Frequently asked questions

Listed below are some of the common problems encountered when installing or using CRAMM Version 5. Click on a question to view the answer. If your question is not covered here, or if you need any additional support, please contact the CRAMM help desk

CRAMM Help Desk hours and contact details

Installation and de-installation

Using CRAMM

Importing and exporting information

Can you import existing legacy documents/policies in CRAMM's document register?
When exporting reports to MS Word it is time consuming to edit the reports into a format that is used in other documents, how can this be made easier?
How do I convert a BS7799 action plan into Microsoft Project?
How do I convert CRAMM countermeasures into Microsoft Project?

How do I install CRAMM?

If you are a user of CRAMM Version 4 it is recommended that you back-up all of your existing reviews, using the System Administration function contained in the CRAMM software prior to installing CRAMM Version 5.

The back-up files can be used by the Profile Conversion tool that is optionally installed as part of CRAMM Version 5, in order to convert reviews carried out under the old software to a format that can be restored under the new format.

If it is anticipated that you will not need to use CRAMM Version 4 again after you have installed CRAMM Version 5, it is recommended that you uninstall that version prior to installing CRAMM Version 5.

It is possible to run both CRAMM Version 4 and Version 5 on the same machine but this requires the user to make modifications to the registry. It should only be attempted by users who are technically experienced.

Please see “Can I run both CRAMM Version 4 and CRAMM Version 5 on the same machine? ” for details about how to run both applications on the same machine.

To install CRAMM Version 5

Log on to your machine as an Administrator.
Place the CD labelled CRAMM Version 5 in the machine.
Run the application called ‘Setup’ that is found on the CD.
When prompted by the software, you can choose to install the user guide and/or the profile conversion utility.
If you receive any messages about DLL files being in use or protected, make a note of the file name and continue the installation.
Restart the machine when prompted by the software once the installation has been fully completed. Note: the installation program consists of two separate installation routines, so you should ensure that both have completely finished prior to restarting the machine.
You should now be able to run CRAMM Version 5. Remember the software is copy protected by the use of a dongle, so you will need to have the dongle attached into the printer port before you can run the software.
Once CRAMM Version 5 has started, you should select ‘New’ from the Review Menu in order to create a new review.

I get an error message during the installation of CRAMM, what should I do?

When installing, the program may display the error message ‘DLL file is protected by the system, Ignore, Abort, Retry’.

This is because during installation, CRAMM needs to update certain DLL files within the system. Occasionally, it will be unable to do this because the request to update will be denied by the operating system environment. If this error occurs, it should not cause the installation of CRAMM to fail. Please make a note of the error message, but then choose the ‘Ignore’ option to complete the installation.

Why do I get the error message ‘SQL 7.5.1 has been detected in the system’?

The error message ‘SQL 7.5.1 has been detected in the system’ means that the machine almost certainly had a previous version of CRAMM installed. The latest version of CRAMM uses SQL 7.6.1 and it should automatically over-write the registry settings with the setting that is appropriate to CRAMM Version 5.

On this occasion no action is required by the user, but it will mean that it is more difficult to revert to CRAMM Version 4, unless you have already exported the Centura key. Please see ‘Can I run both CRAMM Version 4 and CRAMM Version 5 on the same machine? ’

If however there are further problems it means CRAMM has not been removed from the system properly. To solve this problem, delete 'HKEY_LOCAL_MACHINE\SOFTWARE\Centura' from the system registry directory and then re-install CRAMM Version 5.

The user should ask their system administrator to perform the above action. The registry key is unique to CRAMM and will not affect any other software.

Where is the CRAMM Software installed?

CRAMM Version 5 contains two applications that run symbiotically with each other.

As a default the Centura components of CRAMM are installed in the following directory:
C:\Program Files\CRAMM50

As a default, the Access Components of CRAMM are installed in the following directory:
C:\Program Files\CRAMM v5 Access Database

These default locations can be changed during the Installation Process if you require.

What is the minimum specification for the CRAMM software?

