EMC SourceOne Management Version 6.7

Transcription

1 EMC SourceOne Management Version 6.7 Installation Guide REV A01 EMC Corporation Corporate Headquarters: Hopkinton, MA

2 Copyright 2011 EMC Corporation. All rights reserved. Published July 20, 2011 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED AS IS. EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. All other trademarks used herein are the property of their respective owners. 2 EMC SourceOne Management Version 6.7 Installation Guide

3 Contents Chapter 1 Chapter 2 Introduction Product overview EMC SourceOne Management...12 Related products...14 System architecture System components Processing services Databases Archives Storage Applications Planning the Installation Pre-deployment planning Customer engagement Roles and resources Analysis and design Reference configurations Information resources...26 Blueprints EMC SourceOne reference configurations...26 Small-to-medium business reference configuration...28 Enterprise reference configuration...31 Sizing and scalability Performance metrics High-availability Backup and restore Disaster recovery EMC SourceOne Management Version 6.7 Installation Guide 3

4 Contents Chapter 3 Chapter 4 Chapter 5 Pre-installation Pre-installation checklist overview Creating accounts in Active Directory Assigning permissions Common permissions assignment Management permissions assignment Establishing system requirements Common computer requirements Management computer requirements Important Considerations Common considerations (all products) Native Archive Index Work directory considerations Hardware repurposing considerations Important SQL Server considerations Additional service accounts to support least privileges Service account passwords Regional and language options to support indexing Management considerations Compatibility with EMC Xtender Service account mailbox restrictions and workaround Indexing support for embedded Exchange messages Search service startup Do not modify the EMC SourceOne Notes user account Installing Common EMC SourceOne Components Pre-installation checklist Installation overview Installing common EMC SourceOne components Installing databases using scripts Installing databases using the MSI installer Configure SQL permissions Installing Master Services software Installing the EMC SourceOne Console application Installing Worker Services software Installing Web Services software Installing the EMC SourceOne Search application Installing Mobile Services software Installing Native Archive Services software EMC SourceOne Management Version 6.7 Installation Guide

5 Contents Maintaining the installation Upgrade Remove a component Repair a component Chapter 6 Appendix A Appendix B Installing Management Support Pre-installation checklist Installation overview Installing Management components for Exchange Installing Extensions for OWA 2003 Support Installing Extensions for OWA 2007 or 2010 Support Installing Management components for Domino IBM Lotus Domino support overview Configure administrator access to journaling databases Installing Extensions for IBM Lotus Domino Installing the ONM Viewer software Maintaining the installation Upgrade Remove a component Repair a component Domino Configuration and Administration Journaling configuration and administration Journaling administration EMC SourceOne journaling considerations Native Domino journaling considerations Shortcutting configuration and administration Shortcutting administration Shortcutting considerations Historical archiving configuration and administration Configuring Single Sign-on Support (Windows) Overview Implementation details EMC SourceOne ediscovery - Kazeon considerations Implementing single sign-on in Windows Server Configure Web Services site (SearchWS) Configure the Search site (Search) Configure Universal URL site (ExShortcut) Restart IIS Configure IIS 6.0 authentication EMC SourceOne Management Version 6.7 Installation Guide 5

6 Contents Configure a User Principal Name for the service account 217 Configure Internet Explorer Implementing single sign-on in Windows Server 2008 R Configure Web Services site (SearchWS) Configure the Search site (Search) Configure Mobile Services site (ExShortcut) Restart IIS Configure IIS 7.5 authentication Configure Internet Explorer Appendix C Appendix D Configuring Single Sign-on Support (Domino) Overview Configuring EMC SourceOne for single sign-on EMC SourceOne ediscovery - Kazeon considerations Enable the DIIOP task on the Domino server Install the ExValidateLTPA web service Configure IIS Web sites in Windows Configure IIS authentication Shortcut and UDA Icon Support for Outlook Overview Publishing Custom Exchange forms Create an Exchange Public Organizational Forms library 247 Configure permissions for the library Replicate the forms library to other Exchange servers Review the forms you can publish Publishing forms to the library EMC SourceOne Management Version 6.7 Installation Guide

7 Preface As part of an effort to improve and enhance the performance and capabilities of its product lines, EMC periodically releases revisions of its hardware and software. Therefore, some functions described in this document may not be supported by all versions of the software or hardware currently in use. For the most up-to-date information on product features, refer to your product release notes. If a product does not function properly or does not function as described in this document, please contact your EMC representative. Audience Related documentation This document is part of the EMC SourceOne documentation set, and is intended for use by installers of the product, EMC SourceOne system administrators, and mail server administrators. Related documents include: EMC SourceOne Management Installation Guide EMC SourceOne Management Administration Guide EMC SourceOne Search User Guide EMC SourceOne Products Compatibility Guide EMC SourceOne Management Release Notes EMC SourceOne Management Version 6.7 Installation Guide 7

8 Preface Conventions used in this document EMC uses the following conventions for special notices. Note: A note presents information that is important, but not hazard-related.! CAUTION A caution contains information essential to avoid data loss or damage to the system or equipment.! IMPORTANT An important notice contains information essential to operation of the software. WARNING A warning contains information essential to avoid a hazard that can cause severe personal injury, death, or substantial property damage if you ignore the warning. DANGER A danger notice contains information essential to avoid a hazard that will cause severe personal injury, death, or substantial property damage if you ignore the message. Typographical conventions EMC uses the following type style conventions in this document: Normal Used in running (nonprocedural) text for: Names of interface elements (such as names of windows, dialog boxes, buttons, fields, and menus) Names of resources, attributes, pools, Boolean expressions, buttons, DQL statements, keywords, clauses, environment variables, filenames, functions, utilities URLs, pathnames, filenames, directory names, computer names, links, groups, service keys, file systems, notifications Bold: Used in running (nonprocedural) text for: Names of commands, daemons, options, programs, processes, services, applications, utilities, kernels, notifications, system call, man pages 8 EMC SourceOne Management Version 6.7 Installation Guide

9 Preface Used in procedures for: Names of interface elements (such as names of windows, dialog boxes, buttons, fields, and menus) What user specifically selects, clicks, presses, or types Italic: Used in all text (including procedures) for: Full titles of publications referenced in text Emphasis (for example a new term) Variables Courier: Used for: System output, such as an error message or script URLs, complete paths, filenames, prompts, and syntax when shown outside of running text Courier bold: Used for: Specific user input (such as commands) Courier italic: Used in procedures for: Variables on command line User input variables < > Angle brackets enclose parameter or variable values supplied by the user [ ] Square brackets enclose optional values Vertical bar indicates alternate selections - the bar means or { } Braces indicate content that you must specify (that is, x or y or z)... Ellipses indicate nonessential information omitted from the example Where to get help EMC support, product, and licensing information can be obtained as follows. Product information For documentation, release notes, software updates, or for information about EMC products, licensing, and service, go to the EMC Powerlink website (registration required) at: Technical support For technical support, go to EMC Customer Service on Powerlink. To open a service request through Powerlink, you must have a valid support agreement. Please contact your EMC sales representative for details about obtaining a valid support agreement or to answer any questions about your account. EMC SourceOne Management Version 6.7 Installation Guide 9

10 Preface Guide to using this document This document supports online reading using Adobe Reader version 7.0 or above. For optimal performance, you should download and install the latest free Adobe Reader version: ( Simplifying navigation This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above): 1. On the Acrobat toolbar, right-click the Page Up or Page Down icon. Page Up Page Down 2. Click Show All Tools. The Previous View and Next View navigation buttons are displayed on your toolbar. Previous View Next View The Previous View and Next View navigation buttons function similar to your Web browser navigation buttons, enabling you to navigate between views using document hyperlinks. More information For more information about Adobe Reader navigation and other features, refer to the product help system. Your comments Comments and suggestions about our product documentation are always welcome. To provide feedback: 1. Go to: 2. Click the Feedback link. 10 EMC SourceOne Management Version 6.7 Installation Guide

11 1 Introduction EMC SourceOne is a comprehensive, policy-based system that automatically collects, organizes, indexes and retains , Microsoft SharePoint, and file system content and stores it in designated archives connected to shared storage. This chapter is organized as follows: Product overview System architecture System components Introduction 11

12 Introduction Product overview EMC SourceOne products comprise an enterprise solution which you can use to reduce the space required for your , file and Microsoft SharePoint servers and to aid in complying with legal requirements for archiving content. EMC SourceOne products archive, retain and organize content from Microsoft Exchange, IBM Lotus Domino, SMTP mail servers, Microsoft SharePoint and network file servers. Archived content is stored in the EMC SourceOne Native Archive, and can be searched by administrators and end users with appropriate permissions. EMC SourceOne Management EMC SourceOne Management is the base application, or platform, required for other EMC SourceOne products including: EMC SourceOne for Microsoft SharePoint EMC SourceOne for File Systems EMC SourceOne Discovery Manager EMC SourceOne Offline Access EMC SourceOne Supervisor Provides core architecture management features The Management product provides the core architecture to support other SourceOne products. This architecture includes the components to support the core processing services, databases, archives, storage and applications needed for both the Management product and other SourceOne products. Management supports the archiving of messaging content to enable companies to meet storage management, compliance, and legal discovery requirements, enabling companies to: Reduce the storage load on messaging servers while still providing users with seamless, efficient access to messages stored on lower-cost storage. Retain messages for a specified period of time to meet mandated requirements such as the U.S. Securities and Exchange Commission (SEC) 17a-4 regulations, or to meet company-defined compliance requirements. 12 EMC SourceOne Management Version 6.7 Installation Guide

13 Introduction Preserve messages that may be required for litigation to satisfy legal discovery requirements. Provide advanced search capabilities designed for the discovery and management of messages for the purposes of complying with regulations and policies. Enable role-based searches of messaging archives to support administrative and end-user requirements. For information about using the Management product, refer to the EMC SourceOne Management Administration Guide. Archiving messages Management performs the following types of archiving: Journaling (archiving messages in real time) Historical archiving User-directed archiving Real-time archiving Management performs real-time archiving (also referred to as journaling) of messages from the following data sources: Microsoft Exchange mail servers IBM Lotus Domino mail servers Drop directories into which SMTP mail is placed Historical archiving Management performs historical archiving of messages from the following data sources: Microsoft Exchange mailboxes and PST files Lotus Domino mailboxes and NSF files User-directed Archiving Management enables a mail user or mail application to direct messages to a specific folder in EMC SourceOne Management for archiving. Product overview 13

14 Introduction Searching messages EMC SourceOne Management enables the following types of searches using a Web-based search application: Administrator searches - Administrators can perform search and restore operations on archived messages for other users in the company. End user searches - End users can perform searches for archived messages with which they are associated. Related products This section provides a brief description of additional EMC SourceOne products. Specific information about how each product integrates with EMC SourceOne Management is provided in the documentation set which accompanies each product. EMC SourceOne for Microsoft SharePoint EMC SourceOne for Microsoft SharePoint is an add-on product to EMC SourceOne Management that addresses long-term or specialized content archiving strategies. The product leverages the EMC SourceOne Management architecture to provide access to archived content using search user interfaces. EMC SourceOne for Microsoft SharePoint requires that the EMC SourceOne Management software be installed, regardless of whether you are using the management features. Archiving EMC SourceOne for Microsoft SharePoint supports the policy-based archiving of SharePoint content in the EMC SourceOne archive to provide efficient storage of SharePoint content. Search EMC SourceOne for Microsoft SharePoint provides the following options for searching for archived SharePoint content: End users can search for archived content using an Archive Search site integrated into SharePoint. Administrative users can use the EMC SourceOne Search application to search for archived SharePoint content. 14 EMC SourceOne Management Version 6.7 Installation Guide

15 Introduction BLOB Storage EMC SourceOne for Microsoft SharePoint provides the ability to offload the storing of binary large objects (BLOBs) from SharePoint SQL Server to external storage. More information For more information on installing, configuring and using EMC SourceOne for Microsoft SharePoint, refer to the EMC SourceOne for Microsoft SharePoint documentation set. EMC SourceOne for File Systems EMC SourceOne for File Systems is an add-on component to EMC SourceOne Management that enables your organization to gain control over unmanaged information residing on file share systems. By archiving content from file servers across the organization, administrators and end users can leverage content indexing and search capabilities provided by EMC SourceOne to support information governance, compliance discovery and data protection. EMC SourceOne for File Systems requires the EMC SourceOne Management software be installed, regardless of whether you are using the management features. For more information on installing, configuring and using EMC SourceOne for File Systems, refer to the EMC SourceOne for File Systems documentation set. EMC SourceOne Discovery Manager EMC SourceOne Discovery Manager is an add-on component to EMC SourceOne Management that offers advanced search capabilities designed for the discovery and collection of archived content for the purposes of litigation support and compliance with organizational or industry-driven regulations and policies. For more information on installing, configuring and using EMC SourceOne Discovery Manager, refer to the EMC SourceOne Discovery Manager documentation set. Product overview 15

16 Introduction EMC SourceOne Offline Access EMC SourceOne Management can remove messages and attachments from the mail server and replace them with space-efficient stubs (shortcuts) which point to copies of the messages stored in the archive. EMC SourceOne Offline Access supports: Resolution of shortcut messages using Microsoft Outlook. The creation and maintenance of a local cache of messages and attachments which the Outlook user can access offline. For more information on installing, configuring and using EMC SourceOne Offline Access, refer to the EMC SourceOne Offline Access documentation set. EMC SourceOne Supervisor EMC SourceOne Supervisor is an add-on component to EMC SourceOne Management that offers additional advanced surveillance capabilities designed specifically for compliance with regulations and policies, including message sampling, customizable automated procedures, intelligent cross-mailbox searching, and purging. For more information on installing, configuring and using EMC SourceOne Supervisor, refer to the EMC SourceOne Supervisor documentation set. EMC SourceOne ediscovery - Kazeon EMC SourceOne ediscovery - Kazeon is an EMC product that enables organizations to efficiently and cost effectively classify, manage, and retrieve data. For more information on installing, configuring and using EMC SourceOne ediscovery - Kazeon, refer to the EMC SourceOne for ediscovery - Kazeon documentation set. 16 EMC SourceOne Management Version 6.7 Installation Guide

17 Introduction System architecture Figure 1 depicts a sample EMC SourceOne system architecture. Figure 1 EMC SourceOne architecture System architecture 17

18 Introduction System components The following sections describe the components of the system architecture provided by EMC SourceOne Management and depicted in Figure 1: Processing services on page 18 Databases on page 19 Archives on page 19 Storage on page 20 Applications on page 21 Processing services Master Services software Worker Services software Web Services software The EMC SourceOne processing services include Master Services software, Worker Services software, Web Services software, Mobile Services software, and a database server hosting the EMC SourceOne databases. The EMC SourceOne processing services architecture is scalable, supporting the installation of all components on a single host computer or allowing you to distribute them across multiple host computers depending on the requirements of your environment. Master Services software schedules and distributes jobs that are processed by Worker Services software installed on the same computer or on multiple computers, depending on the size and processing requirements of the environment. Worker Services software performs archiving activities from various data sources. Worker Services software can be installed on the same computer on which the Master Services software is installed, or you can install Worker Services software on additional computers as needed. Each Worker Services computer can be configured to process only specific activities. Worker Services computers assume control of jobs based on the type of tasks the Worker Services computer is configured to process. Web Services software processes search requests from administrators and end users and performs shortcut resolution for Management users. The Web Services software is installed on one or more computers on which Worker Services software is installed. 18 EMC SourceOne Management Version 6.7 Installation Guide

