Upgrade Instructions PDF
Upgrade Instructions PDF
Upgrade Instructions
12.1
Veritas Enterprise Vault: Upgrade Instructions
Last updated: 2016-08-29.
Legal Notice
Copyright © 2016 Veritas Technologies LLC. All rights reserved.
Veritas, the Veritas Logo, Enterprise Vault, Compliance Accelerator, and Discovery Accelerator
are trademarks or registered trademarks of Veritas Technologies LLC or its affiliates in the
U.S. and other countries. Other names may be trademarks of their respective owners.
This product may contain third party software for which Veritas is required to provide attribution
to the third party (“Third Party Programs”). Some of the Third Party Programs are available
under open source or free software licenses. The License Agreement accompanying the
Software does not alter any rights or obligations you may have under those open source or
free software licenses. Refer to the third party legal notices document accompanying this
Veritas product or available at:
https://www.veritas.com/about/legal/license-agreements
The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Veritas Technologies
LLC and its licensors, if any.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq.
"Commercial Computer Software and Commercial Computer Software Documentation," as
applicable, and any successor regulations, whether delivered by Veritas as on-premises or
hosted services. Any use, modification, reproduction release, performance, display or disclosure
of the Licensed Software and Documentation by the U.S. Government shall be solely in
accordance with the terms of this Agreement.
http://www.veritas.com
Technical Support
Technical Support maintains support centers globally. All support services will be delivered
in accordance with your support agreement and the then-current enterprise technical support
policies. For information about our support offerings and how to contact Technical Support,
visit our website:
https://www.veritas.com/support
You can manage your Veritas account information at the following URL:
https://my.veritas.com
If you have questions regarding an existing support agreement, please email the support
agreement administration team for your region as follows:
Japan [email protected]
Before you contact Technical Support, run the Veritas Quick Assist (VQA) tool to make sure
that you have satisfied the system requirements that are listed in your product documentation.
You can download VQA from the following article on the Veritas Support website:
http://www.veritas.com/docs/000095758
Documentation
Make sure that you have the current version of the documentation. Each document displays
the date of the last update on page 2. The latest documentation is available on the Veritas
website:
http://www.veritas.com/docs/000001907
Documentation feedback
Your feedback is important to us. Suggest improvements or report errors or omissions to the
documentation. Include the document title, document version, chapter title, and section title
of the text on which you are reporting. Send feedback to:
You can also see documentation information or ask a question on the Veritas community site:
http://www.veritas.com/community
Contents
Document Comments
Veritas Enterprise Vault Includes all the following documents in Windows Help (.chm)
Documentation Library format so that you can search across them all. It also includes
links to the guides in Acrobat (.pdf) format.
You can access the library in several ways, including the
following:
Deployment Scanner Describes how to check the required software and settings
before you install Enterprise Vault.
Setting up Domino Server Describes how to archive items from Domino mail files and
Archiving journal databases.
Setting up Exchange Server Describes how to archive items from Microsoft Exchange
Archiving user mailboxes, journal mailboxes, and public folders.
Setting up File System Describes how to archive the files that are held on network
Archiving file servers.
Setting up SMTP Archiving Describes how to archive SMTP messages from other
messaging servers.
Setting up SharePoint Server Describes how to archive content from Microsoft SharePoint
Archiving servers.
Document Comments
NSF Migration Describes how to migrate content from Domino and Notes
NSF files into Enterprise Vault archives.
PST Migration Describes how to migrate content from Outlook PST files into
Enterprise Vault archives.
Registry Values A reference document that lists the registry values with which
you can modify many aspects of Enterprise Vault behavior.
Help for Administration The online Help for the Enterprise Vault Administration
Console Console.
Help for Enterprise Vault The online Help for Enterprise Vault Operations Manager.
Operations Manager
For the latest information on supported devices and versions of software, see the
Enterprise Vault Compatibility Charts book, which is available from this address:
http://www.veritas.com/docs/000097605
searching the Internet with any popular search engine, such as Google, or by
following the procedure below.
To access the “How To” articles on the Veritas Support website
1 Type the following in the address bar of your web browser, and then press
Enter:
http://www.veritas.com/support/en_US/products-a-z
2 In the Products A-Z page, choose the required product, such as Enterprise
Vault for Microsoft Exchange.
3 Search for a word or phrase by using the Knowledge Base Search feature, or
browse the list of most popular subjects.
■ Documentation
Note: Enterprise Vault release updates that you have installed do not affect the
upgrades. You do not have to remove Enterprise Vault release updates before you
upgrade.
Documentation
The Enterprise Vault documentation is in the Veritas Enterprise
Vault\Documentation folder on the Enterprise Vault media.