The minimum requirement for CRAMM is:

Processor: Intel Pentium II Processor (at least 300MHz)
RAM: 64MB (minimum)
Hard disk space: 60MB on top of other requirements
Monitor: 600x800 16 colour

The CRAMM Software has been tested on the following operating systems:

Windows NT
Windows 2000
Windows XP

Can I install the CRAMM Software on a network drive?

It is possible to install the CRAMM software on a network drive, but please be aware that the installation also updates certain files on the local machine.

If you are only intending to run the CRAMM software from one workstation then it is simply a matter of installing the CRAMM software using that workstation, but changing the default locations of these components.

If you wish to be able to access CRAMM from a variety of workstations then the recommended procedure is install the software on each machine, changing the default location each time to point to the same directory on the network server.

Each machine should then be able to access the software, but you will still be restricted by the dongle that should also prevent two people accessing the software at the same time.

Why can’t I un-install CRAMM?

I have an error message ‘Install.log not found’.

When CRAMM is not removed from the system properly, CRAMM will not be able to run the un-installer. Manually delete the CRAMM directory and delete 'HKEY_LOCAL_MACHINE\SOFTWARE\Centura' from the system registry directory and then re-install CRAMM.

The user should ask their system administrator to perform the action. The above registry key is only unique to CRAMM and will not affect any other software.

Why do the CRAMM directories still exist after CRAMM Version 5 has been uninstalled?

This is because CRAMM stores the Access components of reviews into the ‘CRAMM v5 Access Database’ directory. To prevent unintentional deletion of this information, the CRAMM un-installer only removes the CRAMM components that it installed.

The user will need to manually delete the CRAMM directories from the system.

Can I run both CRAMM Version 4 and CRAMM Version 5 on the same machine?

Swapping between Version 4 and Version 5

Step 1: Create Version 4 Registry File

Prior to installing CRAMM Version 5, run Regedit from the Start – Run command.
Select the following Key: HKEY_LOCAL_MACHINE – Software – Centura
From the Registry Menu, select Export Registry File
Save the resulting file in a safe location, giving it a name that indicates that it relates to CRAMM Version 4.

Step 2: Create Version 5 Registry File

After installing CRAMM Version 5, run Regedit from the Start – Run command.
Select the following Key: HKEY_LOCAL_MACHINE – Software – Centura
From the Registry Menu, select Export Registry File. Save the resulting file in a safe location, giving it a name that indicates that it relates to CRAMM Version 5.

Step 3: Revert to CRAMM Version 4

To revert to CRAMM Version 4 after installing CRAMM Version 5:
Delete the Centura Key from the Registry
Restore the CRAMM Version 4 key from the registry file created using Step 1
Edit the CRAMM.INI file (normally located in c:\winnt) so that Profile refers to STANDARD

Step 4: Revert to CRAMM Version 4

To revert to CRAMM Version 5 after using CRAMM Version 4:
Delete the Centura Key from the Registry
Restore the CRAMM Version 5 key from the registry file created using Step 2
Edit the CRAMM.INI file (normally located in c:\winnt) so that Profile refers to STAND500

Why do I get an error message ‘E18 – Cannot Find Profile Stand500’?

There are a number of reasons that this message may be displayed, but amongst the most common is that the machine had a previous version of CRAMM installed on it, which has not been properly removed. To solve this problem, delete 'HKEY_LOCAL_MACHINE\SOFTWARE\Centura' from the system registry and re-install CRAMM Version 5.

The user should ask their system administrator to perform the above action. The registry key is unique to CRAMM and will not affect any other software.

If this does not resolve the problem please contact the CRAMM Help Desk.

I cannot print or preview some of the reports available from CRAMM.

The CRAMM software uses the default printer defined on your workstation to display the reports. Please install a printer and set it as default. Refer to your system administrator or Windows Operating System’s user guides when installing a printer driver.

Problems have occasionally been reported where the Centura printer drivers have been corrupted, resulting in the user being able to preview some of the reports, but unable to print them. If this is the case please contact the CRAMM Help Desk who can supply update printer drivers that will resolve the problem.

Why do I encounter an error message ‘E18 Dongle not available’?