19 Introduction Mobile Services software Mobile Services software works in conjunction with Web Services software to support the resolution of shortcuts for Management and File System users accessing them using a URL. This includes: Mobile users Outlook Web Access users Outlook users who do not have the EMC SourceOne Offline Access installed. For EMC SourceOne for File Systems users, the Universal URL also provides support for resolution of links to files in the Native Archive which were archived from a file server. Installing Mobile Services software creates an IIS Web site (ExShortcut). Databases The following core Microsoft SQL Server databases are installed with EMC SourceOne Management: Activity database The activity database maintains data associated with EMC SourceOne system processing. Native Archive database The archive database manages data associated with the EMC SourceOne Native Archive, a role-based architecture that manages the archiving, indexing, searching, and retrieving of content. Search database The search database maintains data associated with the EMC SourceOne Search application. Note: Additional databases may be required for other EMC SourceOne products. Refer to the product s documentation for details. Archives EMC SourceOne supports the following types of archives: EMC SourceOne Native Archive Xtender 4.8 SP1 archive (read-only) Each archive can be connected to one or more storage environments, as described in Storage on page 20. System components 19

20 Introduction EMC SourceOne Native Archive software Xtender 4.8 SP1 archive The Native Archive software uses an architecture which can be configured to perform the following roles: Archive Index Search Retrieve The Native Archive software can be installed on a single host computer or multiple host computers, enabling you to dedicate hardware to specific roles (archive, index, search, and retrieve) to match your organization s archiving policies. For example, in small-to-medium business environments, the Native Archive software can perform all roles using one physical host computer. In enterprise environments, the Native Archive software can be installed and configured on multiple physical host computers that act as a single virtual computer. You can configure read-only access from EMC SourceOne Management to support searches and shortcut resolution for messages archived by Xtender 4.8 SP1. Storage A storage environment is required to house the large amount of data archived by EMC SourceOne as well as databases, program disk data, and other configuration data. SAN storage can consist of a Storage Area Network (SAN) or Network Attached Storage (NAS), or a combination of both depending on the size and throughput requirements of the specific environment. For details on the available storage options, refer to the EMC SourceOne Management Administration Guide. Connectivity to the storage devices can be provided using current device connectivity methods such as Fibre Channel, or iscsi over Ethernet, depending on the type of storage environment being used. This document describes the requirements and procedures for configuring a base reference configuration consisting of several servers, databases, and software applications. The implementation of an appropriate storage environment to support the configuration is beyond the scope of this document. EMC Professional Services is expected to leverage information and best practices on configuring a storage environment to support the requirements for EMC SourceOne by using the EMC documentation set for applicable products, and other available information, resources, and expertise. 20 EMC SourceOne Management Version 6.7 Installation Guide

21 Introduction Applications EMC SourceOne common applications EMC SourceOne applications provide administrators with the ability to manage the EMC SourceOne system and search the archives. End user applications allow users to search for and retrieve archived content. This section includes: EMC SourceOne common applications Related applications This section describes the common applications which are packaged with the EMC SourceOne Management product. These common applications are used with: EMC SourceOne Management EMC SourceOne for Microsoft SharePoint EMC SourceOne for File Systems EMC SourceOne Console The EMC SourceOne Console is a Microsoft Management Console snap-in that can be run from an administrator s desktop or other system that meets the system requirements. Administrators can use the EMC SourceOne Console to configure and manage: Archives, archive folders, and mapped folders Organizational policies Activities Filtering rules Job processing Applications and Web services For more information about EMC SourceOne Console features and capabilities, refer to the administration guide for your product. In addition, the EMC SourceOne Console includes a single online help system which supports all applicable SourceOne products. EMC SourceOne Search The EMC SourceOne Search application is typically installed on a Web server and securely communicates with Web Services software installed on one or more Worker Services computers behind the firewall. You can alternatively install the Search application on a Worker Services computer. System components 21

22 Introduction EMC SourceOne Search supports administrative searches for archived , SharePoint, and file system content in the same user interface. This section describes applications specifically used with EMC SourceOne Management. Related applications Related products on page 14 provides a brief description of related EMC SourceOne products. Refer to the documentation set which accompanies your product for details about the specific applications used with each product. 22 EMC SourceOne Management Version 6.7 Installation Guide

23 2 Planning the Installation EMC SourceOne products comprise a comprehensive system that integrates with your company s technology infrastructure and requires careful planning as part of the deployment process. Planning services are offered by EMC Professional Services to assist organizations in deploying the solution. EMC s deployment services include, but are not limited to, organizational planning, configuration design, environment sizing, and ensuring that the necessary hardware and software is in place and configured to support the environment. This chapter is organized as follows: Pre-deployment planning Reference configurations Planning the Installation 23

24 Planning the Installation Pre-deployment planning This section describes the planning activities that take place when deploying EMC SourceOne products within the context of an EMC Professional Services engagement. In cases where Professional Services is not used, similar planning activities are required. Customer engagement When EMC Professional Services is engaged to plan and deploy one or more EMC SourceOne products, the engagement is driven using a detailed customer engagement model. Resources from various EMC organizations including Professional Services work with your organization s internal IT organizations to plan and execute the deployment. The timeline for customer engagement spans pre-sale activities, deployment planning, deployment and production. Activities which take place prior to deployment include the following: Solution requirements definition This activity typically takes place during the pre-sale phase. The activity involves gathering customer requirements, and determining initial license counts, service deliverables and deployment timeline. Business requirements definition This activity involves collecting and analyzing customer business requirements, metrics and processes. Solution design This activity involves translating business requirements into technical requirements, including license counts, hardware and storage requirements and services estimate. Roles and resources Before installing EMC SourceOne products, EMC Professional Services works with your organization to define archiving and computer use policies which protect business interests. This policy should define the rights and obligations of employees regarding the use of company systems. It should also clearly define restrictions. Once this policy is defined, it should be clearly communicated to all employees in the organization. Your organization should conduct employee training and awareness sessions to ensure that employees understand each policy and its purpose. The personnel that can be involved in an installation of EMC SourceOne products include: 24 EMC SourceOne Management Version 6.7 Installation Guide

25 Planning the Installation EMC Professional Services and authorized partners Trained to scope, install and configure EMC SourceOne components. Compliance officer Defines and enforces company-wide compliance policies. Involved prior to, during, and post installation as a consulting entity to enable administrators to configure the system to support compliance policies. administrator Implements appropriate policies related to the organization s messaging environment. Network administrator Ensures the deployment team has the appropriate network environment configured to support the EMC SourceOne system. Database administrator Ensure the deployment team has the appropriate database environment to support the EMC SourceOne system. Storage administrator Ensure the deployment team has the appropriate storage environment and resources to support the EMC SourceOne system. Backup administrator Ensure the deployment team understands the requirements to backup the EMC SourceOne system. Analysis and design The analysis and design effort includes the following environmental elements: Data infrastructure Network and storage environment Hardware and software requirements Impact of implementation to infrastructure Software configuration parameters Hardware and storage sizing Once these factors are understood, the Professional Services team can create a project plan which defines the solution and a plan for enterprise rollout. Pre-deployment planning 25

26 Planning the Installation Reference configurations A reference configuration provides a basic deployment template designed to support high availability and can be scaled as the organization s requirements grow and change. Information resources Your account team can provide configuration options and details based on the size and scope of your EMC SourceOne deployment. In addition, several customer-facing white papers are available on EMC Powerlink ( and can be found by navigating to the following locations: Support > Technical Documentation and Advisories > Software ~ S ~ Documentation > SourceOne Family > White Papers Products > Software S-Z > SourceOne Family > Related Solutions Blueprints EMC Professional Services can provide assistance in sizing your environment, recommending a configuration and deploying the configuration. EMC SourceOne blueprints are available to assist with this process. EMC SourceOne reference configurations This section describes two typical reference configurations: one used by a small-to-medium business customer, and one used by an enterprise customer. This information is intended only to provide examples of typical configurations. EMC SourceOne reference configurations can vary greatly depending on the size of your environment and specific product features. This can include considerations for EMC SourceOne Management, EMC SourceOne for Microsoft SharePoint, EMC SourceOne for File Systems, and other products as described in Applications on page 21. The examples depicted in this section include EMC SourceOne Management, EMC SourceOne for Microsoft SharePoint, and EMC SourceOne for File Systems. 26 EMC SourceOne Management Version 6.7 Installation Guide

27 Planning the Installation Small-to-medium business reference configuration This configuration (Figure 2) can support your site using an architecture that distributes processing and archiving functionality across a minimal number of physical computers and storage. Enterprise reference configuration This configuration (Figure 4) can support large sites using an architecture which distributes processing and archiving functions across hardware and storage. Reference configurations 27

28 Planning the Installation Small-to-medium business reference configuration Figure 2 EMC SourceOne SMB reference configuration 28 EMC SourceOne Management Version 6.7 Installation Guide

29 Planning the Installation Basic configuration Native Archive disk configuration and storage EMC SourceOne supports the installation of the following software on a single computer: Master Services software Worker Services software Web Services software Native Archive Services software Console application (can be installed on this computer and/or one or more client computers) EMC SourceOne for Microsoft SharePoint Business Components Extensions EMC SourceOne for File Systems Business Component Extensions Search application (can alternatively be installed on a Web server) Mobile Services software DiskXtender (if used) Figure 3 depicts a disk configuration and storage example for the EMC SourceOne Native Archive. Figure 3 Native Archive SMB disk/storage configuration example Sizing details The configuration described in this section is an example. The EMC SourceOne Sizing Calculator and other EMC resources can provide details on storage capacity, server configuration, and disk layout recommendations based on an analysis of your requirements. Contact your EMC representative for details. Reference configurations 29

30 Planning the Installation Disk configuration In this example, the drives are configured as follows: C: - Operating system E: - Program files and trace log files F: - Work directories for temporary processing: EMC SourceOne Work directory Temporary area required for EMC SourceOne processing (excluding indexing) Created during Master software installation (subsequent Worker and Native Archive software installations confirm that this directory exists) Requires a minimum of 1 GB of free space EMC SourceOne Index Work directory Temporary area required for Native Archive computers performing the index role Created during Native Archive software installation Requires a minimum of 20 GB of free space Must be located on a local drive Cannot be located on the operating system drive Storage In this example, shares on configured on a separate file server as follows: Message Center folder configured as a share and sized using the EMC SourceOne Sizing Calculator Index folder configured as a share and sized using the EMC SourceOne Sizing Calculator Container folder configured as a share and sized using the EMC SourceOne Sizing Calculator. Direct storage is also supported on EMC Centera, EMC Celerra, EMC Data Domain and NetApp Note: Specific permissions for each share are configured as described in Assigning permissions on page EMC SourceOne Management Version 6.7 Installation Guide

31 Planning the Installation Enterprise reference configuration Figure 4 EMC SourceOne enterprise reference configuration Reference configurations 31

32 Planning the Installation Basic configuration EMC SourceOne software can be distributed across several computers. For example, you can configure separate computers as follows: Dedicated SQL Server database host computer Master Services software installed on two computers which are clustered using Microsoft Clustering Two or more Worker Services computers with the following software installed: Worker Services Web Services (on at least one Worker Services computer) Mobile Services EMC SourceOne for Microsoft SharePoint Business Component Extensions EMC SourceOne for File Systems Business Component Extensions One or more computers (Master Services computer or a client computer) with the following software installed: EMC SourceOne Console application EMC SourceOne for Microsoft SharePoint Business Component Extensions EMC SourceOne for File Systems Business Component Extensions The EMC SourceOne Search application: Installed on one or more Worker Services computers and configured to communicate with Web Services. Installed on an IIS Web server and configured to communicate with Web Services on one or more Worker Services computers. One or more computers with Native Archive Services software installed. Disk configuration and storage configured as described in Native Archive disk configuration and storage on page EMC SourceOne Management Version 6.7 Installation Guide

33 Planning the Installation Native Archive disk configuration and storage Figure 5 depicts a disk configuration and storage example for the EMC SourceOne Native Archive. Figure 5 Native Archive enterprise disk/storage configuration example Sizing details The configuration described in this section is an example. The EMC SourceOne Sizing Calculator and other EMC resources can provide details on storage capacity, server configuration, and disk layout recommendations based on an analysis of your requirements. Contact your EMC representative for details. Disk configuration In this example, each Native Archive computer has the following disk configuration: C: - Operating system E: - Program files and trace log files F: - Work directories for temporary processing: EMC SourceOne Work directory Temporary area required for EMC SourceOne processing (excluding indexing) Created during Native Archive software installation Requires a minimum of 1 GB of free space Reference configurations 33

34 Planning the Installation EMC SourceOne Index Work directory Temporary area required for Native Archive computers performing the index role Created during Native Archive software installation Requires a minimum of 20 GB of free space Must be located on a local drive Cannot be located on the operating system drive Storage configuration In this example, the two Native Archive computers can share the following storage configuration: Message Center stored on a separate file share, SAN or NAS device Indexes stored on a separate file share, SAN or NAS device Containers stored on a separate file share, SAN or NAS device. Direct storage is also supported on EMC Centera, EMC Celerra, EMC Data Domain and NetApp Note: Specific permissions for each share are configured as described in Assigning permissions on page 43. Sizing and scalability Understanding specific information about the environment into which EMC SourceOne is deployed is key to determining the hardware, software and storage resources required. Although EMC SourceOne reference configurations provide base guidelines for these required resources, certain aspects can be adjusted to meet the specific needs of the environment. EMC utilizes various tools to gather key information by working with the customer prior to a deployment in order to scope the environment. These tools include the EMC SourceOne Sizing Calculator. The resulting information is then applied to the framework of the reference configuration where components of the reference configuration can be scaled or extended. For example, when sizing an Management environment, some of the factors examined include: Total number of users Number of messages per day 34 EMC SourceOne Management Version 6.7 Installation Guide

35 Planning the Installation Percentage of messages with attachments Average size of attachments Average size without attachments Average number of recipients per message Message de-duplication percentage Annual usage growth Typical business processing requirements The information provided by the EMC SourceOne Sizing Calculator includes: Archive storage capacity Additional storage considerations Server and processing requirements Standard server configurations (disk layout, spindle speeds and other information) For more information about the EMC SourceOne Sizing Calculator, contact your EMC account team. Performance metrics Professional Services utilizes information resulting from performance testing to establish a performance baseline for the base reference configuration. EMC SourceOne components can then be adjusted to achieve an expected level of performance. High-availability As an enterprise-class solution, EMC SourceOne components must be configured to support high availability and minimize system downtime. High availability is a combination of data protection, failover, and appropriate planning to eliminate both planned and unplanned downtime. EMC SourceOne is designed to support high availability by forming an infrastructure which includes hardware and software redundancy for all system components. In addition, it is important for the organization to have policies and procedures in place to support business continuity objectives. These objectives are defined and documented as part of the engagement between EMC and key personnel representing the organization. Reference configurations 35