For the latest information on supported devices and versions of software, see the
Enterprise Vault Compatibility Charts, which is available from this address:
http://www.veritas.com/docs/000097605
Chapter 3
Points to note when
upgrading from Enterprise
Vault 11.0
This chapter includes the following topics:
For more information on supported versions and upgrade paths, see the Enterprise
Vault Compatibility Charts at http://www.veritas.com/docs/000097605 and the article
Supported upgrade paths for Enterprise Vault, Compliance Accelerator, Discovery
Accelerator and Discovery Collector at http://www.veritas.com/docs/000080843.
Note: Outlook performance counters must be disabled when Outlook 2013 SP1 is
installed on the Enterprise Vault server. The Enterprise Vault Admin service
automatically disables the Outlook performance counters if it detects Outlook 2013
on the Enterprise Vault server.
To support this feature, new Content Conversion settings are added to the advanced
site settings in the Enterprise Vault Administration Console. During the upgrade
process, the new settings are added to each site with default values.
If you previously configured conversion registry settings on an Enterprise Vault
server, the setting values are evaluated during upgrade. On each Enterprise Vault
server in the site, existing content conversion registry settings are logically upgraded
and then deleted if their values match the equivalent site setting. If the value differs
from the site settings default, then the registry setting value overrides the site setting
value on the local Enterprise Vault server only.
Table 3-1 shows the association between new Content Conversion site settings
and existing conversion registry settings.
Enterprise Vault\ConvertWordToText
Enterprise Vault\ConvertExcelToText
Enterprise Vault\ConvertRTFCoverToText
Table 3-1 Content Conversion site settings and registry settings (continued)
Exchange Mailbox Policy This tab has been removed. The settings on the tab related
dialog box > Existing Items to how retention was assigned to items whose shortcuts were
tab moved from one mailbox folder to another. The settings also
applied to existing shortcut items in the mailbox folder. On
(In Enterprise Vault 11.0, this
the Archive Settings tab of the Site Properties dialog box,
tab was called Moved Items)
the Update the category for existing items setting also
controlled how retention was assigned to such items. The
various setting names and their combined effect caused
confusion.
In this release, the item movement behavior has been
standardized across Enterprise Vault. That is:
Site Properties dialog box > The Update the category for moved items setting on this
Archive Settings tab tab relates to archived items that are moved from one folder
to another. The following options now let you control when
Enterprise Vault updates the retention category of such items:
■ Always
■ If item expiry is the same or later, or the record type
changes
For an overview of retention in Enterprise Vault 12.1, see the following article on
the Veritas Support website:
http://www.veritas.com/docs/000115701
To prevent these timeouts, configure a list of valid site aliases as described in the
following procedure.
Configuring a list of valid site aliases
1 In the Enterprise Vault Administration Console, open the Advanced tab in the
Exchange Mailbox policy.
2 In List settings from:, select Archiving General.
3 Select Valid Enterprise Vault site aliases and click Modify.
4 Enter a semi-colon separated list of valid site aliases. During shortcut
processing, Enterprise Vault does not attempt to contact any site whose alias
does not appear in the list.
5 Click OK to close the dialog, and then again to close the properties.
6 Repeat the above steps for each Exchange Mailbox policy.
Chapter 4
Points to note when
upgrading from Enterprise
Vault 12
This chapter includes the following topics:
For more information on supported versions and upgrade paths, see the Enterprise
Vault Compatibility Charts at http://www.veritas.com/docs/000097605 and the article
Supported upgrade paths for Enterprise Vault, Compliance Accelerator, Discovery
Accelerator and Discovery Collector at http://www.veritas.com/docs/000080843.
Note: Outlook performance counters must be disabled when Outlook 2013 SP1 is
installed on the Enterprise Vault server. The Enterprise Vault Admin service
automatically disables the Outlook performance counters if it detects Outlook 2013
on the Enterprise Vault server.
Exchange Mailbox Policy This tab has been removed. The settings on the tab related
dialog box > Existing Items to how retention was assigned to items whose shortcuts were
tab moved from one mailbox folder to another. The settings also
applied to existing shortcut items in the mailbox folder. On
(In Enterprise Vault 11.0, this
the Archive Settings tab of the Site Properties dialog box,
tab was called Moved Items)
the Update the category for existing items setting also
controlled how retention was assigned to such items. The
various setting names and their combined effect caused
confusion.
In this release, the item movement behavior has been
standardized across Enterprise Vault. That is:
Site Properties dialog box > The Update the category for moved items setting on this
Archive Settings tab tab relates to archived items that are moved from one folder
to another. The following options now let you control when
Enterprise Vault updates the retention category of such items:
■ Always
■ If item expiry is the same or later, or the record type
changes
For an overview of retention in Enterprise Vault 12.1, see the following article on
the Veritas Support website:
http://www.veritas.com/docs/000115701
To prevent these timeouts, configure a list of valid site aliases as described in the
following procedure.
