Arctera Enterprise Vault™ Insight Surveillance Installation Guide

To install the Enhanced Auditing feature

1. Copy the MSI file of the Enhanced Auditing feature on the server you want to use as an audit server.
2. In Windows Explorer, browse to the MSI file, and then run setup.exe. The setup.exe program launches the Windows Installer (.msi) package.
3. Click Next on the Welcome screen.
4. On the Prerequisites screen, see if you meet the listed prerequisites. If yes, select the I have read and met the above prerequisites check box and then click Next.
5. On the Prerequisite Status screen, the installer performs a check for all required software. When the prerequisite check is completed, click Next.
6. On the End-User License Agreement screen, read the Arctera Software License Agreement. If you agree the terms, select the I accept the terms in the License Agreement check box and then click Next.
7. On the Installation location screen, the default installation location is displayed. If you want to use a different installation location, click Browse to select the installation location.
8. On the Auditing Service Account Login screen, provide the following account details for the Auditing Service.

   • Domain

   • Username

   • Password

9. On the Arctera Enhanced Auditing Configuration Welcome screen, provide the following required details for creating the Audit Server URL and enabling it for secure access.

   • Server Name: DNS Alias name or FQDN for the audit server.

   • Port: Port for the audit server site. Enter a port that is available to use. You must not use the default IIS port 80.

   • Comma-separated list of IP addresses from where the audit server can be accessed: Enter a comma-separated list of IPv4 addresses of the Insight Surveillance server.

     Note:

     Although installing the audit server on the Insight Surveillance server is possible, its configuration may fail due to lack of IPv6 support. To avoid potential issues while configuring the audit server:

     - Configure the audit server on a server separate from the Insight Surveillance server, or

     - Disable IPv6 configuration on the Insight Surveillance server.

     There is no need to disable IPv6 when configuring SupervisionAPI, SupervisionWeb, and other Insight Surveillance services.

   • Holding folder Path: A directory where the audit data will be stored temporarily.

     Note:

     Ensure that the Access Control List (ACL) of the Holding Folder is not changed.

   Based on these details, the audit server URL format becomes: https://<auditservername>:<portnumber>.

   Click Next after entering all required details.

10. On the Arctera Enhanced Auditing Configuration Settings screen, enter details of either an existing Elasticsearch server or a new Elasticsearch server.

    For an existing Elasticsearch server, select the Use an existing Elasticsearch server details, and then provide the following details:

    • Elasticsearch URL: URL of the Elasticsearch server.

      Note:

      Ensure that security is enabled with native realm.

      If Elasticsearch has TLS enabled, then ensure that the required configurations also exist on the audit server. For more information on security in Elasticsearch, refer to the Elasticsearch documentation.

    • Elasticsearch Username: Username of the Elasticsearch superuser. This superuser is displayed at the time of upgrading and modifying the Enhanced Auditing feature. The Enhanced Auditing feature uses this superuser to perform the user and role management operations on Elasticsearch.

    • Elasticsearch Password: Password of the Elasticsearch superuser.

    To install a new Elasticsearch server, enter the password in the Set password for Elasticsearch built-in users field. When prompted, specify the Elasticsearch installation location where you want to install Elasticsearch.

    Click Next after entering all required details.

11. Click Install to proceed with the installation.
12. On the final screen of the setup, the Audit Server URL is displayed. You need this URL while configuring the Auditing settings in the Configuration tab in the Insight Surveillance client.
13. To view the installation-specific logs, navigate to the folder where you have installed the Arctera Enhanced Auditing setup and access the Temp folder.