36 Planning the Installation Backup and restore Information and procedures for performing backups of the EMC SourceOne system is described in the EMC SourceOne Management Administration Guide. For backup and restore information for other EMC SourceOne products, refer to the documentation set that accompanies each product. Disaster recovery The EMC SourceOne Disaster Recovery Solution Guide provides configuration, failover and failback information for supported EMC SourceOne configurations. 36 EMC SourceOne Management Version 6.7 Installation Guide

37 3 Pre-installation This chapter provides details on implementing the accounts, permissions and system requirements required before installing EMC SourceOne software. Important considerations are also provided. This chapter is organized as follows: Pre-installation checklist overview Creating accounts in Active Directory Assigning permissions Establishing system requirements Note: This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above). For details, see Guide to using this document on page 10. Pre-installation 37

38 Pre-installation Pre-installation checklist overview The following pre-installation checklists are provided in this chapter. Specific permissions, system requirements and considerations for all products (common) and EMC SourceOne Management are provided as subsections. As you complete the tasks in each checklist, you can indicate it using the checklist provided in Table 1. Table 1 Checklist overview Done Checklist Creating accounts in Active Directory on page 39 Assigning permissions on page 43 Common permissions assignment on page 44 Management permissions assignment on page 48 Establishing system requirements on page 54 Common computer requirements on page 55 Management computer requirements on page 65 Important Considerations on page 69 Common considerations (all products) on page 70 Management considerations on page 79! IMPORTANT Before you begin implementing the accounts, permissions, and system requirements, review Important Considerations on page 69 for information that may be relevant to your environment. 38 EMC SourceOne Management Version 6.7 Installation Guide

39 Pre-installation Creating accounts in Active Directory This section provides a checklist for the tasks required to configure groups and accounts in Active Directory. Figure 6 Active Directory groups and accounts Creating accounts in Active Directory 39

40 Pre-installation Table 2 Accounts and permissions checklist - Active Directory Done Task Details Validation Create the primary service account All environments The EMC SourceOne primary service account is required in all environments to process EMC SourceOne activities. Details: Password does not need to be changed at next login Account does not expire Password does not expire. See Service account passwords on page 77 for considerations. Must be in the same domain as the SourceOne servers Ensure account successfully created. Account name: Management environments only In Exchange environments, you can optionally create an Exchange mailbox for the primary service account. If your site disallows creating a mailbox for a service account, see Service account mailbox restrictions and workaround on page 79. Create Master Services service account (optional) All environments The optional EMC SourceOne Master Services service account is specified during Master Services installation. You can alternatively use the primary service account. See Additional service accounts to support least privileges on page 77 for considerations. Details: Password does not need to be changed at next login Account does not expire Password does not expire. See Service account passwords on page 77 for considerations. Must be in the same domain as the SourceOne servers Ensure account successfully created. Account name: 40 EMC SourceOne Management Version 6.7 Installation Guide

41 Pre-installation Table 2 Accounts and permissions checklist - Active Directory (continued) Done Task Details Validation Identify or create OWA service account (optional) Management environments only The EMC SourceOne OWA service account is specified during Extensions for OWA installation on Exchange. You can alternatively use the primary service account. See Additional service accounts to support least privileges on page 77 for considerations. Details: Password does not need to be changed at next login Account does not expire. Password does not expire. See Service account passwords on page 77 for considerations. Must be in the same domain as the SourceOne servers Ensure account successfully created. Account name: Create security group All environments Create the EMC SourceOne security group. This group houses the service accounts used with EMC SourceOne. Details: Created in a domain that is fully trusted by the domains EMC SourceOne applications are running Group scope is Universal (or Global if Universal is not available in the environment) Group type is Security Group name does not contain special characters Ensure group successfully created. Group name: Add service accounts to security group All environments Add the following accounts: EMC SourceOne primary service account EMC SourceOne Master Services service account (if used) EMC SourceOne OWA service account (if used) Ensure accounts successfully added. Creating accounts in Active Directory 41

42 Pre-installation Table 2 Accounts and permissions checklist - Active Directory (continued) Done Task Details Validation Create Admins group All environments Create the EMC SourceOne Admins group. This group houses the accounts for designated administrators who will use the EMC SourceOne Console application. Details: Created in a domain that is fully trusted by the domains EMC SourceOne applications are running Group scope is Universal (or Global if Universal is not available in the environment) Group type is Security Optionally create an Exchange address Ensure group successfully created. Group name: Identify or create administrative accounts All environments Identify or create one or more administrative user accounts used to run the EMC SourceOne Console. Ensure account exists or is successfully created. Account name(s): Add administrative accounts to Admins Group All environments Add administrative accounts to the EMC SourceOne Admins Group. Ensure accounts successfully added. Identify or create installation account All environments Identify or create one or more installation user accounts used to install EMC SourceOne software. Ensure accounts successfully added. Account name(s): 42 EMC SourceOne Management Version 6.7 Installation Guide

43 Pre-installation Assigning permissions This section provides a checklist for the tasks required to assign permissions to SQL Server, computers, share locations, and data source environments, and is organized as follows: Common permissions assignment Management permissions assignment Assigning permissions 43

44 Pre-installation Common permissions assignment Task overview 44 EMC SourceOne Management Version 6.7 Installation Guide

45 Pre-installation Task checklist This checklist describes how to assign permissions common to all EMC SourceOne environments. Table 3 Accounts and permissions - permissions assignment Done Environment /System Task Details Validation SQL Server Configure SQL database install permissions and Security Logins Ensure that the installation account is a local administrator and has the SQL sysadmin role. Note: For important details about database installation permissions, see SQL database installation permissions on page 74. After EMC SourceOne is installed, use the ODBC Test Connection function to confirm the connection. Configure the following groups and accounts as Security Logins in SQL Server: EMC SourceOne security group EMC SourceOne Admins group EMC SourceOne installation account(s) You will later assign individual database privileges to these logins after EMC SourceOne databases are installed. Master computer(s) Add service account to local administrators group Add one of the following service accounts as a member of the local administrators group for this computer: Primary service account, or Master Services service account (if used) This account is required to be a member of this group to run the EMC SourceOne Job Scheduler service. Ensure account(s) added Master computer(s) Add installation account to local administrators group Add the EMC SourceOne installation account as a member of the local administrators group for this computer. You can remove this user from the group once installation is completed. Ensure you can log in using this account Note: Alternatively you can use an existing account that is a member of the local administrators group to install the software. Assigning permissions 45

46 Pre-installation Table 3 Accounts and permissions - permissions assignment (continued) Done Environment /System Task Details Validation Worker computer(s) Add installation account to local administrators group Add the EMC SourceOne installation account as a member of the local administrators group for this computer. You can remove this user from the group once installation is completed. Ensure you can log in using this account Note: Alternatively you can use an existing account that is a member of the local administrators group to install the software. Native Archive computer(s) Add installation account to local administrators group Add the EMC SourceOne installation account as a member of the local administrators group for this computer. You can remove this user from the group once installation is completed. Ensure you can log in using this account Note: Alternatively you can use an existing account that is a member of the local administrators group to install the software. Console client computers Add installation account to local administrators group Add the EMC SourceOne installation account as a member of the local administrators group for this computer. You can remove this user from the group once installation is completed. Ensure you can log in using this account Note: Alternatively you can use an existing account that is a member of the local administrators group to install the software. 46 EMC SourceOne Management Version 6.7 Installation Guide

47 Pre-installation Table 3 Accounts and permissions - permissions assignment (continued) Done Environment /System Task Details Validation Storage Configure storage location permissions Configure EMC SourceOne Security Group with permissions for the following storage locations: Message Center location Archive location Index location Job detail log file location Configure the following permissions for each location: Sharing tab - Configure the security group with Full Control permissions to the share Security tab - Configure the security group with Full Control permissions to the share 1. Log in to a system as the primary service account. 2. Access the share and create a text file. 3. Delete the text file. DiskXtender Add security group to DX administrators group Xtender Provide access to Xtender database If using DiskXtender, add the EMC SourceOne Security Group to the DxAdministrators group on the DiskXtender server. To use an EMC SourceOne archive connection to an Xtender 4.x read-only archive, the EMC SourceOne service account must have db_datareader access to the Xtender database. This access is created using Microsoft SQL Server Management Studio. Ensure the group is added Ensure the service account can access the database Assigning permissions 47

48 Pre-installation Management permissions assignment This section provides a task overview and checklists for the tasks required to assign permissions specific to your environment. This section includes: Task overview General permissions Microsoft Exchange permissions IBM Lotus Domino permissions EMC SourceOne Management Version 6.7 Installation Guide

49 Pre-installation Task overview Assigning permissions 49

50 Pre-installation General permissions Table 4 This section describes general permissions associated with EMC SourceOne Management. Accounts and permissions - permissions assignment Done Environment /System Task Details Validation MIME drop directories NSF drop directories PST drop directories Configure drop directory permissions for MIME management Configure drop directory permissions for NSF management Configure drop directory permissions for PST management For drop directories into which you place MIME messages to be archived by EMC SourceOne: Sharing tab - Configure the security group with Full Control permissions to the share Security tab - Configure the security group with Full Control permissions to the share For drop directories into which you place NSF files to be archived by EMC SourceOne: Sharing tab - Configure the security group with Full Control permissions to the share Security tab - Configure the security group with Full Control permissions to the share For drop directories into which you place PST files to be archived by EMC SourceOne in a single Exchange forest configuration: Sharing tab - Configure the security group with Full Control permissions to the share Security tab - Configure the security group with Full Control permissions to the share Note: See the EMC SourceOne Management Administration Guide for considerations in a Exchange resource forest configuration. 1. Log in to a system as the primary service account. 2. Access the share and create a text file. 3. Delete the text file. 1. Log in to a system as the primary service account. 2. Access the share and create a text file. 3. Delete the text file. 1. Log in to a system as the EMC SourceOne primary service account. 2. Access the share and create a text file. 3. Delete the text file. Network computers Configure PST discovery permissions To support PST discovery and management on network computers in a single Exchange forest configuration, add the EMC SourceOne security group as member of local Administrators group for these computers. Note: See the EMC SourceOne Management Administration Guide for considerations in a Exchange resource forest configuration. Network computers: 1. Log in to a system as the EMC SourceOne primary service account. 2. Access a computer from My Network Places. 3. Access C$ drive. 50 EMC SourceOne Management Version 6.7 Installation Guide

51 Pre-installation Microsoft Exchange permissions This section provides a checklist for the tasks required to configure permissions in Microsoft Exchange. Table 5 Accounts and permissions - Microsoft Exchange Done Task Details Validation Create Exchange journaling mailboxes Create one or more Exchange journaling mailboxes. A journaling user account is associated with an Exchange journaling mailbox that collects messages generated on a mailbox store. Most configurations will consist of several journaling users and mailboxes. Note: Envelope journaling is required for EMC SourceOne. See Microsoft Exchange environment requirements on page 65 for details. A journaling user account is created in Active Directory and must have the following characteristics: Member of Domain Users group Password does not need to be changed at next login Password does not expire Account does not expire Ensure mailboxes created. Journaling users/mailboxes Configure general Exchange permissions Grant the EMC SourceOne primary service account and the EMC SourceOne Admins group the following permissions: - Exchange View-Only Administrator (at the Organization level) Note: If using Exchange 2010 in a mixed environment (which includes both Exchange 2010 and a previous Exchange version), you must explicitly configure these permissions in Exchange 2010, as they do not automatically propagate over from previous Exchange versions. 1. Start the EMC SourceOne Console. 2. Check that the administrator can view the mail server hierarchy from the EMC SourceOne Console. Assigning permissions 51

52 Pre-installation Table 5 Accounts and permissions - Microsoft Exchange (continued) Done Task Details Validation Configure permissions for journaling mailboxes Configure permissions for user mailboxes Grant the EMC SourceOne primary service account access rights to each journaling mailbox. Exchange 2010 Server Full mailbox access Exchange 2007 Server Full mailbox access Exchange 2003 Server Delete mailbox storage Read permissions Change permissions Full mailbox access To support storage management (which requires a higher level of permissions to access and manipulate mailbox contents), configure the following permissions (depending on Exchange version). Exchange 2010 Grant the EMC SourceOne primary service account the following extended permissions: Receive As Note: In a mixed environment (Exchange 2010 and a previous version of Exchange), grant these permissions at the mailbox database level, targeting only the mailboxes on Exchange You can then use the permissions described in the following section for mailboxes hosted on previous Exchange versions. Exchange 2003 or 2007 Grant the EMC SourceOne primary service account the following extended permissions: Receive As Send As Note: These permissions can be granted at the Organization level (highest) to the individual mailbox level (lowest). Test journaling mailbox access: 1. Open Outlook as the primary service account. 2. Open the journal mailbox Inbox folder. 3. Add and delete a message. Storage management: 1. Open Outlook as the primary service account. 2. Open a test user mailbox Inbox folder. 3. Add and delete a message. 52 EMC SourceOne Management Version 6.7 Installation Guide

53 Pre-installation Table 5 Accounts and permissions - Microsoft Exchange (continued) Done Task Details Validation Review Exchange 2010 considerations IBM Lotus Domino permissions Review the following considerations if using EMC SourceOne in an environment that includes Microsoft Exchange 2010: Exchange 2010 replaced the permissions model used in Exchange 2007 with a Role Based Access Control (RBAC) permissions model. Refer to the Microsoft Exchange 2010 documentation set for more information. Exchange 2010 takes two hours to update the permissions cache. Restart the Microsoft Exchange Information Store after applying permissions to activate the changes. None. This section provides a checklist for the tasks required to configure permissions in IBM Lotus Domino. Table 6 Accounts and permissions - IBM Lotus Domino Done Task Details Validation Create EMC SourceOne Lotus Notes account Configure Internet address and password for Lotus Notes users This account will later be specified on EMC SourceOne host computers to support message processing in a Domino environment. To support all EMC SourceOne activities, configure the account with: Manager privileges for all users mail files Delete access to all mailboxes To support all EMC SourceOne activities except archiving messages based on read or unread status, restoring messages from EMC SourceOne Search, and user-directed archiving: Editor privileges for all users mail files Delete access to all mailboxes Account name: Ensure Lotus Notes users have an Internet address and password configured. This is required for Notes users to use EMC SourceOne Search. 1. Open a user NSF file for test purposes as the EMC SourceOne Notes user. 2. Add data. 3. Delete the data. After EMC SourceOne is installed, confirm that a Notes user can log in to EMC SourceOne Search. Assigning permissions 53