Configuring a list of valid site aliases
1 In the Enterprise Vault Administration Console, open the Advanced tab in the
Exchange Mailbox policy.
2 In List settings from:, select Archiving General.
3 Select Valid Enterprise Vault site aliases and click Modify.
4 Enter a semi-colon separated list of valid site aliases. During shortcut
processing, Enterprise Vault does not attempt to contact any site whose alias
does not appear in the list.
5 Click OK to close the dialog, and then again to close the properties.
6 Repeat the above steps for each Exchange Mailbox policy.
Chapter 5
Steps to upgrade your
system
This chapter includes the following topics:
Note: When you back up your databases, perform the recommended database
maintenance steps that are described in the following technical note on the Veritas
Support website:
http://www.veritas.com/docs/000040169
These maintenance steps shrink the database, rebuild the table indexes, and update
the database statistics. Such actions enable the upgrade of the databases to proceed
more quickly.
When you have backed up your vault store partitions, the Storage service marks
the relevant files as backed up, and this removes the entries from the WatchFile
table. The Storage service performs these tasks at preconfigured intervals. You
should wait for the WatchFile table to reduce in size before you proceed with the
upgrade. If you do not wait, the Storage service can take some time to restart after
the upgrade is complete. You can use the usage report at
http://evserver/enterprisevault/usage.asp to check the number of files in the Awaiting
Backup column.
Enterprise Vault server preparation 33
Updating required Windows features
Note: If you choose to check SQL Server, the report may show a warning that "SQL
databases contain entities with mixed collations". See the following technical note
for details of how to fix the problem:
http://www.veritas.com/docs/000081327
Preparation
To prepare to upgrade the Enterprise Vault server software on a single server
1 Log on to the Enterprise Vault server as the Vault Service account.
2 Stop the Enterprise Vault Admin service. This stops the Admin service itself,
and any other Enterprise Vault services.
3 Stop any other local or remote services or applications that can lock Enterprise
Vault files. For example:
■ Enterprise Vault Administration Console
■ Enterprise Vault Accelerator Manager service
4 Close any other applications that may be running on the server, including the
Control Panel, Computer Management, Windows Services, and the Windows
Event Viewer.
5 If you are installing on an Enterprise Vault Domino Gateway, make sure that
the Domino server on the Enterprise Vault Domino Gateway is shut down and
that EVInstall.nsf is not being accessed locally.
Caution: If a system restart is needed during silent installation, the server restarts
automatically. If the server restarts, log on again as the Vault Service account so
that the installer can complete the upgrade.
6 If the server restarts, log on again as the Vault Service account so that the
installer can complete the upgrade.
Note that you can also run Start-EVDatabaseUpgrade -verbose if you want
to see detailed output.
4 Wait for Start-EVDatabaseUpgrade to complete the upgrade of all the
databases.
When the upgrade is complete, you can examine the upgrade reports for errors.
Start-EVDatabaseUpgrade writes the reports in the Reports\DBUpgrade subfolder
of the Enterprise Vault installation folder (for example C:\Program Files
(x86)\Enterprise Vault).
Preparation
To prepare to upgrade the Enterprise Vault server software
1 Log on to the Enterprise Vault server as the Vault Service account.
2 Stop the Enterprise Vault Admin service. This stops the Admin service itself,
and any other Enterprise Vault services.
3 Stop any other local or remote services or applications that can lock Enterprise
Vault files. For example:
■ Enterprise Vault Administration Console
■ Enterprise Vault Accelerator Manager service
4 Close any other applications that may be running on the server, including the
Control Panel, Computer Management, Windows Services, and the Windows
Event Viewer.
5 If you are installing on an Enterprise Vault Domino Gateway, make sure that
the Domino server on the Enterprise Vault Domino Gateway is shut down and
that EVInstall.nsf is not being accessed locally.
9 When the installation is complete, the installer re-enables the Enterprise Vault
services. Do not start any Enterprise Vault services at this time.
10 Repeat this procedure on every computer on which the Enterprise Vault services
are installed.
Caution: If a system restart is needed during silent installation, the server restarts
automatically. If the server restarts, log on again as the Vault Service account so
that the installer can complete the upgrade.
6 If the server restarts, log on again as the Vault Service account so that the
installer can complete the upgrade.
7 When the installation is complete, the installer re-enables the Enterprise Vault
services. Do not start any Enterprise Vault services at this time.
8 Repeat this procedure on every computer on which the Enterprise Vault services
are installed.
Note: You only need to complete this procedure on one Enterprise Vault server.