To protect CRAMM’s copyright, a device called a ‘dongle’ is required. It should be attached to the parallel port. If the dongle is not attached you will encounter an error and the CRAMM application will not run.

If the dongle is attached to the parallel port and the same error message still appears, it may mean that the software drivers for the dongle have not been correctly installed. These can be installed by running the application called ‘Setup.exe’ which is in the Sentinel directory on the CRAMM CD.

If your computer does not have a parallel printer port then you will need to use a USB Dongle. These are not issued as standard, but can be requested from the CRAMM Help Desk. Please contact the CRAMM support helpdesk on +44 (0)1932 241000. Alternatively, you could email crammhd@insight.co.uk

If you have already been issued a conventional dongle and now wish to use a USB dongle, you will need to return your conventional dongle to us before the USB dongle can be sent out.

How do I back-up a CRAMM Review?

The backing up of CRAMM reviews is slightly complicated because CRAMM consists of two applications.

In order to back-up the information stored in the Centura parts of the software (e.g. data and physical assets, their values, the threats and vulnerabilities and details of the status of countermeasures) please carry out the following steps:

From the System Admin screen choose Backup/Restore/Delete Review option
Select the review you wish to back up
The Back-up Review to File screen is displayed for you to supply the details of the file to which you want the back-up copy to be written.

Note that two files will be created by the back-up operation. Both will have the filename supplied in step 6; one will have the suffix .CRM and the other will have the suffix .CTL. If the review is undergoing a ‘What-if analysis’, a further two files will be produced with the suffixes .CRW and .CTW. All files must be present in the same directory when the review is restored.

The following table summarises the types of files produced by the CRAMM Back-up routine:

The information stored in the Access component of the software (e.g. BS7799 Gap Analysis, Security Resources) is recorded in an Access Database with the same name as the review (i.e. if the review is called Course, then there will be a database file called Course.MDB) in the directory that holds the Access components of CRAMM (normally c:\program files\CRAMM v5 Access Database).

To back-up this information, you should simply copy the Access Database to a safe location.

Sometimes I get an error message ‘Fail to find instance….’ when Opening a Review.

The normal cause of this message is that somehow two copies of CRAMM have been started at the same time. The best way to guarantee that all copies of the software have been terminated is to restart the machine.

If the problem persists, try opening a new review. If it works, it means that the existing review is corrupted. If CRAMM could not create a new review, check in the 'Add/Remove Program' section and make sure it has both CRAMM Access database and Program installed. In doubt, remove and re-install CRAMM Version 5.

How do I access and overview of the countermeasures without having to click through various levels?

Within the Security Reports screen there is function to do this. Please download PDF file for full details on how this is done.

Is it possible to export mapping between BS7799 and CRAMM countermeasures?

It is possible to export the mapping. Please download PDF file that provides full information on how to do this.

Will we be linking CRAMM to IS1?

Earlier versions of CRAMM used to support Memo 10 (the predecessor to HMG Infosec Standard No 1) but this was removed in version 4 and subsequent versions. Even though IS1 is an unclassified document, CESG have stated that they do not want it freely distributed, so it is there are no plans for development.

Can you import existing legacy documents/policies in CRAMM's document register?

The Enter/Amend Security Resource/Record Documentation screen have an option to back-up/restore resources. Using these you can important existing documents. See PDF file for full information on how this is done.

When exporting reports to MS Word it is time consuming to edit the reports into a format that is used in other documents, how can this be made easier?

Using autoformat in Word can solve this problem, please download PDF file for full details on how to do this.

How do I convert a BS7799 action plan into Microsoft Project?

The BS7799 screens in CRAMM provide the ability to record actions against any of the BS7799 controls. To import this into Microsoft Project please follow the instructions contained within this PDF file.

How do I convert CRAMM countermeasures into Microsoft Project?

Within the CRAMM risk management screens there are screen that allow users to record the status of the countermeasures, installation costs, running costs and timescales. This can be imported in Microsoft Project. To do this please follow the instructions contained within the PDF file.

Help desk

Hours of operation and contact details for the CRAMM Help Desk are included on the Support options page.

Support options