After a WORM policy is configured, the system time and NTP server cannot be modified. Otherwise, the WORM clock is inaccurate.

Procedure

1. Choose Services > Object Service > Account.
2. Click the name of the desired account and select the Bucket tab.
3. Enter the access certificate and security certificate of the account and click Authenticate.
   

   You can perform authentication on either of the Bucket or User tab page.

4. Click More on the right of the desired bucket and select Manage WORM.

   The Manage WORM dialog box is displayed.

5. Click Enable.

   A confirmation dialog box is displayed.

   

   This step is required only when the bucket is configured with a WORM policy for the first time.

6. Click OK.
7. Click Add.
8. In the text box, modify the object name and protection period as required.
   

   • Wildcard (*) matching is supported, that is, a protection period is set for all objects that match the wildcard. If wildcard (*) is not specified, a protection period is set for a single specific object.
   • You cannot set multiple protection periods for the same object.

     For example, AB* contains all objects whose names start with AB, such as AB, ABC, and AB123. If you have set a protection period for AB*, you cannot set a protection period for any object whose name starts with AB. If you have set a protection period for an object whose name starts with AB, you cannot set a protection period for AB*.

   • The system protects only the objects written after WORM is enabled. Objects written before WORM is enabled are not protected.

9. After setting the object name and protection period, click to confirm the configuration.
10. (Optional) If you want to set the protection period for other objects, click Add.
11. Click Save to save the WORM policy of the bucket.

    If you need to activate the WORM policy later, go to the page again to activate the WORM policy.

12. (Optional) Click Save and Activate to activate the WORM policy.
    

    • If the WORM policy is not activated within 24 hours after it is configured, the WORM policy takes effect within 24 hours and gets invalid 24 hours later.
    • If the WORM policy is not activated after it is configured, the WORM policy can be modified or deleted within 24 hours.
    • After the WORM policy is activated, it cannot be modified or deleted.