Note that you can also run Start-EVDatabaseUpgrade -verbose if you want
to see detailed output.
4 Wait for Start-EVDatabaseUpgrade to complete the upgrade of all the
databases.
When the upgrade is complete, you can examine the upgrade reports for errors.
Start-EVDatabaseUpgrade writes the reports in the Reports\DBUpgrade subfolder
of the Enterprise Vault installation folder (for example C:\Program Files
(x86)\Enterprise Vault).
Note that Enterprise Vault does not support high-availability upgrades. You must
install the server software on all nodes in the cluster before you start Enterprise
Vault services or run the configuration wizard.
Preparation
To prepare to upgrade the Enterprise Vault server software
1 Log on to the active node as the Vault Service account.
2 Use the VCS cluster administration tools to take all the Enterprise Vault service
resources offline.
Note the following important points:
■ You must stop all Enterprise Vault services in the Enterprise Vault site. For
example, stop the services on non-clustered servers, such as an Enterprise
Vault Domino Gateway.
■ If you install on an Enterprise Vault Domino Gateway, make sure that the
Domino server on the Enterprise Vault Domino Gateway is shut down and
that EVInstall.nsf is not accessed locally.
■ If there are multiple sites that share the Enterprise Vault Directory, you must
also stop all Enterprise Vault services in the other sites.
3 Stop any other local or remote services or applications that can lock Enterprise
Vault files. For example:
■ Enterprise Vault Administration Console
■ Enterprise Vault Accelerator Manager service
4 Close any applications that may be running on the server, including the Control
Panel, Computer Management, Windows Services, and the Windows Event
Viewer.
Caution: If a system restart is needed during silent installation, the server restarts
automatically. If the server restarts, log on again as the Vault Service account so
that the installer can complete the upgrade.
6 When the installation is complete, the installer re-enables the Enterprise Vault
services. Do not start any Enterprise Vault services at this time.
7 Install the Enterprise Vault software on the other servers in your Enterprise
Vault environment, including any cluster failover nodes.
Veritas Cluster Server: upgrading the Enterprise Vault server software 47
Upgrading the Enterprise Vault databases
Note: You only need to complete this procedure on the active node.
Note that you can also run Start-EVDatabaseUpgrade -verbose if you want
to see detailed output.
4 Wait for Start-EVDatabaseUpgrade to complete the upgrade of all the
databases.
When the upgrade is complete, you can examine the upgrade reports for errors.
Start-EVDatabaseUpgrade writes the reports in the Reports\DBUpgrade subfolder
of the Veritas Technologies LLC installation folder (for example C:\Program Files
(x86)\Enterprise Vault).
Use the cluster administration tools to bring all the Enterprise Vault services online.
If there are multiple sites that share the Enterprise Vault Directory, you can start all
Enterprise Vault services in the other sites.
Test that the cluster failover works correctly for Enterprise Vault.
Chapter 10
Windows Server Failover
Clustering: upgrading the
Enterprise Vault server
software
This chapter includes the following topics:
Preparation
To prepare to upgrade the Enterprise Vault server software
1 Log on to the active node as the Vault Service account.
2 Use Failover Cluster Manager or the command-line utility cluster to take the
Admin service resource offline. This takes all the Enterprise Vault services
offline.
Note the following important points:
■ Do not take the EnterpriseVaultServerInstance offline.
■ You must stop all Enterprise Vault services in the Enterprise Vault site. For
example, stop the services on non-clustered servers, such as an Enterprise
Vault Domino Gateway.
■ If you install on an Enterprise Vault Domino Gateway, make sure that the
Domino server on the Enterprise Vault Domino Gateway is shut down and
that EVInstall.nsf is not accessed locally.
■ If there are multiple sites that share the Enterprise Vault Directory, you must
also stop all Enterprise Vault services in the other sites.
3 Stop any other local or remote services or applications that can lock Enterprise
Vault files. Use Failover Cluster Manager to stop clustered services. For
example:
■ Enterprise Vault Administration Console
■ Enterprise Vault Accelerator Manager service
4 Close any applications that may be running on the server, including the Control
Panel, Computer Management, Windows Services, and the Windows Event
Viewer.
Windows Server Failover Clustering: upgrading the Enterprise Vault server software 51
Installing the Enterprise Vault server software
Caution: If a system restart is needed during silent installation, the server restarts
automatically. If the server restarts, log on again as the Vault Service account so
that the installer can complete the upgrade.
4 Open a command prompt window and navigate to the following folder on the
Enterprise Vault media:
\Veritas Enterprise Vault\Server\x64
6 If the server restarts, log on again as the Vault Service account so that the
installer can complete the upgrade.