54 Pre-installation Establishing system requirements This section provides minimum hardware, operating system, network connectivity, and prerequisite software requirements for components comprising a typical EMC SourceOne system configuration.! IMPORTANT Before you begin implementing the system requirements, review Important Considerations on page 69 for information that may be relevant to your environment. This section describes the system requirements for computers used with EMC SourceOne and is organized as follows: Common computer requirements Management computer requirements EMC SourceOne Management Version 6.7 Installation Guide

55 Pre-installation Common computer requirements This section describes system requirements for host computers common to all EMC SourceOne environments, including: Database host computer requirements Master Services host computer requirements Worker Services host computer requirements Native Archive Services host computer requirements Storage environment requirements IIS Web Server requirements EMC SourceOne Console client computer requirements Establishing system requirements 55

56 Pre-installation Database host computer requirements Table 7 describes the requirements for a dedicated Microsoft SQL Server database host computer. Table 7 Database host computer base requirements Hardware OS Disk configuration Network Software The EMC SourceOne Sizing Calculator provides recommendations based on your environment. Important guidelines for your database administrator are also provided in Important SQL Server considerations on page 71. Refer to the EMC SourceOne Products Compatibility Guide for detailed operating system requirements. The EMC SourceOne Sizing Calculator provides recommendations based on your environment. General guidelines for your database administrator are also provided in Important SQL Server considerations on page 71. High-speed connection to all components and systems in the configuration with sufficient bandwidth to process the expected workload. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. Microsoft SQL Server 2005 Enterprise Edition (recommended) or Standard Edition General guidelines for your database administrator are also provided in Important SQL Server considerations on page 71. Windows Server 2008 only - configure firewall rules If using Windows Server 2008, configure the SQL Server executable (Sqlservr.exe) as an exception to the blocked programs list. Refer to the following Microsoft article for details on configuring firewall rules using Windows Firewall with Advanced Security in Windows Server 2008: Important Considerations Ensure that you review the important information in Important SQL Server considerations on page 71. Topics include: Database installation permissions SQL Server disk configuration Database partitioning Database installation options Collation settings Disaster recovery configuration 56 EMC SourceOne Management Version 6.7 Installation Guide

57 Pre-installation Master Services host computer requirements Table 8 describes the requirements for the host computers on which Master Services software is installed. Table 8 Master Services host computer base requirements Hardware OS Disk configuration Network Software The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment. Refer to the EMC SourceOne Products Compatibility Guide for detailed operating system requirements. The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment High-speed connection to all components and systems in the configuration with sufficient bandwidth to process the expected workload. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. software (Exchange) No client software required software (Domino) Install Notes client Configure the Notes ID as the EMC SourceOne Notes user account Validate by ensuring the client can access the mail server Notes 8.5 Shared Login feature is not supported Do not update or change the version of Lotus Notes client software after EMC SourceOne components are installed. software (general) Mixed-mail environments (Exchange and Domino): Ensure Outlook is the default mail client SMTP mail environment: No client is required Validation: Validated by EMC SourceOne software installation that client version is supported Microsoft.NET Framework Redistributable Package Manually install Validated by EMC SourceOne software installation Microsoft Management Console 3.0 Manually install if planning to install EMC SourceOne Console on this computer Validated by EMC SourceOne Console software installation Establishing system requirements 57

58 Pre-installation Microsoft Visual C SP1 Redistributable Package (x86) Microsoft SQL Server Native Client Redistributable Package English, French, Italian, German and Spanish language systems - Automatically installed with EMC SourceOne software if not present Chinese, Japanese, and Korean language systems - Manually or silently install the redistributable package specific to the supported language. Automatically installed with EMC SourceOne software if not present 58 EMC SourceOne Management Version 6.7 Installation Guide

59 Pre-installation Worker Services host computer requirements Table 9 Table 9 describes the requirements for the host computers which may be running the following EMC SourceOne software: Worker Services Web Services Mobile Services EMC SourceOne Search EMC SourceOne for Microsoft SharePoint Business Components Extensions EMC SourceOne for File Systems Business Component Extensions EMC SourceOne Worker Services host computer base requirements Hardware OS Disk configuration Network Software The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment. Refer to the EMC SourceOne Products Compatibility Guide for detailed operating system requirements. The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment. High-speed connection to all components and systems in the configuration with sufficient bandwidth to process the expected workload. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. software (Exchange) Install Outlook 2007 (ensure Cached Exchange Mode is disabled) Log in using the service account and ensure the MAPI profile named EMCSourceOne is configured for the mailbox associated with the service account. Note: See Service account mailbox restrictions and workaround on page 79 for details on service account mailbox configuration. Validate by using Control Panel > Mail > Show Profiles to ensure profile name is EMCSourceOne Establishing system requirements 59

60 Pre-installation software (Domino) Install Notes client Configure the Notes ID as the EMC SourceOne Notes user account Validate by ensuring the client can access the mail server Notes 8.5 Shared Login feature is not supported Do not update or change the version of Lotus Notes client software after EMC SourceOne components are installed. software (general) Mixed-mail environments (Exchange and Domino): Ensure Outlook is the default mail client SMTP mail environment: No client is required Validation: Validated by EMC SourceOne software installation that client version is supported Microsoft.NET Framework Redistributable Package Manually install Validated by EMC SourceOne software installation Microsoft Internet Information Services (IIS) Manually install if installing Web Services on this computer Ensure.NET is installed prior to IIS Ensure ASP.NET option selected Validated by EMC SourceOne Web Services software installation Microsoft ASP.NET Manually install if installing Web Services on this computer Inherited authorization rules are set to Allow Validated by EMC SourceOne software installation Microsoft Visual C SP1 Redistributable Package (x86) Microsoft SQL Server Native Client Redistributable Package Microsoft ASP.NET AJAX Extensions Redistributable Package English, French, Italian, German and Spanish language systems - Automatically installed with EMC SourceOne software if not present Chinese, Japanese, and Korean language systems - Manually or silently install the redistributable package specific to the supported language. Automatically installed with EMC SourceOne software if not present Automatically installed with EMC SourceOne software if not present 60 EMC SourceOne Management Version 6.7 Installation Guide

61 Pre-installation Native Archive Services host computer requirements Table 10 describes the requirements for the host computers on which Native Archive Services software is installed. Table 10 Native Archive Services computer base requirements Hardware Operating system Disk configuration Network connectivity Software The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment. A supported version of Microsoft Windows 2003 Server. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on operating system requirements. Refer to the guidelines described in Reference configurations on page 26 for the recommended disk configuration and storage options. High-speed connection to all components and systems in the configuration with sufficient bandwidth to process the expected workload. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. client software Install Outlook See Indexing support for embedded Exchange messages on page 79 for considerations. Microsoft.NET Framework Redistributable Package Microsoft Visual C SP1 Redistributable Package (x86) Microsoft SQL Server Native Client Redistributable Package Internet Control Message Protocol (ICMP). Utilized by EMC SourceOne software to manage network connection issues. Operating system language support (for indexing) Manually install Validated by EMC SourceOne software installation English, French, Italian, German and Spanish language systems - Automatically installed with EMC SourceOne software if not present Chinese, Japanese, and Korean language systems - Manually or silently install the redistributable package specific to the supported language. Automatically installed with EMC SourceOne software if not present Ensure ICMP is enabled and functioning. For all languages for which you intend to index messages and files, install code page conversion tables For East Asian languages, install files for East Asian languages See Regional and language options to support indexing on page 78 for considerations. Establishing system requirements 61

62 Pre-installation Storage environment requirements A storage environment is required to house the large amount of data archived by EMC SourceOne as well as databases, logs, program disk data and other configuration data. SAN storage can consist of a Storage Area Network (SAN) or Network Attached Storage (NAS), or a combination of both depending on the size and throughput requirements of the specific environment. Connectivity to the storage devices can be provided using current device connectivity methods such as Fibre Channel, or iscsi over Ethernet, depending on the type of storage environment being used. This document describes the requirements and procedures for configuring a base reference configuration consisting of several servers, databases and software applications (see Reference configurations on page 26). The implementation of an appropriate storage environment to support the configuration is beyond the scope of this document. 62 EMC SourceOne Management Version 6.7 Installation Guide

63 Pre-installation IIS Web Server requirements You can install the following EMC SourceOne applications on a separate IIS Web server: EMC SourceOne Search software EMC SourceOne Mobile Services software. Ensure the Web server meets the following requirements. Table 11 IIS Web Server host computer base requirements OS Network Software Must meet the same operating system requirements as a Worker Services computer. Refer to the EMC SourceOne Products Compatibility Guide for detailed operating system requirements. High-speed connection to all components and systems in the configuration with sufficient bandwidth to process the expected workload. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. Microsoft.NET Framework Redistributable Package Manually install Validated by EMC SourceOne software installation Microsoft Internet Information Services (IIS) Manually install if installing Web Services on this computer Ensure.NET is installed prior to IIS Ensure ASP.NET option selected Validated by EMC SourceOne Web Services software installation Microsoft ASP.NET Manually install if installing Web Services on this computer Inherited authorization rules are set to Allow Validated by EMC SourceOne software installation Microsoft ASP.NET AJAX Extensions Redistributable Package Automatically installed with EMC SourceOne software if not present Establishing system requirements 63

64 Pre-installation EMC SourceOne Console client computer requirements Table 12 describes the requirements for client computers running the EMC SourceOne Console software. Table 12 EMC SourceOne Console client computer base requirements Hardware OS Network Software Standard desktop or laptop used in a corporate environment. Refer to the EMC SourceOne Products Compatibility Guide for detailed operating system requirements. Standard connection to the corporate network. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. software (Exchange) Ensure Microsoft Outlook installed software (Domino) Ensure IBM Lotus Notes installed If this computer is also an EMC SourceOne Master or Worker, the Notes 8.5 Shared Login feature is not supported Do not update or change the version of Lotus Notes client software after EMC SourceOne components are installed. software (general) SMTP mail environment: No client is required Validation: Supported client software versions validated if present Microsoft.NET Framework Redistributable Package Manually or silently install Validated by EMC SourceOne software installation Microsoft Management Console Manually or silently install Validated by EMC SourceOne software installation Microsoft Windows Installer Automatically installed with EMC SourceOne software if not present. Microsoft Visual C SP1 Redistributable Package (x86) Microsoft SQL Server Native Client Redistributable Package English, French, Italian, German and Spanish language systems - Automatically installed with EMC SourceOne software if not present Chinese, Japanese, and Korean language systems - Manually or silently install the redistributable package specific to the supported language. Automatically installed with EMC SourceOne software if not present 64 EMC SourceOne Management Version 6.7 Installation Guide

65 Pre-installation Management computer requirements This section describes system requirements for host computers in an EMC SourceOne Management environment, including: Microsoft Exchange environment requirements IBM Lotus Domino environment requirements ONM Viewer client computer requirements Mobile device requirements Microsoft Exchange environment requirements Table 13 describes the prerequisite software and configuration required on each Exchange Server on which you also plan to install the EMC SourceOne Extensions for Outlook Web Access software. Table 13 Microsoft Exchange Server software prerequisites Software Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. Microsoft.NET Framework Redistributable Package Manually install Validated by EMC SourceOne software installation Microsoft Visual C SP1 Redistributable Package (x86) English, French, Italian, German and Spanish language systems - Automatically installed with EMC SourceOne software if not present Chinese, Japanese, and Korean language systems - Manually or silently install the redistributable package specific to the supported language. Configuration Configuration specifics. Exchange 2010 envelope journaling For Exchange 2010, envelope journaling is not optional and is enabled by default. Exchange 2007 envelope journaling For Exchange 2007, envelope journaling is not optional and is enabled by default. Exchange 2003 envelope journaling For Exchange 2003, ensure that envelope journaling is enabled. This feature is required for EMC SourceOne. Establishing system requirements 65

66 Pre-installation IBM Lotus Domino environment requirements Table 14 Table 14 describes the prerequisite software required on each Domino server on which you also plan to install the EMC SourceOne Extensions for Domino software. IBM Lotus Domino server software prerequisites Software Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. Microsoft Visual C SP1 Redistributable Package (x86) (Red Hat Enterprise Linux only) Required compatibility GCC package. Refer to the EMC SourceOne Products Compatibility Guide for the specific version English, French, Italian, German and Spanish language systems - Automatically installed with EMC SourceOne software if not present Chinese, Japanese, and Korean language systems - Manually or silently install the redistributable package specific to the supported language. Manually install 66 EMC SourceOne Management Version 6.7 Installation Guide

67 Pre-installation ONM Viewer client computer requirements Table 15 describes the requirements for client computers running the EMC SourceOne ONM Viewer software. Table 15 EMC SourceOne ONM Viewer client computer base requirements Hardware OS Network Software Standard desktop or laptop used in a corporate environment. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on operating system requirements. Standard connection to the corporate network. Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on supported versions of the software described in this section. software (Domino) Ensure IBM Lotus Notes installed Validated by EMC SourceOne software installation that client version is supported Microsoft.NET Framework Redistributable Package Microsoft Visual C SP1 Redistributable Package (x86) Manually or silently install Validated by EMC SourceOne software installation English, French, Italian, German and Spanish language systems - Automatically installed with EMC SourceOne software if not present Chinese, Japanese, and Korean language systems - Manually or silently install the redistributable package specific to the supported language. Mobile device requirements Refer to the EMC SourceOne Products Compatibility Guide for more detailed information on mobile device support. For information on how to configure mobile device support, see the EMC SourceOne Administration Guide. Establishing system requirements 67

68 Pre-installation 68 EMC SourceOne Management Version 6.7 Installation Guide

69 4 Important Considerations This chapter provides important considerations to review when preparing to install EMC SourceOne products. This chapter is organized as follows: Common considerations (all products) Management considerations Note: This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above). For details, see Guide to using this document on page 10. Important Considerations 69

70 Important Considerations Common considerations (all products) This section describes considerations for all EMC SourceOne products. Native Archive Index Work directory considerations Hardware repurposing considerations Important SQL Server considerations Additional service accounts to support least privileges Service account passwords Regional and language options to support indexing Native Archive Index Work directory considerations EMC SourceOne performs all indexing locally on the Native Archive computer. To support this requirement, you must allocate a local directory (referred to as the Index Work directory) with at least 20 GB of space on all Native Archive indexing computers to serve as a temporary space for indexing. This directory: Must be regarded as a local drive by the operating system. Can not be the operating system drive (e.g., C:). Can be on local disk or SAN storage, as long as it is regarded as a local drive by the Native Archive server. For best performance, this should be on a dedicated physical disk. Requires a minimum of 20 GB of free disk space be available. Ideally you should allocate the required space prior to installing Native Archive software on your indexing servers (Native Archive disk configuration and storage information in Reference configurations on page 26). Then, when installing the Native Archive software, simply select a destination folder on this drive. Although you are required to specify this location when installing the Native Archive software, you can bypass the 20 GB requirement during the installation (the installer will provide a warning). This is necessary when installing Native Archive software on a server which is not designated for indexing. If you later decide to enable indexing, you will need to either: Free up space on the current Index Work directory drive. Move the Index Work directory to another drive which has enough space. 70 EMC SourceOne Management Version 6.7 Installation Guide

