Arctera Enterprise Vault™ eDiscovery Installation Guide
- Introducing eDiscovery
- Preparing to install eDiscovery
- Configuration options for eDiscovery
- Supported versions of Enterprise Vault in eDiscovery environments
- Prerequisites for Arctera eDiscovery
- Configuring Outlook to enable the processing of items with many attachments or many recipients
- Setting the Windows and ASP.NET Temp folder permissions
- Security requirements for temporary folders
- Disabling networking facilities that can disrupt a eDiscovery environment
- Disabling the Windows Search Service on the eDiscovery server
- Ensuring that the Windows Server service is running on the eDiscovery server
- Configuring the SQL Server Agent service
- Assigning SQL Server roles to the Vault Service account
- Installing and configuring the SQL full-text search indexing service
- Verifying that Enterprise Vault expands distribution lists
- Installing eDiscovery
- Installing the eDiscovery server software
- Allowing Enterprise Vault to communicate with eDiscovery through the Windows firewall
- Creating the configuration database and customer databases
- Setting up a Insight eDiscovery Custodian Manager website
- Uploading the eDiscovery report templates
- Configuring eDiscovery for use in a SQL Server Always On environment
- Installing eDiscovery in a clustered environment
- Maximizing security in your eDiscovery databases
- Installing the eDiscovery server software
- Appendix A. Ports that eDiscovery uses
- Appendix B. Troubleshooting
- Error messages appear in the event log when upgrading to eDiscovery 15.2
- Enterprise Vault eDiscovery Manager service not created
- Enterprise Vault eDiscovery Manager service does not start
- "Access is denied" message is displayed when you try to create a customer database on a UAC-enabled computer
- Cannot create or upgrade eDiscovery customer databases when Symantec Endpoint Protection is running
- Permissions error when uninstalling the eDiscovery client from a UAC-enabled computer
- Uninstalling the eDiscovery client from a shared location may prevent other users from starting the client
- Appendix C. Installing and configuring the Enhanced Auditing feature
- Overview
- Prerequisites for the Enhanced Auditing feature
- Installing the Enhanced Auditing feature
- Post installation steps
- Upgrading the Enhanced Auditing setup
- Modifying the Enhanced Auditing setup
- Repairing the Enhanced Auditing setup
- Uninstalling the Enhanced Auditing setup
- Managing access from eDiscovery
Modifying the Enhanced Auditing setup
To modify the Enhanced Auditing setup
- Launch the Arctera Enhanced Auditing installer. To launch the installer, do any of the following steps:
Run the MSI file from the command prompt.
Right-click on the available MSI file and click Install.
Navigate to the Control Panel and double-click the Add or Remove Programs applet. Find and click Arctera Enhanced Auditing in the list of installed programs. Right-click on the installer and click Change.
The installer opens the Welcome wizard.
Note:
Click Cancel if you want to cancel the installation at any stage. After you click Cancel, the application prompts you to confirm the operation. If you interrupt the installation process, the installer prompts you to run the installation again whenever required. Click Yes to complete the operation and click Finish to abort the installation. Click No to continue the installation.
- Click Next to proceed to the Settings wizard. On the Modify, repair, or remove installation page, click Modify.
- On the Arctera Enhanced Auditing Configuration page, provide the following details to create an Audit Server website and enable it for secured access. Then, click Next.
Server Name: Change the DNS Alias name or FQDN for the audit server, if required.
Port: Change the Port for the audit server site, if required. Enter a new port that is available to use. You must not use the default IIS port 80.
Comma-separated list of IP addresses from where the audit server can be accessed: Enter a comma-separated list of IP addresses of the servers from which the audit server will be accessed. These are the IP addresses for each protocol (IPv4 and IPv6) that are enabled on the eDiscovery server. If you want to keep the previous IP addresses, do not delete them. If you delete the previous IP addresses, the new IP addresses overwrite the previous ones. You can add the new IP addresses by separating every IP address by a comma. You can also provide ranges of IP addresses, for example - 10.1.2.3,10.1.2.11-15.
Holding folder Path: Browse to another directory where the audit data is stored temporarily, if required.
Even though the previously selected holding folder may not be in use, it does not get deleted after the modification.
Note:
Ensure that the Access Control List (ACL) of the Holding Folder is not changed. The default users, such as SYSTEM, Built-in administrators, Audit Server Account, and IIS APPPOOL\AuditingServer, must be unchanged.
Based on these details, the audit server URL format becomes:https://<auditservername>:<portnumber>.
- Click Next.
Note:
If you try to modify the Elasticsearch URL, the application displays a warning message that the existing server data (auditing-specific) will not be automatically migrated to the new server. Therefore, before you change the Elasticsearch URL, ensure that you need to migrate it manually to the Elasticsearch server you want to use. Otherwise, this data will be lost.
- On the Settings wizard, on the Ready to install page, click Install.
- On the Arctera Enhanced Auditing Configuration page, ensure that the Elasticsearch installation location is appropriate. Then, click Next.
- After the modification is complete, click Finish and restart the server to apply the changes.
- To view the modification-specific logs, navigate to the folder where you have installed the Arctera Enhanced Auditing setup and access the Logs folder.