7 When the installation is complete, the installer re-enables the Enterprise Vault
services. Do not start any Enterprise Vault services at this time.
8 Install the Enterprise Vault software on the other servers in your Enterprise
Vault environment, including any cluster failover nodes.
Note: You only need to complete this procedure on the active node.
Note that you can also run Start-EVDatabaseUpgrade -verbose if you want
to see detailed output.
4 Wait for Start-EVDatabaseUpgrade to complete the upgrade of all the
databases.
When the upgrade is complete, you can examine the upgrade reports for errors.
Start-EVDatabaseUpgrade writes the reports in the Reports\DBUpgrade subfolder
of the Enterprise Vault installation folder (for example C:\Program Files
(x86)\Enterprise Vault).
Windows Server Failover Clustering: upgrading the Enterprise Vault server software 53
Backing up the upgraded Enterprise Vault databases
Step 1 If you are upgrading from Enterprise Use the Microsoft SQL Server Reporting
Vault 11.0.x, remove the existing Services Report Manager web
Symantec Enterprise Vault folder. application to remove the folder.
Step 2 Install the Enterprise Vault 12.1 See “Installing the Enterprise Vault
Reporting component on each computer Reporting component” on page 58.
on which the Enterprise Vault Reporting
component is installed.
Upgrading Enterprise Vault Reporting 58
Installing the Enterprise Vault Reporting component
Step 3 Run the Enterprise Vault Reporting See “Running the Enterprise Vault
Configuration utility on each computer Reporting Configuration utility”
on which the Enterprise Vault Reporting on page 59.
component is installed.
■ Upgrading MOM
Upgrading MOM
If you use Microsoft Operations Manager (MOM) to monitor Enterprise Vault events
then you must install the new management pack.
To install the Enterprise Vault MOM management pack
1 Start the MOM Administrator Console.
2 In the left pane, right-click Processing Rule Groups and, on the shortcut
menu, click Import Management Pack.
3 Select the Enterprise Vault Management Pack, EnterpriseVault.akm, and
work through the rest of the Import Options wizard.
■ Forms85.nsf
■ Forms8.nsf
Note: The following procedure requires you to replace the forms files with the
original Domino versions. When you replace the forms files you lose any
non-Enterprise Vault customizations that you made to them. If you made any
non-Enterprise Vault customizations to the forms files, you must reapply these
changes to the files after you have upgraded Enterprise Vault.
5 Update the ACLs on the original Domino .nsf files to give Manager access to
the ID of the user that will run EVInstall.
3 Deploy the templates created on the Domino mail server to each target Domino
mail server that has the same Domino Server version. For example, if you ran
EVInstall.nsf against a Domino Server 8.5.3 target server, deploy the
templates to all Domino Server 8.5.3 mail servers.
Deploy the templates by creating replicas of the Enterprise Vault mail templates
and running Load Design on each mail server.
It is important that you copy the templates created on the Domino mail server
and not those created on the Enterprise Vault Domino Gateway.
Note that the command Load Design updates all databases on the server. It
may be quicker to restrict the scope of the command so that it updates just
those databases that need changing. In this case, use the command's -I or
-d or -f switches to update all Enterprise Vault mail databases that have had
any of the following templates applied to them:
■ ev_dwa*.ntf
■ ev_iNotes*.ntf
■ ev_Mail*.ntf
See the Domino help for more information about Load Design switches.
4 If you have other target mail servers with different Domino Server versions (for
example, 8.5.2), do the following until you have deployed the templates to all
mail server targets:
Upgrading Domino mailbox archiving 67
Granting the Domino archiving user access to mail files
Note: If you intend not to archive unread items then the Domino archiving user
requires Manager access to the mail files. This is because Domino requires Manager
access in order to determine which items are unread.
If Domino administrators have Manager access to all mail files, you can use the
Manage ACL tool in the Domino Administrator client to add the Domino archiving
user to all mail databases.
Repeat the following steps for each target Domino mail server.
To add the Domino archiving user to all mail databases
1 In the Domino Administrator client, navigate to the Domino mail server and
click the Files tab.
2 In the tasks pane, click the Mail folder to display a list of all the mail databases
in the results pane.
3 Select the first mail database, and then press Shift+End to select all the mail
databases.
4 Right-click and select Access Control > Manage.
Upgrading Domino mailbox archiving 68
Identifying internal mail recipients
5 Click Add and then click the person icon to select the Domino archiving user
from the Domino directory list. Click OK.
6 When the user is in the Access Control List dialog box, change the set User
Type to Person and Access to Manager.
7 Select Delete documents.
8 Click OK to add the user to the ACL of all mail databases selected.
If no user has Manager access to every mail database, then do the following:
■ Place the Domino server administrator's user name in the Full Access
Administrators field in the server document.