71 Important Considerations Example You install Native Archive software on a computer not originally intended to perform indexing, but you later decide to enable the indexing role. The current Index Work directory that you established when you installed the Native Archive software is on a 30 GB drive, but has only 5 GB of free disk space. In this case, you can either: Move or delete files to free up 20 GB space, and then enable the indexing role on this server. Use a utility (provided in the EMC SourceOne Management 6.6 SP1 software kit) to move the Index Work directory to another drive with at least 20 GB of free space. You can then enable the indexing role. Details about both of these options are provided in the "Maintaining EMC SourceOne" chapter in the EMC SourceOne Administration Guide. Hardware repurposing considerations When procuring systems on which you will install EMC SourceOne server components (e.g., Master Services, Worker Services, Web Services, Native Archive Services) you should utilize "clean" systems to avoid issues resulting from conflicts with previously installed software. If you must repurpose a computer for use with EMC SourceOne, you should reformat the system and re-install the operating system. Important SQL Server considerations Review the important considerations provided in this section. Enterprise Edition vs. Standard Edition SQL Server disk configuration Database partitioning Disk partition alignment best practices Memory allocation in 64-bit SQL Server Page file size General SQL Server information SQL database installation permissions EMC SourceOne database installation methods Alias configuration for SQL Server host computer Recovery model considerations SQL Server collation settings Storage best practices Common considerations (all products) 71

72 Important Considerations Enterprise Edition vs. Standard Edition SQL Server disk configuration SQL Server Enterprise Edition is recommended, as it supports database partitioning, online index maintenance, and provides data management and performance benefits for the Native Archive database. You should review considerations with your EMC representative to determine the advantages or disadvantages of selecting Enterprise or Standard Edition for your deployment. For additional information about comparing Standard and Enterprise edition features, refer to the following resources. SQL Server 2008: SQL Server 2005: es.aspx For information on configuring partitioning using the EMC SourceOne console, refer to the EMC SourceOne Administration Guide. Review the recommendations provided in this section. SQL Server host computer: Because of the critical nature of the processing performed by EMC SourceOne, you should use a dedicated SQL Server host. Do not use the same EMC SourceOne SQL Server host for other databases or applications. EMC SourceOne databases and logs: When you install EMC SourceOne databases, the databases and log files are created on the default data and log location configured in SQL Server. For best performance, and depending on available disks and storage, you should detach, move and attach the EMC SourceOne databases and logs to separate disks attached to adequate storage: Ideally, each EMC SourceOne database (Archive, Activity, Search) should reside on a dedicated drive connected to Tier 1 storage. If this is not feasible, the Archive database should be on a dedicated drive, the Activity and Search databases can be co-located on the same drive. 72 EMC SourceOne Management Version 6.7 Installation Guide

73 Important Considerations The Archive database logs should be on a dedicated drive (separate from the database drives). SQL Server system databases and logs: The SQL Server TempDB database should be on a dedicated drive in accordance with Microsoft s best practices. Refer to the following resource: SQL Server logs should be on a dedicated drive Database partitioning Review the recommendations provided in this section. The EMC SourceOne Administration Guide provides information and recommendations for configuring and managing database partitioning. Note: EMC SourceOne versions prior to version 6.6 SP1 allowed you to specify the number of files a partition can host equal to one half the number of CPUs on the SQL Server host. When you upgrade to version 6.6 SP1, the number of files per partition is reset to a default of 1. The EMC SourceOne Administration Guide provides information on changing this option. Disk partition alignment best practices Observe the following best practices related to disk partition alignment: Align sectors and tracks on the disk. This can result in significant performance gains for IO intensive system such as EMC SourceOne. Consult your storage hardware vendor and ask for proof of successful disk partition alignment. Microsoft recommends stripe size of 64K for SQL Server 2005 and 128K/256K for SQL Server Review the following resource for disk partition alignment best practices: 29.aspx Common considerations (all products) 73

74 Important Considerations Memory allocation in 64-bit SQL Server To prevent performance issues with 64-bit versions of SQL Server, lock the memory that is allocated for the buffer pool in physical memory. Note: This practice applies to physical environments and may not be true in virtualized environments. Consult with your virtualization vendor. Refer to the following resource for details: Note the following: This option off by default For 64-bit SQL Server Standard Edition, this setting may be ignored Page file size General SQL Server information SQL database installation permissions Microsoft recommends the page file to be 1.5 times physical RAM but not more than 3 times. For details: Note the following: Data and log files are created on default SQL data and log directory Data and log files should be moved to appropriate drives This section provides general information to describe how EMC SourceOne uses Microsoft SQL Server: EMC SourceOne uses Windows authentication (not SQL authentication). As a security consideration, do not use IIS on your SQL Server host. EMC SourceOne does not use hard-coded SQL accounts. To successfully install or update the EMC SourceOne databases, you must ensure that the installation account used to log in to the SQL Server host computer: Is a member of the local administrators group Has SQL sysadmin server role privileges By default in SQL Server the sysadmin role contains all members of the Windows BUILTIN\Administrators group and the local 74 EMC SourceOne Management Version 6.7 Installation Guide

75 Important Considerations administrator's group. If the default configuration exists, and the installation account is a member of either of these groups, it already has the sysadmin role. In customer scenarios where this is not the case, you must temporarily establish the permissions described above. The sysadmin role for the installation account is specifically needed to add system-level error codes in the sys.messages table and is not used for any other purpose. This permissions requirement is temporary, and is only needed until you complete all database installations or updates and verified success by reviewing the database installation log files. For security purposes, you can remove this installation account from the local administrators group and revoke the sysadmin role once installation or update of the databases is complete. Note: Procedures for updating existing EMC SourceOne databases is provided in the product release notes. EMC SourceOne database installation methods Alias configuration for SQL Server host computer You can install the EMC SourceOne databases using either a MSI installation program or scripts: Using the installation scripts allows you to inspect the database installation process before running. Installation errors are presented "in stream" during installation The MSI program installs the three EMC SourceOne databases at once. You must manually review the installation log to check for errors indicating installation success or failure. To provide the flexibility to move EMC SourceOne databases from one physical SQL Server host computer to another to support disaster recovery, you should configure a CNAME alias for your SQL Server before installing EMC SourceOne software. When an EMC SourceOne component installation program asks you to enter your SQL Server host computer, provide the CNAME alias instead of the physical host name. This is the required configuration to support re-directing EMC SourceOne servers to an alternate database server at the disaster recovery site during failover. For details about this configuration, refer to the EMC SourceOne Disaster Recovery Solution Guide (available at Common considerations (all products) 75

76 Important Considerations Recovery model considerations SQL Server collation settings Table 16 SQL Server recovery models are designed to control transaction log maintenance and prepare your environment for disaster recovery. Three recovery models exist: simple, full, and bulk-logged. Each of these models represents a different approach to balance the tradeoff of conserving disk space against providing for more granular disaster recovery options. Typically a database uses the full or simple recovery model. By default, EMC SourceOne databases are installed in the simple recovery model to conserve log space. This model may not be suitable for all environments depending on the database backup methodology and tools used. If necessary, you can change to a full recovery model if this better suits your environment. For details on recovery models and their use, refer to the following resource: EMC SourceOne databases are case insensitive, and can be installed in a case insensitive or case sensitive SQL Server environment EMC SourceOne requires the default SQL Server collation settings as described in Table 16. SQL Server collation settings Server collation SQL_Latin1_General_CP1_CI_AS Latin1_General_CI_AS Latin1_General_CI_AS Latin1_General_CI_AS Latin1_General_CI_AS Japanese_CI_AS Chinese_PRC_CI_AS Operating system English French Italian German Spanish Japanese Simplified Chinese 76 EMC SourceOne Management Version 6.7 Installation Guide

77 Important Considerations Storage best practices Review the following resource for SQL Server storage best practices: Note: Best practice number 8 in the above link generally applies to the TempDB only, and not necessarily user databases such as SourceOne databases. Additional service accounts to support least privileges EMC SourceOne requires at least one primary service account to operate. This service account is placed in the EMC SourceOne security group. You can optionally create additional service accounts (and place them in the security group) in environments which require least possible permissions: Master Services service account This optional service account can be specified when installing Master Services software instead of the primary service account. Details: This account is associated only with a dedicated Master Services computer, as the Master Services software requires that the service account remain a member of the local administrators group in order to interact with the Windows Job Scheduler service. Other computers in the EMC SourceOne configuration do not require the primary service account to be a member of the local administrators group. If you are also installing Worker Services software on this computer, you should use the primary service account. OWA service account ( Management environments only) This optional service account can be specified when installing Extensions for OWA software on Exchange servers to limit the access to Exchange to a dedicated service account rather than using the primary service account. Service account passwords To ensure continuous operation, EMC recommends configuring service accounts used with EMC SourceOne to have passwords which do not expire. If a service account is allowed to expire, this will cause authentication errors to be written to the event logs. Common considerations (all products) 77

78 Important Considerations You should be aware of when this password will expire and change it before it expires to avoid interrupting EMC SourceOne processing. After you have changed the password in Active Directory, re-run the installation to access the Repair function. For more details on resetting service account passwords, see the EMC SourceOne Administration Guide. Regional and language options to support indexing For all languages which you expect to encounter when indexing and files, you must ensure that the following language support is configured on a Native Archive server running Microsoft Windows Server 2003: Code page conversion tables East Asian language files Note: This issue does not exist with Windows Server Code page conversion tables East Asian language files Enable the appropriate code page conversion tables: 1. Click Start > Control Panel > Regional and Language Options. 2. Click the Advanced tab. 3. Select the appropriate languages in the Code page conversion tables section. 4. Click Apply. 1. Install East Asian language files: 2. Click Start > Control Panel > Regional and Language Options. 3. Click the Languages tab. 4. Select Install files for East Asian languages. 5. Click Apply. 6. Click OK. 78 EMC SourceOne Management Version 6.7 Installation Guide

79 Important Considerations Management considerations This section describes considerations for all EMC SourceOne Management environments. Compatibility with EMC Xtender Service account mailbox restrictions and workaround Indexing support for embedded Exchange messages Search service startup Compatibility with EMC Xtender Do not install EMC SourceOne Management components on an Xtender server. No EMC SourceOne Management components are required on the Xtender server to communicate with the Xtender archive. Service account mailbox restrictions and workaround Some sites prohibit the creation of a mailbox for a service account. However, EMC SourceOne requires that the primary service account have full mailbox rights to a mailbox in order to function in an Exchange environment. To address this scenario: 1. Create a separate mailbox not directly associated with the service account (for example, ES1 Mailbox). 2. Grant the primary service account Full Mailbox access to this mailbox. 3. Configure the MAPI profile (called EMCSourceOne) used on the Worker Services computer(s) to point to this mailbox. See Worker Services host computer requirements on page 59 for details. Indexing support for embedded Exchange messages To support full-text indexing of embedded Exchange messages you must install Microsoft Outlook 2007 on all Native Archive computers. Note the following: This is a new prerequisite not previously required for EMC SourceOne Native Archive computers prior to version Management considerations 79

80 Important Considerations This is primarily applicable to Microsoft Exchange environments. You can choose not to install Microsoft Outlook. For example, if you are installing SourceOne in an IBM Lotus Domino or EMC SourceOne for Microsoft SharePoint environment, Microsoft Outlook is not needed. However, it may be useful to install Outlook in a Domino environment to support the scenario in which an Exchange message (.msg) is embedded in a Domino message. Unlike master or worker computers, a MAPI profile is not required. If running Native Archive Services software on the same computer on which Worker Services is installed, the Outlook client software which must be installed as a prerequisite for the Worker Services software is sufficient. Search service startup After initial installation and system restart, the EMC SourceOne Search Service may not start, and will display a corresponding error message. This message can be safely ignored, as the Search Service will start upon receiving its first search request. Do not modify the EMC SourceOne Notes user account If you modify the Notes user account configured for use by EMC SourceOne services, Domino-related features may not function, including synchronizing address books. Also, Notes users will not be able to log in to the EMC SourceOne Search client and will receive the following error: Padding is invalid and cannot be removed If this issue occurs, refer to the following EMC Support Solution: esg Address Book synchronization fails due to a corrupt encrypted notes password in registry 80 EMC SourceOne Management Version 6.7 Installation Guide

81 5 Installing Common EMC SourceOne Components This chapter describes how to install components of EMC SourceOne commonly needed to support all EMC SourceOne products including EMC SourceOne Management, EMC SourceOne for Microsoft SharePoint and EMC SourceOne for File Systems. Each section in this chapter is presented in the order in which the components should be installed, as some installed components are dependent on previously installed components. This chapter is organized as follows: Pre-installation checklist Installation overview Installing common EMC SourceOne components Maintaining the installation Note: This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above). For details, see Guide to using this document on page 10. Installing Common EMC SourceOne Components 81

82 Installing Common EMC SourceOne Components Pre-installation checklist Before beginning the installation procedures detailed in this chapter, ensure that the items in the following checklist are completed. Table 17 Pre-installation checklist Activity Review the product overview information Understand the system architecture Description Review the product overview information and understand the features and options. See Product overview on page 12 and the EMC SourceOne Administration Guide. Review the components which comprise EMC SourceOne system. See System architecture on page 17 and System components on page 18. Complete analysis activities Compile and analyze the organization s requirements, metrics and processes. See Pre-deployment planning on page 24. Complete configuration planning activities Configure accounts and permissions Establish required hardware and network infrastructure Size the environment and adjust variable components of the configuration to support it. See System architecture on page 17 and Reference configurations on page 26. Establish the accounts and permissions required to support EMC SourceOne. See Pre-installation on page 37. Ensure that the appropriate hardware is available for installation and connected to the network. Hardware specifications, operating system, and network connectivity, and software prerequisites are detailed in Pre-installation on page EMC SourceOne Management Version 6.7 Installation Guide

83 Installing Common EMC SourceOne Components Installation overview Table 18 provides an overview of the EMC SourceOne common installations presented in the order in which you should perform them. Table 18 Installation procedure overview Installation/ Configuration Details Procedure Databases Database permissions Master Services software EMC SourceOne Console application Worker Services software Web Services software Mobile Services software EMC SourceOne Search application Native Archive Services software Install the EMC SourceOne Activity, Archive and Search databases. You can install the databases using scripts or an MSI installation program. Configure SQL security logins and required database permissions. Install Master Services software. Optionally install the software on a second computer and cluster them for high availability. Install the EMC SourceOne Console application on one or more computers to administer EMC SourceOne. Install Worker Services software on one or more computers to process activities. Install Web Services software on one or more Worker Services computers to support search and shortcut resolution functionality. Optionally configure network load balancing for Web Services. Install the Mobile Services software on one or more EMC SourceOne Worker Services computers or a separate IIS Web server to support mobile users, Outlook Web Access users, Outlook users who do not have the EMC SourceOne Offline Access installed, and EMC SourceOne for File Systems users to resolve file links to archived files. Install the EMC SourceOne Search application to provide a Web interface for search functionality. Install the Native Archive Services software on one or more computers to manage archiving, indexing, searching and retrieving. Installing databases using scripts on page 85 Installing databases using the MSI installer on page 88 Configure SQL permissions on page 92 Installing Master Services software on page 97 Installing the EMC SourceOne Console application on page 104 Installing Worker Services software on page 108 Installing Web Services software on page 114 Installing the EMC SourceOne Search application on page 120 Installing the EMC SourceOne Search application on page 120 Installing Native Archive Services software on page 133 Installation overview 83

