Enterprise Vault™ Setting up File System Archiving (FSA)
- About this guide
- About File System Archiving
- About File System Archiving
- About using FSA with clustered file servers
- About setting up File System Archiving
- About FSA policies
- About target volumes, folders, and archive points
- About client access to FSA-archived items
- About archived file permissions
- About FSA shortcut files
- About the FSA Agent
- About retention folders
- About FSA Reporting
- About FSAUtility
- Steps to configure File System Archiving
- Adding a Windows file server to File System Archiving
- Adding a Windows file server to File System Archiving
- Using FSA with the Windows Encrypting File System (EFS)
- About archiving from Windows Server 2012 or later file servers
- Account requirements for managing FSA with Windows file servers
- Permissions and privileges required by the Vault Service account on Windows file servers
- Configuring a file server's firewall for FSA
- Adding a Windows file server as an archiving target
- Adding a NetApp filer to File System Archiving
- Adding a NetApp C-Mode Vserver to File System Archiving
- Adding a NetApp C-Mode Vserver to File System Archiving
- Permissions and privileges required by the Vault Service account on NetApp C-mode Vservers
- Granting the required permission on each Vserver
- Configuring the FPolicy server details
- Adding a NetApp C-Mode Vserver as an archiving target
- Points to note about File System Archiving on NetApp C-Mode file servers
- Adding a Celerra/VNX device to File System Archiving
- Adding a Dell EMC Unity 4.3 device to File System Archiving
- Configuring FSA with clustered file servers
- About configuring FSA with clustered file servers
- Steps to configure FSA with clustered file servers
- Preparing to set up FSA services in a cluster
- Adding the Vault Service account to the non-secure VCS cluster for FSA high availability
- Adding the virtual file server as an FSA target
- Configuring or reconfiguring the FSA resource
- Removing the FSA resource from all cluster groups
- Troubleshooting the configuration of FSA with clustered file servers
- Installing the FSA Agent
- Defining volume and folder policies
- About defining FSA volume and folder policies
- Creating FSA volume policies and folder policies
- About FSA volume policy and folder policy properties
- About selecting the shortcut type for an FSA policy
- About FSA policy archiving rules
- About options for archiving files that have explicit permissions, and files under DAC
- Configuring the deletion of archived files on placeholder deletion
- Configuring target volumes, target folders, and archive points
- About adding target volumes, target folders, and archive points for FSA
- Adding a target volume for FSA
- Adding a target folder and archive points for FSA
- About managing archive points
- Archive point properties
- Effects of modifying, moving, or deleting folders
- About deleting target folders, volumes, and file servers
- Configuring pass-through recall for placeholder shortcuts
- Configuring and managing retention folders
- Configuring and running FSA tasks
- About configuring and running FSA tasks
- Adding a File System Archiving task
- Scheduling a File System Archiving task
- Setting the FSA folder permissions synchronization schedule
- Scheduling the deletion of archived files on placeholder deletion for Dell EMC Celerra/VNX
- Configuring FSA version pruning
- Using Run Now to process FSA targets manually
- About File System Archiving task reports
- About scheduling storage expiry for FSA
- Configuring file system filtering
- Managing the file servers
- PowerShell cmdlets for File System Archiving
- Appendix A. Permissions and privileges required for the Vault Service account on Windows file servers
- About the permissions and privileges required for the Vault Service account on Windows file servers
- Group membership requirements for the Vault Service account
- DCOM permissions required by the Vault Service account
- WMI control permissions required by the Vault Service account
- Local security user rights required by the Vault Service account
- Permissions required by the Vault Service account for the FSA Agent
- Permissions required by the Vault Service account to support the FSA resource on clustered file servers
- FSA target share and folder permissions required by the Vault Service account
Example commands to prepare a Celerra/VNX device for FSA
The following example shows some commands to prepare a Celerra/VNX to use placeholder shortcuts. In this example, neither the Web Access application nor the Data Mover HTTP server uses SSL.
$ server_param server_2 -facility shadow -modify stream -value 1 $ /nas/bin/server_user server_2 -add -md5 -passwd celerraaccessaccount $ fs_dhsm -modify fsa_fs -state enabled $ server_http server_2 -append dhsm -users celerraaccessaccount -hosts 192.168.1.1 $ server_http server_2 -service DHSM -start $ fs_dhsm -connection fsa_fs -create -type http -read_policy_override passthrough -secondary http://EVServer.demo.local/EnterpriseVault -user vaultadmin@demo.local -password p4ssw0rd -cgi n -httpport 8080
Where:
The Data Mover server name is
server_2.FSA will use the Data Mover account
celerraaccessaccountto authenticate on the Celerra/VNX.The Celerra/VNX file system name is
fsa_fs.The IP address of the File System Archiving task computer is 192.168.1.1.
Pass-though is enabled for the Celerra/VNX device.
The URL of the Enterprise Vault Web Access Application is
http://EVServer.demo.local/EnterpriseVault.The Vault Service account that will have access to all the archives from which files are restored is
vaultadmin@demo.local.The password for the Vault Service account is
p4ssw0rd.The Web Access application uses an HTTP connection on the non-default port 8080.
In the following example, both the Web Access application and the Data Mover HTTP server use SSL.
$ server_param server_3 -facility shadow -modify stream -value 1 $ /nas/bin/server_user server_3 -add -md5 -passwd celerraaccessaccount $ fs_dhsm -modify fsa_fs -state enabled $ server_http server_3 -append dhsm -users celerraaccessaccount -hosts 192.168.1.1 $ server_http server_3 -service DHSM -start $ fs_dhsm -connection fsa_fs -create -type https -read_policy_override passthrough -secondary https://EVServer.demo.local/EnterpriseVault -user vaultadmin@demo.local -password p4ssw0rd -cgi n -httpsport 4334 $ server_http server_3 -modify dhsm -ssl required $ server_http server_3 -modify dhsm -authentication digest
Where:
The Data Mover server name is
server_3.FSA will use the Data Mover account
celerraaccessaccountto authenticate on the Celerra/VNX.The Celerra/VNX file system name is
fsa_fs.The IP address of the File System Archiving task computer is 192.168.1.1.
Pass-though is enabled for the Celerra/VNX device.
The URL of the Enterprise Vault Web Access application is
https://EVServer.demo.local/EnterpriseVault.The Vault Service account that will have access to all the archives from which files are restored is
vaultadmin@demo.local.The password for the Vault Service account is
p4ssw0rd.The Web Access application uses an HTTPS connection on non-default port 4334.
You do not use the Windows security setting "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing".
You must also select the configuration option for the target file server in the Vault Administration Console.