■ Restart the Domino server.
■ In the Domino Administrator client, choose Administration > Full Access
Administration and complete the procedure described above.
■ If necessary, the administrator can then be removed from the Full Access
Administrators field.
HKEY_LOCAL_MACHINE
\SOFTWARE
\Wow6432Node
\KVS
\Enterprise Vault
\Agents
2 Under the new NotesDomains key, create a subkey for each Notes domain.
For example, if you have Notes domains 'MyNotesDomain1' and
'MyNotesDomain2' you create subkeys 'MyNotesDomain1' and
'MyNotesDomain2'.
3 Under each of the Notes domain subkeys, create a new String value named
InternalSMTPDomains.
4 Assign to each InternalSMTPDomains value a string that lists the domains for
which you want to use local lookup. Use semi-colons (;) to separate domains.
For example:
exampledomain1.com;exampledomain2.com
5 Under each of the Notes domain subkeys, create a new DWORD value called
EnableLocalPartLookup.
6 Give EnableLocalPartLookup one of the following values:
■ 0 to disable local part lookup
■ 1 to enable local part lookup
7 Repeat all these steps for other Enterprise Vault servers that run Domino
archiving or journaling tasks.
Table 15-1 shows how the NotesDomains registry key controls how Enterprise
Vault identifies internal mail recipients.
NotesDomains key is present but has no key Original address is recorded. No lookup.
for the current Notes domain
■ Upgrading FSA Agent services that are clustered for high availability
■ Upgrading the FSA Agent on a target Windows file server from the Administration
Console
■ Upgrading the FSA Agent on an FSA Reporting proxy server from the
Administration Console
Note: Do not install the FSA Agent on Enterprise Vault servers. Enterprise Vault
servers do not require the FSA Agent.
FSA Agent installation requires an up-to-date root certificate on the target computer.
Certificate updates usually happen automatically over the Internet. If the certificate
is out-of-date, for example because the computer has no Internet connection, the
FSA Agent installation fails with a “Signature verification failed” error in the FSA
Agent installation log. For more details and for instructions on how to update the
root certificate, see the following technical note on the Veritas Support website:
http://www.veritas.com/docs/000076505
You can upgrade the FSA Agent from an Enterprise Vault Administration Console,
or by installing the files manually on the file server.
To install or upgrade the FSA Agent you must use an account that is a member of
the local Administrators group on the file server.
If you upgrade the FSA Agent from the Administration Console then if the file server's
firewall is enabled it must be suitably configured. Otherwise the Administration
Console wizard fails with the message “Error: The RPC server is unavailable”. See
the following technical note on the Veritas Support website:
http://www.veritas.com/docs/000040649
Table 16-1 describes the options for upgrading the FSA Agent.
Upgrade FSA Agent services that are See “Upgrading FSA Agent services that are
clustered for high availability. clustered for high availability” on page 73.
Upgrade the FSA Agent on target Windows See “Upgrading the FSA Agent on a target
file servers from the Administration Console. Windows file server from the Administration
Console” on page 74.
Upgrading the FSA Agent 73
Upgrading FSA Agent services that are clustered for high availability
Upgrade the FSA Agent on FSA Reporting See “Upgrading the FSA Agent on an FSA
proxy servers from the Administration Reporting proxy server from the
Console. Administration Console” on page 75.
Upgrade the FSA Agent manually. See “Upgrading the FSA Agent manually”
on page 76.
2 Upgrade the FSA Agent on the clustered file server by using one of the following
methods:
■ Upgrade the FSA Agent from the Administration Console.
See “Upgrading the FSA Agent on a target Windows file server from the
Administration Console” on page 74.
■ Upgrade the FSA Agent manually on each file server node.
Upgrading the FSA Agent 74
Upgrading the FSA Agent on a target Windows file server from the Administration Console
3 Perform the following steps in the order shown to reconfigure the FSA services
for high availability:
■ Run the Enterprise Vault Administration Console with an account that is a
member of the local Administrators group on each file server node. The
account must also have Full Control permission on the Enterprise Vault
server's FSA Cluster folder. This folder is in the Utilities subfolder of
the Enterprise Vault installation folder, for example C:\Program Files
(x86)\Enterprise Vault\Utilities\FSA Cluster.
■ Enterprise Vault File Blocking service. While this service is stopped, File Blocking
does not work on the following:
■ The file server.
Upgrading the FSA Agent 75
Upgrading the FSA Agent on an FSA Reporting proxy server from the Administration Console
■ Any NetApp filers for which the file server performs File Blocking.
To upgrade the FSA Agent on a target Windows file server from the
Administration Console
1 Run the Enterprise Vault Administration Console with an account that is a
member of the local Administrators group on the file server.