84 Installing Common EMC SourceOne Components Installing common EMC SourceOne components Use the following procedures to install common components required in all EMC SourceOne environments: Installing databases using scripts Installing databases using the MSI installer Configure SQL permissions Installing Master Services software Installing the EMC SourceOne Console application Installing Worker Services software Installing Web Services software Installing the EMC SourceOne Search application Installing Mobile Services software Installing Native Archive Services software EMC SourceOne Management Version 6.7 Installation Guide

85 Installing Common EMC SourceOne Components Installing databases using scripts This section describes how to use scripts to create the databases required for EMC SourceOne on a Microsoft SQL Server host computer. You can install the databases on the default instance or a named instance of SQL server. Note: Alternatively, you can use the MSI installer to install the databases as described in Installing databases using the MSI installer on page 88. You can install the following databases using scripts: Activity database Search database Native Archive database Prerequisites Procedures Table 19 For specific hardware, operating system, network connectivity, and prerequisite software requirements, see Database host computer requirements on page 56. Also refer to Important SQL Server considerations on page 71. Table 19 provides an overview of the procedures to install the databases on the Microsoft SQL Server host computer using scripts. Procedures Step Procedure Details 1 Copy Database folder to the SQL Server host computer on page 86 2 Install the Activity database on page 86 3 Install the Search database on page 87 4 Install the Native Archive database on page 87 5 Configure database permissions on page 88 Copy the EMC SourceOne installation files from the software kit to the local computer. Installs the database used to process EMC SourceOne activities. Installs the database used to manage EMC SourceOne Search. Installs the database used to manage EMC SourceOne archiving, indexing, searching and retrieving. Configures database security permissions for EMC SourceOne accounts. Installing common EMC SourceOne components 85

86 Installing Common EMC SourceOne Components Copy Database folder to the SQL Server host computer To copy the Database folder locally to the SQL Server host computer: 1. Navigate to the \Setup directory on the EMC SourceOne software kit. 2. Copy the Database folder to a temporary location on the SQL Server host computer. Install the Activity database To install the Activity database: 1. Log in to the SQL Server host computer using an account with local administrator permissions on the SQL Server host computer and the SQL sysadmin role.! IMPORTANT See Service account mailbox restrictions and workaround on page 79 for additional details. 2. Open a command prompt and navigate to the temporary location to which you copied the Database folder. 3. Run the ES1_ActivityDB_Create_mssql.bat file. 4. Enter the following information: SQL Server information If you are using the default named instance, enter the SQL Server name in the following format: hostname If you are using a named instance, enter the SQL Server name and instance in the following format: hostname\instance Database name Ensure that you select the option to view the log file. Although the database may appear to install correctly, the log file is the only user interface that will provide important information if an installation issue occurs. 5. Press Enter. The script is executed and the database is installed. 6. Ensure that the installation was successful by reviewing the installation log file. 86 EMC SourceOne Management Version 6.7 Installation Guide

87 Installing Common EMC SourceOne Components Install the Search database To install the Search database: 1. Open a command prompt and navigate to the temporary location to which you copied the Database folder. 2. Run the ES1_ActivityDB_Create_mssql.bat file. 3. Enter the following information: SQL Server information If you are using the default named instance, enter the SQL Server name in the following format: hostname If you are using a named instance, enter the SQL Server name and instance in the following format: hostname\instance Search database name Ensure that you select the option to view the log file. Although the database may appear to install correctly, the log file is the only user interface that will provide important information if an installation issue occurs. 4. Press Enter. The script is executed and the database is installed. 5. Ensure that the installation was successful by reviewing the installation log file. Install the Native Archive database To install the Native Archive database: 1. Open a command prompt and navigate to the temporary location to which you copied the Database folder. 2. Run the ES1_ActivityDB_Create_mssql.bat file. 3. Enter the following information: SQL Server information If you are using the default named instance, enter the SQL Server name in the following format: hostname If you are using a named instance, enter the SQL Server name and instance in the following format: hostname\instance Installing common EMC SourceOne components 87

88 Installing Common EMC SourceOne Components Native Archive database name Ensure that you select the option to view the log file. Although the database may appear to install correctly, the log file is the only user interface that will provide important information if an installation issue occurs. 4. Press Enter. The script is executed and the database is installed. 5. Ensure that the installation was successful by reviewing the installation log file. Configure database permissions Refer to Configure SQL permissions on page 92 to configure the appropriate permissions for each database. Installing databases using the MSI installer This section describes how to create the databases required for EMC SourceOne on a Microsoft SQL Server host computer using a Microsoft Installation (MSI) program. You can install the databases on the default instance or a named instance of SQL server. Note: Alternatively, you can use the database installation scripts as described in Installing databases using scripts on page 85. You can install the following databases using the MSI installer: Activity database Search database Native Archive database The default database locations and log locations configured in SQL Server are used. Prerequisites For specific hardware, operating system, network connectivity, and prerequisite software requirements, see Database host computer requirements on page 56. For important database installation permissions, see SQL database installation permissions on page 74. For important SQL Server considerations, see Important SQL Server considerations on page EMC SourceOne Management Version 6.7 Installation Guide

89 Installing Common EMC SourceOne Components Procedures Table 20 Table 20 provides an overview of the procedures to install and configure the EMC SourceOne databases on the Microsoft SQL Server host computer. Procedures Step Procedure Details 1 Copy the setup executable locally on page 89 Copies the installation executable locally to the SQL Server host computer. 2 Install databases on page 89 Installs the EMC SourceOne Activity database, Native Archive database and Search database. 3 Review database logs on page 91 Review the database installation logs. 4 Configure database permissions on page 91 Configures database security permissions for EMC SourceOne accounts. Copy the setup executable locally To copy the setup executables for the databases locally to the SQL Server host computer: 1. Log in to the SQL Server host computer using an account with local administrator permissions on the SQL Server host computer and the SQL sysadmin role.! IMPORTANT See SQL database installation permissions on page 74 for additional details. 2. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 3. Copy the ES1_DatabaseSetup.exe executable to a temporary location on the SQL Server host computer. Install databases To install the databases: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the ES1_DatabaseSetup.exe file and click Run. The Welcome page displays. Installing common EMC SourceOne components 89

90 Installing Common EMC SourceOne Components 3. Click Next to display the Database Log Folder page. Note: This folder contains only the logs detailing the results of the database installation. 4. Specify the destination directory and click Next to display the Database Instance page. 5. Do one of the following: If you are installing the database to the default named instance, leave the Specific Instance checkbox unchecked and enter the Database Server name. If you are installing the database to a named instance, select the Specific Instance checkbox and type the name of the instance. 90 EMC SourceOne Management Version 6.7 Installation Guide

91 Installing Common EMC SourceOne Components 6. Click Next to display the Database Selection page. 7. Accept the default name or enter a name for each of the following databases: Activity Database - used to manage EMC SourceOne processing Native Archive Database - used to manage EMC SourceOne archiving, indexing, searching and retrieving Search Database - used to manage EMC SourceOne Search 8. Click Next to display the Ready for Installation page. 9. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 10. Click Finish. Review database logs Review the database logs created in the folder specified during installation. Although the database may appear to install correctly, the log file is the only user interface that will provide important information if an installation issue occurs. You can also verify the EMC SourceOne databases were created by navigating to the databases in Microsoft SQL Server Management Studio. Configure database permissions Refer to Configure SQL permissions on page 92 to configure the appropriate permissions for each database. Installing common EMC SourceOne components 91

92 Installing Common EMC SourceOne Components Configure SQL permissions Configure Microsoft SQL database permissions for the EMC SourceOne security logins you created during the planning process ( Assigning permissions on page 43): Security group Admins group Installation account This section includes: Security login considerations on page 92 Assign security login roles on page 92 Configure permissions for each database on page 94 Security login considerations Assign security login roles EMC SourceOne requires that the default schema for each of its databases be granted access rights to the EMC SourceOne service account. Assigning permissions to the security group (instead of the EMC SourceOne service account) simplifies the configuration for the following reasons: If you add the service account as a SQL Server login (not recommended), by default it is assigned the dbo schema. For EMC SourceOne to authenticate properly, it requires that the service account s own schema be associated with its databases, not the default dbo schema, which does not have the required permissions. You must take the extra step to configure each database to use the service account s schema. If you add the security group as a SQL Server login (recommended), it is not assigned the default dbo schema. Therefore, when the service account authenticates indirectly through the security group, a schema associated with the service account user is automatically created. Using Microsoft SQL Server Management Studio, map the EMC SourceOne security logins to the db_datareader and db_datawriter databases roles for each of the EMC SourceOne databases as shown in Table EMC SourceOne Management Version 6.7 Installation Guide

93 Installing Common EMC SourceOne Components Table 21 Database roles for security logins EMC SourceOne Security Login Admins group Security group Installation account Admins group Security group Installation account Admins group Security group Installation account EMC SourceOne Database Activity Native Archive Search Database Role Membership db_datareader db_datawriter public (default) db_datareader db_datawriter public (default) db_datareader db_datawriter public (default) Installing common EMC SourceOne components 93

94 Installing Common EMC SourceOne Components Figure 7 shows an example of the Login Properties dialog box from which you configure the database role membership for each of the EMC SourceOne security logins. Ensure that you click each database and apply the database role membership permissions. Figure 7 Configure permissions for each database Login Properties dialog box example Configure explicit permissions for the security logins for each EMC SourceOne database as shown in Table EMC SourceOne Management Version 6.7 Installation Guide

95 Installing Common EMC SourceOne Components Table 22 Explicit permissions for EMC SourceOne databases EMC SourceOne Database EMC SourceOne Security Login Explicit Permissions Activity Security group Connect (default) Execute Admins group Installation account Connect (default) Execute Connect (default) Native Archive Security group Alter a Connect (default) Execute Admins group Installation account Alter b Connect (default) Execute Connect (default) Search Security group Alter Create table Connect (default) Execute Admins group Installation account Connect (default) Execute Connect (default) a. For SQL Server 2005 Enterprise Edition environments in which database partitioning is used. This permission enables the automatic creation of partitions using settings configured in the EMC SourceOne console. b. For SQL Server 2005 Enterprise Edition environments in which database partitioning is used. This permission enables EMC SourceOne administrators to manually create a partition using the EMC SourceOne console. Installing common EMC SourceOne components 95

96 Installing Common EMC SourceOne Components Figure 8 shows an example of the Database Properties dialog box from which you configure the explicit permissions. You must configure the permissions for each individual database as described in Table 22 on page 95. Figure 8 Database Properties dialog box example 96 EMC SourceOne Management Version 6.7 Installation Guide

97 Installing Common EMC SourceOne Components Installing Master Services software This section describes the prerequisites, software requirements, and installation procedures for installing Master Services software on a host computer. This section also describes how to configure two host computers running Master Services software for high availability using a Microsoft Clustering active/passive configuration. Prerequisites Table 23 Table 23 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions Details Hardware, operating system, network connectivity, and prerequisite software requirements are described in Master Services host computer requirements on page 57. Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. Procedures Table 24 Table 24 provides an overview of the procedures to install and configure EMC SourceOne Master Services software on a host computer. Procedures Step Procedure Details 1 Copy the setup executable locally on page 98 2 Install Master Services software on page 98 3 Cluster EMC SourceOne Master computers on page 102 Copies the installation executables locally. Installs the EMC SourceOne Master Services software. Install Master Services software on a second host computer and configure as nodes in a Microsoft Cluster. Installing common EMC SourceOne components 97

98 Installing Common EMC SourceOne Components Copy the setup executable locally To copy the setup executable for the EMC SourceOne Master Services software locally to the host computer: 1. Log in to the host computer using the EMC SourceOne installation account. 2. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 3. Copy the ES1_MasterSetup.exe executable to a temporary location on the host computer. Install Master Services software To install the EMC SourceOne Master Services software: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the ES1_MasterSetup.exe file and click Run. The Welcome page displays. Note: When the installer is run, it validates the system configuration to ensure that prerequisite components are installed. Depending on your system configuration, the installer may automatically install one or more prerequisite components before displaying the Welcome page. Automatically installed components are listed in Establishing system requirements on page Click Next to display the Destination Folder page. 98 EMC SourceOne Management Version 6.7 Installation Guide

99 Installing Common EMC SourceOne Components 4. Specify the destination directories: a. The first destination determines where the primary EMC SourceOne Master Services software files are installed. Click Change to specify a different directory, or accept the default directory. Note: You should choose a local drive other than the operating system drive. If you are installing Master Services software on an active/passive cluster ( Cluster EMC SourceOne Master computers on page 102), ensure you install the software to a local drive on each node. b. The second destination identifies the work directory, which is a temporary storage area for message processing. You should specify a directory with at least 1 GB free space. 5. Click Next to display the Logon Information page. 6. Enter the logon information: a. Type the fully-qualified Domain. b. Type the Service Account and Service Account Password. Depending on the Active Directory accounts you created during the planning process, the service account used when installing the Master Services software can be one of the following: Primary service account Master Services service account Installing common EMC SourceOne components 99

100 Installing Common EMC SourceOne Components For a more detailed discussion, see the following topics: Creating accounts in Active Directory on page 39 Additional service accounts to support least privileges on page 77 c. Type the EMC SourceOne Security Group. The service account you choose must be a member of this Security Group. d. The Enable checkbox is already checked in the Service Logon Policy region. This setting is required to enable services to run without a logged in user. e. Click Next to validate the credentials and display the Database page. 7. Enter the database information: a. Type the Activity Database name. b. Type the Activity Database Server (or IP) host name. If you are using the default named instance, enter the SQL Server name in the following format: hostname If you are using a named instance, enter the SQL Server name and instance in the following format: hostname\instance c. Click Next. 100 EMC SourceOne Management Version 6.7 Installation Guide

101 Installing Common EMC SourceOne Components 8. If you are installing the EMC SourceOne Master Services software on a computer on which Lotus Notes is installed, the Environment page displays. 9. Enter the Notes password for the EMC SourceOne Lotus Notes account configured during the planning process (see IBM Lotus Domino permissions on page 53). Click Next to validate the password and display the Ready to Install the Program page. 10. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 11. Click Finish. Do one of the following: If you are installing EMC SourceOne Master Services software on a system on which only Microsoft Outlook is installed, go to step 12. If you are installing EMC SourceOne Master Services software on a system on which Lotus Notes software is installed, a Lotus Notes configuration wizard is automatically launched. Configure the Notes client software to use the EMC SourceOne Lotus Notes account configured during the planning process (see IBM Lotus Domino permissions on page 53). Ensure that you copy the Notes ID file locally when prompted by the wizard. When the configuration is complete, exit the Notes client. Installing common EMC SourceOne components 101

