Enterprise Vault™ Setting up File System Archiving (FSA)
- About this guide
- About File System Archiving
- About File System Archiving
- About using FSA with clustered file servers
- About setting up File System Archiving
- About FSA policies
- About target volumes, folders, and archive points
- About client access to FSA-archived items
- About archived file permissions
- About FSA shortcut files
- About the FSA Agent
- About retention folders
- About FSA Reporting
- About FSAUtility
- Steps to configure File System Archiving
- Adding a Windows file server to File System Archiving
- Adding a Windows file server to File System Archiving
- Using FSA with the Windows Encrypting File System (EFS)
- About archiving from Windows Server 2012 or later file servers
- Account requirements for managing FSA with Windows file servers
- Permissions and privileges required by the Vault Service account on Windows file servers
- Configuring a file server's firewall for FSA
- Adding a Windows file server as an archiving target
- Adding a NetApp filer to File System Archiving
- Adding a NetApp C-Mode Vserver to File System Archiving
- Adding a NetApp C-Mode Vserver to File System Archiving
- Permissions and privileges required by the Vault Service account on NetApp C-mode Vservers
- Granting the required permission on each Vserver
- Configuring the FPolicy server details
- Adding a NetApp C-Mode Vserver as an archiving target
- Points to note about File System Archiving on NetApp C-Mode file servers
- Adding a Celerra/VNX device to File System Archiving
- Adding a Dell EMC Unity 4.3 device to File System Archiving
- Configuring FSA with clustered file servers
- About configuring FSA with clustered file servers
- Steps to configure FSA with clustered file servers
- Preparing to set up FSA services in a cluster
- Adding the Vault Service account to the non-secure VCS cluster for FSA high availability
- Adding the virtual file server as an FSA target
- Configuring or reconfiguring the FSA resource
- Removing the FSA resource from all cluster groups
- Troubleshooting the configuration of FSA with clustered file servers
- Installing the FSA Agent
- Defining volume and folder policies
- About defining FSA volume and folder policies
- Creating FSA volume policies and folder policies
- About FSA volume policy and folder policy properties
- About selecting the shortcut type for an FSA policy
- About FSA policy archiving rules
- About options for archiving files that have explicit permissions, and files under DAC
- Configuring the deletion of archived files on placeholder deletion
- Configuring target volumes, target folders, and archive points
- About adding target volumes, target folders, and archive points for FSA
- Adding a target volume for FSA
- Adding a target folder and archive points for FSA
- About managing archive points
- Archive point properties
- Effects of modifying, moving, or deleting folders
- About deleting target folders, volumes, and file servers
- Configuring pass-through recall for placeholder shortcuts
- Configuring and managing retention folders
- Configuring and running FSA tasks
- About configuring and running FSA tasks
- Adding a File System Archiving task
- Scheduling a File System Archiving task
- Setting the FSA folder permissions synchronization schedule
- Scheduling the deletion of archived files on placeholder deletion for Dell EMC Celerra/VNX
- Configuring FSA version pruning
- Using Run Now to process FSA targets manually
- About File System Archiving task reports
- About scheduling storage expiry for FSA
- Configuring file system filtering
- Managing the file servers
- PowerShell cmdlets for File System Archiving
- Appendix A. Permissions and privileges required for the Vault Service account on Windows file servers
- About the permissions and privileges required for the Vault Service account on Windows file servers
- Group membership requirements for the Vault Service account
- DCOM permissions required by the Vault Service account
- WMI control permissions required by the Vault Service account
- Local security user rights required by the Vault Service account
- Permissions required by the Vault Service account for the FSA Agent
- Permissions required by the Vault Service account to support the FSA resource on clustered file servers
- FSA target share and folder permissions required by the Vault Service account
Configuring the Data Mover HTTP server to use SSL
If you use placeholder shortcuts on a Celerra/VNX device you can configure the Celerra/VNX Data Mover HTTP server to use the Secure Sockets Layer (SSL), if required.
Note:
You must use SSL if you enable the following Windows security setting, either in the Windows Local Security Policy or as part of Group Policy:
System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing
To configure the Data Mover HTTP server to use SSL
- Install an SSL certificate on the Celerra/VNX device. Refer to your Celerra/VNX documentation for more information.
- Run the following command on the Celerra/VNX device:
server_http server_x -modify dhsm -ssl required
Where server_x is the name of the Data Mover.
Run the appropriate command on the Celerra/VNX device as follows:
If Windows on the Enterprise Vault server computer is configured to use FIPS-compliant algorithms, you must use basic (plain text) authentication:
server_http server_x -modify dhsm -authentication basic
Otherwise, you must use digest authentication:
server_http server_x -modify dhsm -authentication digest
Note:
You can work around any errors that relate to SSL certificates by using the IgnoreSSLCertificateError registry value, if required.
See IgnoreSSLCertificateError in the Registry Values guide.
- When you run the New File Server wizard in the Enterprise Vault Administration Console to add the Celerra/VNX device as an archiving target, select the configuration option Celerra device is connected on HTTPS.
If the Celerra/VNX device is already configured as a target for FSA, do as follows:
In the Enterprise Vault Administration Console, expand the File Servers container under Targets to show the target file servers.
Right-click the target Celerra/VNX file server, and click Properties.
On the EMC Celerra tab, and select Celerra device is connected on HTTPS.
Click OK to save your changes and close the Properties dialog box.