2 In the Administration Console, expand the Enterprise Vault site until the Targets
container is visible.
3 Expand the Targets container.
4 Expand the File Servers container.
5 Right-click the file server on which you want to upgrade the FSA Agent and
then, on the shortcut menu click Install FSA Agent.
6 Work through the wizard.
5 Right-click the target non-Windows file server and on the shortcut menu click
Upgrade FSA Agent on proxy server for FSA Reporting.
This option is not available if the FSA Reporting proxy server is an Enterprise
Vault server. Enterprise Vault servers do not require the FSA Agent.
If the proxy server is a target Windows file server, Enterprise Vault displays a
dialog to warn that the FSA Agent services stop while the upgrade proceeds.
Click Yes if you want to continue.
6 Work through the wizard to upgrade the version of the FSA Agent on the FSA
Reporting proxy server.
2 Install the required Microsoft Visual C++ redistributable packages on the file
server:
■ vcredist_x86.exe
■ vc2005redist_x86.exe
■ vcredist_x64.exe
3 Log on to the file server with an account that is a member of the local
Administrators group on the file server.
4 Run the Enterprise Vault File System Archiving x64.msi file on the file
server.
Chapter 17
Upgrading Enterprise
Vault Office Mail App
This chapter includes the following topics:
Note: You must upgrade the SharePoint components. The version of the SharePoint
components must match the version of Enterprise Vault that is installed on the
Enterprise Vault servers.
■ Creating and configuring Client Access Provisioning tasks for Enterprise Vault
Search
■ Configuring Enterprise Vault Search for use in Forefront TMG and similar
environments
Enterprise Vault Search enables client users to browse and search their archives.
This feature replaces the legacy search applications: Archive Explorer, Browser
Search, and Integrated Search, which are no longer available.
Some export formats are appropriate for use with certain types of items only.
For example, it is not possible to export Outlook messages to a .nsf file, or
Notes messages to a .pst file. A user who chooses to export both Outlook and
Notes messages to a single file can export them to a .zip file only.
■ Copy and move archived items out of an archive, within an archive, and from
one archive to another. Choosing to allow these actions also allows users to
create, rename, move, and delete folders in their archives.
■ Delete archived items. Note that, even if you define a search policy to grant
delete permissions, users can only delete items if you have configured the
Enterprise Vault site appropriately. In the Administration Console, open the Site
Properties dialog box for the Enterprise Vault site and then, on the Archive
Settings tab, ensure that Users can delete items from their archives is
checked.
■ When using the advanced search facilities in Enterprise Vault Search, choose
from extra options on the Select search property dropdown list. These extra
properties make it easier to build search queries for the items that the Enterprise
Vault records management and classification features have tagged.
Installing Enterprise Vault creates a default search policy automatically. You can
modify the properties of this default policy and define custom search policies. Then
you can assign each policy to a different search provisioning group.
To view and modify the properties of the default search policy
1 In the left pane of the Administration Console, expand your Enterprise Vault
site.
2 Expand the Policies container.
3 Click the Search container.
4 In the right pane, right-click Default Search Policy and then click Properties.
You can change the settings on the Features and Advanced Search tabs,
but you cannot change the settings on the other tabs.
To define a new search policy
1 In the left pane of the Administration Console, expand your Enterprise Vault
site.
2 Expand the Policies container.
3 Right-click the Search container, and then click New > Policy.
The New Search Policy wizard appears.
4 Follow the on-screen instructions. The wizard prompts you to specify the
following:
Upgrading your Enterprise Vault sites to use Enterprise Vault Search 87
Setting up provisioning groups for Enterprise Vault Search
4 Right-click a blank area of the right pane, and then click Properties.
The Provisioning Groups Properties dialog box appears.
5 In the Provisioning Groups list, click a group and then click Move Up or Move
Down to raise or lower its priority.
If users are the targets of multiple provisioning groups, Enterprise Vault
processes them as members of the topmost group only. Thereafter, Enterprise
Vault ignores these users when it processes the lower priority provisioning
groups.
To create and configure a Client Access Provisioning task for Enterprise Vault
Search
1 In the left pane of the Administration Console, find and then expand the
Enterprise Vault Servers container.
2 Expand the container for the server to which you want to add the Client Access
Provisioning task.
3 Right-click the Tasks container, and then click New > Client Access
Provisioning Task.
The New Client Access Provisioning Task dialog box appears.
4 Complete the fields and then click OK. The dialog box prompts you to specify
the following:
■ The domain with which to associate the task.
■ The name of the task.
■ Whether to start the task now. If you want to configure the task before it
starts, turn off this option and follow the instructions in step 5.
The settings that you can configure include the times at which the task runs
each day and the level of reporting that it undertakes for each provisioning
run.