102 Installing Common EMC SourceOne Components! IMPORTANT In a mixed-mail environment (Microsoft Exchange and IBM Lotus Domino), do not configure the Lotus Notes client as the default mail client. Microsoft Outlook must be the default mail client. 12. A message displays indicating that you must restart the system. Click Yes. Cluster EMC SourceOne Master computers For high availability, set up an active/passive Microsoft Clustering configuration for the two computers on which EMC SourceOne Master Services software is installed. Prerequisites Repeat the following procedures to install the EMC SourceOne Master Services software on a second host computer: Copy the setup executable locally on page 98 Install Master Services software on page 98 Considerations Configure each host computer as active/passive nodes in a Microsoft Cluster using the following guidelines: Each computer requires Microsoft Cluster Administrator to support the configuration. Each computer should be configured with dual Network Interface Cards (NICs) to support a private connection between each node and a public connection to the network. The shared quorum disk and data resource disk should be configured on a device accessible using the public network connection to both nodes. For detailed background information and instructions on configuring Microsoft Clustering, refer to the Microsoft documentation set. Procedure To create a Group and Resource for EMC SourceOne services (ExJobScheduler and ExAddressCacheService): 1. On both nodes, set the following services to Manual: EMC SourceOne Address Cache EMC SourceOne Job Scheduler 2. On one of the nodes, click Start > Programs > Administrative Tools > Cluster Administrator. 102 EMC SourceOne Management Version 6.7 Installation Guide

103 Installing Common EMC SourceOne Components 3. Right-click Groups and click New > Group. 4. Enter a name for the group and click Next. 5. Click Finish. The new group is displayed in the Groups folder. 6. Right-click the new group and select New > Resource. 7. Enter a name for the resource (for example, EMC Master Service) in the Name field and select Generic Services from the Resource type dropdown list. 8. Click Next to display the Possible Owners page. 9. Click Next to display the Dependencies page. 10. Click Next to display the Generic Service Parameters page. 11. In the Service Name field, type ExJobScheduler. 12. Click Next to display the Registry Replication page. 13. Click Finish. 14. Right click the service and select Bring Online. The State field indicates the service is Online. 15. Repeat steps 6 through 14 to create a resource for the ExAddressCacheService service. 16. Restart the Microsoft Cluster services. 17. Verify that the Group is Online. 18. Verify that the following services are set to Manual and are only running on one node: EMC SourceOne Address Cache EMC SourceOne Job Scheduler Note: If both services are running at the same time on each node, this may cause duplicate jobs to be processed. By shutting down the systems after the services are created in the cluster group, the cluster will take control of them and only allow them to run on one node at a time. Installing common EMC SourceOne components 103

104 Installing Common EMC SourceOne Components Installing the EMC SourceOne Console application You can install the EMC SourceOne Console application on the Master Services host computer or a client computer that meets the system requirements. You can install the EMC SourceOne Console on one or more computers. Prerequisites Table 25 Table 25 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions Details Hardware, operating system, network connectivity, and prerequisite software requirements for installing the EMC SourceOne Console application on one of the following: Master Services host computer - described in Master Services host computer requirements on page 57. Client computer - described in EMC SourceOne Console client computer requirements on page 64 Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. Procedures Table 26 Table 26 provides an overview of the procedures to install and configure EMC SourceOne Console software on a host computer. Procedures Step Procedure Details 1 Copy the setup executable locally on page Install EMC SourceOne Console software on page 105 Copies the installation executable locally. Installs the EMC SourceOne Console software. 104 EMC SourceOne Management Version 6.7 Installation Guide

105 Installing Common EMC SourceOne Components Copy the setup executable locally To copy the setup executable for the EMC SourceOne Console software locally to the host computer: 1. Log in to the host computer using the EMC SourceOne installation account. 2. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 3. Copy the ES1_ConsoleSetup.exe executable to a temporary location on the host computer. Install EMC SourceOne Console software To install the EMC SourceOne Console software: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the ES1_ConsoleSetup.exe file and click Run. The Welcome page displays. 3. Click Next to display the Destination Folder page. Installing common EMC SourceOne components 105

106 Installing Common EMC SourceOne Components 4. Accept the default location and click Next to display the Administrators Group page. 5. Enter the Administrators Group information: a. Accept the default Domain. b. Type the Adminstrators Group. If this environment uses a separate EMC SourceOne Admins group to house the console administrator accounts, type the name for this group. If this environment houses console administrators in the EMC SourceOne Security Group (which also houses the service accounts used by EMC SourceOne), type the name for this group. Note: For details about the Admins and Security Group configuration, see Creating accounts in Active Directory on page EMC SourceOne Management Version 6.7 Installation Guide

107 Installing Common EMC SourceOne Components 6. Click Next to display the Database page. 7. Enter the following information: a. Type the Activity Database name. b. Type the Activity Database Server host name. If you are using the default named instance, enter the SQL Server name in the following format: hostname If you are using a named instance, enter the SQL Server name and instance in the following format: hostname\instance c. Click Next to display the Product Shortcuts page. 8. Select the desired options and click Next to display the Ready to Install the Program page. 9. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 10. A message displays indicating that you must restart the system. Click Yes. Installing common EMC SourceOne components 107

108 Installing Common EMC SourceOne Components Installing Worker Services software This section describes how to install the EMC SourceOne Worker Services software on a host computer. Prerequisites Table 27 Table 27 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions Details Hardware, operating system, network connectivity, and prerequisite software requirements are described in Worker Services host computer requirements on page 59. Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. Procedures Table 28 Table 28 provides an overview of the procedures to install and configure EMC SourceOne Worker Services software on a host computer. Procedures Step Procedure Details 1 Copy setup executable locally on page Install Worker Services software on page 109 Copies the installation executables locally to the computer. Installs the EMC SourceOne Worker Services software. Copy setup executable locally To copy the setup executable for the EMC SourceOne Worker Services software locally to the host computer: 1. Log in to the host computer using the EMC SourceOne installation account. 2. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 108 EMC SourceOne Management Version 6.7 Installation Guide

109 Installing Common EMC SourceOne Components 3. Copy the ES1_WorkerSetup.exe executable to a temporary location on the host computer. Install Worker Services software To install the EMC SourceOne Worker Services software: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the ES1_WorkerSetup.exe file and click Run. The Welcome page displays. Note: When the installer is run, it validates the system configuration to ensure that prerequisite components are installed. Depending on your system configuration, the installer may automatically install one or more prerequisite components before displaying the Welcome page. Automatically installed components are listed in Establishing system requirements on page Click Next to display the Destination Folder page. 4. Specify the destination directories: a. The first destination determines where the primary EMC SourceOne Worker Services files are installed. Click Change to specify a different directory, or accept the default directory. Note: You should choose a drive other than the operating system drive. b. The second destination identifies the work directory, which is a temporary storage area for message processing. You should specify a directory with at least 1 GB free space. Installing common EMC SourceOne components 109

110 Installing Common EMC SourceOne Components 5. Click Next to display the Job Log Folder page. Consider the following: This location was established during the planning phase with appropriate permissions granted to the EMC SourceOne security group. See Assigning permissions on page 43 for details. This file share location will contain job detail logs which support the viewing of job details from the EMC SourceOne Console. You must configure all Worker Services computers to use the same location. If you choose to enable job detail logging in the EMC SourceOne Console, ensure that this location includes sufficient space to allow for log growth or specify a location with expandable storage. 6. Enter a path (\\hostname\share) or click Browse and navigate to the location. 110 EMC SourceOne Management Version 6.7 Installation Guide

111 Installing Common EMC SourceOne Components 7. Click Next to display the Logon Information page. 8. Enter the logon information: a. Type the fully-qualified Domain. b. Type the Service Account and Service Account Password. This is the EMC SourceOne primary service account username and password. c. Type the EMC SourceOne Security Group. The service account must be a member of this Security Group. d. The Enable checkbox is already checked in the Service Logon Policy region. This setting is required to enable services to run without a logged in user. e. Click Next to validate the credentials and display the Database page. Installing common EMC SourceOne components 111

112 Installing Common EMC SourceOne Components 9. Enter the database information. Note: Some of this information may be pre-filled if you have already installed other EMC SourceOne software (such as Master Services software) on this computer. Accept the default values. a. Type the Activity Database name. b. Type the Activity Database Server host name. If you are using the default named instance, enter the SQL Server name in the following format: hostname If you are using a named instance, enter the SQL Server name and instance in the following format: hostname\instance c. Type the Search Database name. d. Type the Search Database Server host name. If you are using the default named instance, enter the SQL Server name in the following format: hostname If you are using a named instance, enter the SQL Server name and instance in the following format: hostname\instance e. Click Next. 10. If you are installing the EMC SourceOne Worker Services software on a computer on which Lotus Notes is installed, the Environment page displays. 11. Enter the Notes password for the EMC SourceOne Lotus Notes account configured during the planning process (see IBM Lotus Domino permissions on page 53). Click Next to validate the password and display the Ready to Install the Program page. 12. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 112 EMC SourceOne Management Version 6.7 Installation Guide

113 Installing Common EMC SourceOne Components 13. Click Finish. Do one of the following: If you are installing EMC SourceOne Worker Services software on a system on which only Microsoft Outlook is installed, go to step 14. If you already installed Master Services software on this computer (and therefore have already configured the Lotus Notes client software) go to step 14. If you are installing EMC SourceOne Worker Services software on a system on which Lotus Notes software is installed, a Lotus Notes configuration wizard is automatically launched. Configure the Notes client software to use the EMC SourceOne Lotus Notes account configured during the planning process (see IBM Lotus Domino permissions on page 53). Ensure that you copy the Notes ID file locally when prompted by the wizard. When the configuration is complete, exit the Notes client.! IMPORTANT In a mixed-mail environment (Microsoft Exchange and IBM Lotus Domino), do not configure the Lotus Notes client as the default mail client. Microsoft Outlook must be the default mail client. 14. A message displays indicating that you must restart the system. Click Yes. 15. If necessary, repeat this procedure on other EMC SourceOne Worker computers. Installing common EMC SourceOne components 113

114 Installing Common EMC SourceOne Components Installing Web Services software Web Services software can be installed on one or more Worker Services computers to support underlying Web functions such as fielding search requests and performing shortcut resolution. Installing Web Services software creates an IIS Web site (SearchWS). This section describes how to install the EMC SourceOne Web Services software on a host computer on which EMC SourceOne Worker Services is installed. This section also includes information on implementing load balancing for the Web Services application. Prerequisites Table 29 Table 29 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions EMC SourceOne software Details Hardware, operating system, network connectivity, and prerequisite software requirements are described in Worker Services host computer requirements on page 59. Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. Install Worker Services software on this computer prior to installing the Web Services software. ASP.NET considerations EMC SourceOne uses several Microsoft Internet Information Services (IIS) Web sites to support product functionality. These sites require ASP.NET 2.0 (as described in Establishing system requirements on page 54). If the default Web site on the IIS server is configured to use ASP.NET 1.1, the EMC SourceOne installation will change the version to ASP.NET 2.0, resulting in a restart of IIS. An error message similar to the following may be observed as a result of the IIS restart: Failed while restarting W3SVC. Error code: 0x You can avoid this error being generated by ensuring that the default Web site on your IIS server is configured to use ASP.NET 2.0 before installing EMC SourceOne software. 114 EMC SourceOne Management Version 6.7 Installation Guide

115 Installing Common EMC SourceOne Components Procedures Table 30 provides an overview of the procedures to install and configure EMC SourceOne Web Services software on a host computer. Table 30 Procedures Step Procedure Details 1 Copy setup executable locally on page Install Web Services software on page 115 Copies the installation executables locally to the computer. Installs the EMC SourceOne Web Services software. 3 Configuring load balancing on page 117 Optional. Configure load balancing. 4 Configure firewall rules (Windows Server 2008 R2 only) on page Configure IIS 7.5 role services (Windows Server 2008 R2 only) on page Configure single sign-on (SSO) on page Review IBM Lotus Domino consideration on page 119 Configures rules to allow EMC SourceOne services and system components to communicate with other services on the network. If installing on Windows Server 2008 R2, configure required service roles. Provides a reference to information on configuring single sign-on. Review this consideration if installing in an IBM Lotus Domino environment. Copy setup executable locally To copy the setup executable for the EMC SourceOne Web Services software locally to the host computer: 1. Log in to the host computer using the EMC SourceOne installation account. 2. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 3. Copy the ES1_WebServicesSetup.exe executable to a temporary location on the host computer. Install Web Services software To install the EMC SourceOne Web Services software: 1. Navigate to the temporary location to which you copied the setup executable. Installing common EMC SourceOne components 115

116 Installing Common EMC SourceOne Components 2. Double-click the ES1_WebServicesSetup.exe file and click Run. The Welcome page displays. 3. Click Next to display the Destination Folder page. 4. Accept the default location and click Next to display the Logon Information page. 5. Enter the logon information: a. Type the Domain. b. Type the Username and Password. This is the EMC SourceOne primary service account username and password. c. Type the EMC SourceOne Security Group. The service account must be a member of this Security Group. 116 EMC SourceOne Management Version 6.7 Installation Guide

117 Installing Common EMC SourceOne Components d. The Enable checkbox is already checked in the Service Logon Policy region. This setting is required to enable services to run without a logged in user. e. Click Next to validate the credentials and display the Ready for Software Installation page. 6. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 7. Click Finish. Configuring load balancing To support load balancing across two or more Worker Services computers running Web Services software, you can utilize network load balancing using an appliance or software solution such as the Microsoft Network Load Balancing Service (NLBS). You can install Web Services software on multiple Worker Services computers and configure EMC SourceOne applications that require a Web Services location to access a virtual host name configured using the appropriate load balancing solution. The service then distributes the requests to multiple servers to balance the load. Once you establish the virtual host name, you can specify this host information when installing EMC SourceOne applications that require you to provide the Web Services location. Several application installations require a Web Services location, depending on the environment. All environments EMC SourceOne Search Mobile Services Management environments Extensions for OWA 2003 Support Extensions for OWA 2007 Support Extension for OWA 2010 Support Extensions for IBM Lotus Domino Support Offline Access SharePoint environments SharePoint Archive Search Installing common EMC SourceOne components 117