5 To configure the task, right-click it in the right pane, and then click Properties.
The online Help provides detailed information on each field in the properties
dialog box.
Most users should not experience any problems when they access Enterprise Vault
Search. However, they must set the following in their browsers to use Enterprise
Vault Search:
■ Allow cookies and local storage.
■ Enable JavaScript.
■ Disable private browsing or the settings that prevent their browsers from storing
data about their browsing.
■ Disable script debugging.
■ If an option to not save encrypted pages to disk is available, disable it.
You can also minimize potential problems by configuring their web browsers to treat
Enterprise Vault Search as a trusted site. How you do this varies from one browser
to another, but the procedure for Internet Explorer is as described below.
If you use Active Directory, you can employ a group policy to apply the zone change
to all the domain users. To do this, you must edit the Internet Explorer Maintenance
settings within the policy.
To configure Internet Explorer to trust Enterprise Vault Search
1 On the client computer, open Internet Explorer.
2 On the Tools menu, click Internet Options.
3 Click the Security tab.
4 Click Trusted sites, and then click Sites.
5 Enter the fully-qualified domain name of the server on which you installed
Enterprise Vault Search, and then click Add. For example, you might type
vault.company.com.
6 Close the Trusted sites dialog box, and then close the Internet Options dialog
box.
This issue arises because Enterprise Vault Search uses an attribute to enforce the
Restricted Sites zone settings in the reading pane. In fact, this mechanism is needed
for Internet Explorer 9 and earlier only; version 10 and later uses a different security
mechanism, which Enterprise Vault Search also implements. However, because
version 10 and later still respects the older security mechanism, the reading pane
does not work in these later versions either. So, if your users do not run Internet
Explorer 9 and earlier, you can configure Enterprise Vault to not use the attribute
to enforce the Restricted Sites zone settings. The reading pane then works without
reducing security.
To configure Enterprise Vault Search for use in Forefront TMG and similar
environments
1 Locate the following file on the Enterprise Vault server:
C:\Program Files (x86)\Enterprise
Vault\EVSearch\EVSearchClient\Web.config
Caution: You can install the required components on the Enterprise Vault server.
However, if you want to give your users Internet access to Enterprise Vault Search
without exposing your Enterprise Vault server to unnecessary security risks, it is
advisable to install the components on a proxy server.
Upgrading your Enterprise Vault sites to use Enterprise Vault Search 93
Setting up Enterprise Vault Search Mobile edition
You can install Enterprise Vault Search Mobile edition on a proxy server on which
you have also installed the following:
■ One of the following versions of Windows:
■ Windows Server 2012
■ Windows Server 2012 R2
The server must have an NTFS file system.
■ The Enterprise Vault API Runtime. The process of installing Enterprise Vault
Search Mobile edition on the proxy server automatically installs the API Runtime,
if it is not already present.
■ Internet Information Services (IIS) 7.5 or later.
The following table lists the minimum set of role services that you must install
for the Web Server (IIS) role.
Upgrading your Enterprise Vault sites to use Enterprise Vault Search 94
Setting up Enterprise Vault Search Mobile edition
maximize the security of your environment, you may therefore want to disable the
weak protocols in favor of stronger, Veritas-approved alternatives.
You can comply with Veritas recommendations by configuring the cryptographic
protocols and cipher suites on your proxy server as follows:
■ Enable the TLS 1.1. and 1.2 protocols.
■ Disable the SSL 2.0 protocol.
■ Disable the RC2, RC4, and DES cipher suites.
The following articles in the Microsoft Knowledge Base provide guidelines on how
to implement these changes:
■ http://support.microsoft.com/kb/187498
■ http://support.microsoft.com/kb/245030
4 In the left pane of the Veritas Enterprise Vault Install Launcher, click Enterprise
Vault.
5 Click Server Installation.
6 Choose the required installation option.
To install Enterprise Vault Search Mobile edition on a proxy server, choose
Installation on an additional server.
7 Follow the instructions in the Enterprise Vault installation wizard.
When the wizard prompts you to select the features that you want to install,
do one of the following:
Upgrading your Enterprise Vault sites to use Enterprise Vault Search 96
Setting up Enterprise Vault Search Mobile edition
■ For installation on a proxy server, uncheck all the options except for Search
Access Components.
When you click Next, the wizard requests the Vault Site alias. This alias is
the DNS alias for the Enterprise Vault site.
■ For installation on an Enterprise Vault server, choose all the required
components.
If you choose to install the Enterprise Vault services, or you have previously
installed them on this server, then you cannot uncheck the Search Access
Components option. The components will be automatically installed.
■ Upgrading any applications that use the Enterprise Vault API Runtime