118 Installing Common EMC SourceOne Components Details for selecting a virtual host name when identifying the Web Services location are provided within the installation procedure for each of these components. Configure firewall rules (Windows Server 2008 R2 only) If using Windows Server 2008 R2, create new firewall inbound rules to allow connections to the following EMC SourceOne services: EMC SourceOne Document Management Service (DocManageSvcHost.exe) EMC SourceOne Offline Access Retrieval Service (DocManageSvcOAHost.exe) Refer to the following Microsoft article for details on configuring firewall rules using Windows Firewall with Advanced Security in Windows Server 2008 R2: Configure IIS 7.5 role services (Windows Server 2008 R2 only) For Windows 2008 R2, use Server Manager to configure the role services using the information in Table 31.. Table 31 IIS 7.5 Role Services and EMC SourceOne SearchWS requirements IIS Role Service Required for EMC SourceOne Web Services (SearchWS) Common HTTP Features Static Content Default Document HTTP Errors Required Required Required Application Development Features ASP.NET.NET Extensibility ISAPI Extensions ISAPI Filters Required Required (for ASP.NET) Required (for ASP.NET) Required (for ASP.NET) Security Features Basic Authentication Required 118 EMC SourceOne Management Version 6.7 Installation Guide

119 Installing Common EMC SourceOne Components Table 31 IIS 7.5 Role Services and EMC SourceOne SearchWS requirements IIS Role Service Windows Authentication Request Filtering Required for EMC SourceOne Web Services (SearchWS) Required (if using SSO) Required Management Tools IIS Management Console Required Note: If using SSO, the IIS Management Console is required to perform the SSO configuration. A local instance is required if server is not remotely managed. IIS Metabase Compatibility Required Configure single sign-on (SSO) For information on configuring SSO, refer to the following sections: Configuring Single Sign-on Support (Windows) Configuring Single Sign-on Support (Domino) Note: You can wait until all EMC SourceOne IIS sites (Web Services, Search and Mobile Services) are installed before configuring SSO. Review IBM Lotus Domino consideration If you are running EMC SourceOne Web Services in a Domino-only environment, note that the Web Services installation creates a service called EMC SourceOne Offline Access Retrieval Service. This service is configured to start automatically, but is only necessary in an Exchange environment. You can safely configure this service to start manually. Installing common EMC SourceOne components 119

120 Installing Common EMC SourceOne Components Installing the EMC SourceOne Search application The EMC SourceOne Search application installs an IIS Web site (Search) which supports the Web client interface to end users and passes query and results data to and from the EMC SourceOne Web Services software installed on a Worker Services computer. Deployment scenarios Depending on the size of your environment, load balancing requirements, and security considerations, you can deploy the EMC SourceOne application in several ways. Single-box scenario You can install the EMC SourceOne Search application on a single EMC SourceOne Web Services computer. Figure 9 Search deployment - single-box scenario Load balancing scenario You can install the EMC SourceOne Search application on two or more EMC SourceOne Web Services computers and configure network load balancing using an appliance or software solution such as Microsoft Network Load Balancing Service (NLBS). When using a network load balancer, you must configure server affinity (also referred to as sticky sessions) to ensure that a Web browser s requests are handled by the same Search server instance throughout the duration of the user s session. 120 EMC SourceOne Management Version 6.7 Installation Guide

121 Installing Common EMC SourceOne Components Figure 10 Secure Sockets Layer (SSL) considerations User access Search deployment - load balancing scenario Note the following considerations for using SSL with EMC SourceOne Search: During the installation of EMC SourceOne Search, you are presented with the option of enabling SSL. If you select this option and SSL is not enabled for the Web Services, EMC SourceOne Search will not be able to communicate with the Web Services. Ensure that SSL is enabled for Web Services before selecting this option during the install. Sensitive data is transmitted between EMC SourceOne Search and EMC SourceOne Web Services. If you are installing EMC SourceOne Search on an IIS Web server (e.g., not the same physical computer as the EMC SourceOne Web Services), you should enable SSL when installing EMC SourceOne Search. If you are installing EMC SourceOne Search on an IIS Web server, you should configure SSL for the Web server itself. Sensitive information such as usernames and passwords are transferred between a user s Web browser and the Web server. This SSL configuration recommendation is unrelated to the Web Services SSL configuration and enabling SSL during EMC SourceOne Search installation. Users can access the application from their browser using a URL and authenticate using their Windows Logon or Lotus Notes credentials as described in the EMC SourceOne Search User Guide. Installing common EMC SourceOne components 121

122 Installing Common EMC SourceOne Components Prerequisites Table 32 Table 32 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions EMC SourceOne software Details Hardware, operating system, network connectivity, and prerequisite software requirements are described in Worker Services host computer requirements on page 59 if installing in the one of the following deployment scenarios: Single-box scenario on page 120 Load balancing scenario on page 120 If installing on an IIS Web server, see Storage environment requirements on page 62. Ensure that Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. This installation requires that an EMC SourceOne Web Services computer exists and is accessible on the network. You will specify this host name during the EMC SourceOne Search installation. If you have configured two or more Web Services computers in a load balancing cluster, you will instead specify the virtual host name during the EMC SourceOne Search software installation. See Configuring load balancing on page 117 for more information. ASP.NET considerations EMC SourceOne uses several Microsoft Internet Information Services (IIS) Web sites to support product functionality. These sites require ASP.NET 2.0 (as described in Establishing system requirements on page 54). If the default Web site on the IIS server is configured to use ASP.NET 1.1, the EMC SourceOne installation will change the version to ASP.NET 2.0, resulting in a restart of IIS. An error message similar to the following may be observed as a result of the IIS restart: Failed while restarting W3SVC. Error code: 0x You can avoid this error being generated by ensuring that the default Web site on your IIS server is configured to use ASP.NET 2.0 before installing EMC SourceOne software. 122 EMC SourceOne Management Version 6.7 Installation Guide

123 Installing Common EMC SourceOne Components Procedures Table 33 Table 33 provides an overview of the procedures to install and configure EMC SourceOne Search software on a Worker Services host computer or a Web server. Procedures Step Procedure Details 1 Copy the setup executable locally on page Install EMC SourceOne Search software on page Configure IIS 7.5 role services (Windows Server 2008 R2 only) on page Configure single sign-on (SSO) on page 127 Copies the installation executables locally. Installs the EMC SourceOne Search software. If installing on Windows Server 2008 R2, configure required service roles. Provides a reference to information on configuring single sign-on. Copy the setup executable locally To copy the setup executable for the EMC SourceOne Search software locally to the host computer: 1. If installing the software on an: EMC SourceOne Worker Services computer, log in to the host computer using the EMC SourceOne installation account. IIS Web server, log in to the host computer using an account which is a member of the local administrators group. 1. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 2. Copy the ES1_SearchSetup.exe executable to a temporary location on the host computer. Install EMC SourceOne Search software To install the EMC SourceOne Search application software: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the ES1_SearchSetup.exe file and click Run. The Welcome page displays. Installing common EMC SourceOne components 123

124 Installing Common EMC SourceOne Components Note: When the installer is run, it validates the system configuration to ensure that prerequisite components are installed. Depending on your system configuration, the installer may automatically install one or more prerequisite components before displaying the Welcome page. Automatically installed components are listed in Establishing system requirements on page Click Next to display the Destination Folder page. 4. Accept the default location and click Next to display the Logon Information page. 5. Enter the logon information: a. Type the Domain. 124 EMC SourceOne Management Version 6.7 Installation Guide

125 Installing Common EMC SourceOne Components b. Type the Username and Password. This is the EMC SourceOne primary service account username and password. c. Type the EMC SourceOne Security Group. The service account must be a member of this Security Group. d. The Enable checkbox is already checked in the Service Logon Policy region. This setting is required to enable services to run without a logged in user. 6. Click Next to display the Web Services page. 7. Enter the Server Name for the computer on which Web Services software is installed. If using SSL, enter the server name or alias to which the SSL certificate was issued. 8. Optionally select the Use SSL (Secure Sockets Layer) checkbox to enable EMC SourceOne Search to communicate with Web Services using an SSL connection only if you have already configured SSL for the Web Services. Review the considerations described in Secure Sockets Layer (SSL) considerations on page 121 before proceeding. 9. Click Next to display the Product Shortcuts page. 10. Click Next to validate the credentials and display the Ready for Software Installation page. 11. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 12. Click Finish. Installing common EMC SourceOne components 125

126 Installing Common EMC SourceOne Components Configure IIS 7.5 role services (Windows Server 2008 R2 only) For Windows 2008 R2, use Server Manager to configure the role services using the information in Table 34.. Table 34 IIS 7.5 Role Services and EMC SourceOne requirements (Search) IIS Role Service Required for EMC SourceOne Search (Search) Common HTTP Features Static Content Default Document HTTP Errors Required Required Required Application Development Features ASP.NET.NET Extensibility ISAPI Extensions ISAPI Filters Required Required (for ASP.NET) Required (for ASP.NET) Required (for ASP.NET) Security Features Basic Authentication Windows Authentication Request Filtering Required Required (if using SSO) Required Management Tools IIS Management Console Required Note: If using SSO, the IIS Management Console is required to perform the SSO configuration. A local instance is required if server is not remotely managed. IIS Metabase Compatibility Required 126 EMC SourceOne Management Version 6.7 Installation Guide

127 Installing Common EMC SourceOne Components Configure single sign-on (SSO) For information on configuring SSO, refer to the following sections: Configuring Single Sign-on Support (Windows) Configuring Single Sign-on Support (Domino) Note: You can wait until all EMC SourceOne IIS sites (Web Services, Search and Mobile Services) are installed before configuring SSO. Installing Mobile Services software You can install the Mobile Services software on one or more Worker Services computers or on a separate IIS Web server to provide Universal URL support for EMC SourceOne Management users, specifically: Mobile users Outlook Web Access users Outlook users who do not have the EMC SourceOne Offline Access installed. For EMC SourceOne for File Systems users, the Universal URL also provides support for resolution of links to files in the Native Archive which were archived from a file server. Installing Mobile Services software creates an IIS Web site (ExShortcut). Installing common EMC SourceOne components 127

128 Installing Common EMC SourceOne Components Prerequisites Table 35 Table 35 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions EMC SourceOne software Details Worker Services computer - Hardware, operating system, network connectivity, and prerequisite software requirements are described in Worker Services host computer requirements on page 59. IIS Web server - Hardware, operating system, network connectivity, and prerequisite software requirements are described in Storage environment requirements on page 62. Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. This installation requires that an EMC SourceOne Web Services computer exists and is accessible on the network. You will specify this host name during the EMC SourceOne Mobile Services installation. If you have configured two or more Web Services computers in a load balancing cluster, you will instead specify the virtual host name during the EMC SourceOne Mobile Services software installation. See Configuring load balancing on page 117 for more information. Procedures Table 36 Table 36 provides an overview of the procedures to install and configure Mobile Services software on a host computer. Procedures Step Procedure Details 1 Copy the setup executable locally on page Install Mobile Services software on page Configure IIS 7.5 role services (Windows Server 2008 R2 only) on page Configure single sign-on (SSO) on page 133 Copies the installation executables locally. Installs the EMC SourceOne Mobile Services software. If installing on Windows Server 2008 R2, configure required service roles. Provides a reference to information on configuring single sign-on. 128 EMC SourceOne Management Version 6.7 Installation Guide

129 Installing Common EMC SourceOne Components Copy the setup executable locally To copy the setup executable for the Mobile Services software locally to the host computer: 1. Log in to the host computer using the EMC SourceOne installation account. 2. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 3. Copy the ES1_MobileSetup.exe executable to a temporary location on the host computer. Install Mobile Services software To install the Mobile Services software: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the ES1_MobileSetup.exe file and click Run. The Welcome page displays. 3. Click Next to display the Destination Folder page. Installing common EMC SourceOne components 129

130 Installing Common EMC SourceOne Components 4. Accept the default location and click Next to display the Logon Information page. 5. Enter the logon information: a. Type the Domain. b. Type the Username and Password. This is the EMC SourceOne primary service account username and password. c. Type the EMC SourceOne Security Group. The service account must be a member of this Security Group. d. The Enable checkbox is already checked in the Service Logon Policy region. This setting is required to enable services to run without a logged in user. 130 EMC SourceOne Management Version 6.7 Installation Guide

131 Installing Common EMC SourceOne Components 6. Click Next to validate the credentials and display the Web Services page. 7. Enter the Server Name for the computer on which Web Services software is installed. Note the following: If using load balancing such as Microsoft NLBS, enter the virtual host name. If using SSL, enter the server name or alias to which the SSL certificate was issued. 8. Click next to display the Ready for Installation page. 9. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 10. Click Finish. Installing common EMC SourceOne components 131

132 Installing Common EMC SourceOne Components Configure IIS 7.5 role services (Windows Server 2008 R2 only) For Windows 2008 R2, use Server Manager to configure the role services using the information in Table 37.. Table 37 IIS 7.5 Role Services and EMC SourceOne requirements IIS Role Service Required for EMC SourceOne Mobile Services (ExShortcut) Common HTTP Features Static Content Default Document HTTP Errors Required Required Required Application Development Features ASP.NET.NET Extensibility ISAPI Extensions ISAPI Filters Required Required (for ASP.NET) Required (for ASP.NET) Required (for ASP.NET) Security Features Basic Authentication Windows Authentication Request Filtering Required Required (if using SSO) Required Management Tools IIS Management Console Required Note: If using SSO, the IIS Management Console is required to perform the SSO configuration. A local instance is required if server is not remotely managed. IIS Metabase Compatibility Required 132 EMC SourceOne Management Version 6.7 Installation Guide

133 Installing Common EMC SourceOne Components Configure single sign-on (SSO) For information on configuring SSO, refer to the following sections: Configuring Single Sign-on Support (Windows) Configuring Single Sign-on Support (Domino) Note: You can wait until all EMC SourceOne IIS sites (Web Services, Search and Mobile Services) are installed before configuring SSO. Installing Native Archive Services software This section describes how to install the Native Archive Services software on a host computer. Prerequisites Table 38 Table 38 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Local disk space Accounts and permissions Details Hardware, operating system, network connectivity, and prerequisite software requirements are described in Native Archive Services host computer requirements on page 61. If the Native Archive server is to be used for indexing, you must have a minimum amount of free disk space available to support local index processing. Refer to the Native Archive disk configuration and storage information in Reference configurations on page 26. Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. Installing common EMC SourceOne components 133

134 Installing Common EMC SourceOne Components Procedures Table 39 Table 39 provides an overview of the procedures to install and configure EMC SourceOne Native Archive Services software on a host computer. Procedures Step Procedure Details 1 Copy the setup executable locally on page Install Native Archive Services software on page Configure firewall rules (Windows Server 2008 only) on page 139 Copies the installation executables locally to the Native Archive Services host computer. Installs the EMC SourceOne Native Archive Services software. Configures rules to allow EMC SourceOne services and system components to communicate with other services on the network. Copy the setup executable locally To copy the setup executable for the Native Archive Services software locally to the host computer: 1. Log in to the host computer using the EMC SourceOne installation account. 2. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 3. Copy the ES1_ArchiveSetup.exe file to a temporary location on the Native Archive services host computer. Install Native Archive Services software To install the Native Archive Services software: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the ES1_ArchiveSetup.exe file and click Run. The Welcome page displays. The installer: Validates the system configuration to ensure that prerequisite components are installed. Depending on your system configuration, the installer may automatically install one or more prerequisite components before displaying the Welcome page. Automatically installed components are listed in Establishing system requirements on page EMC SourceOne Management Version 6.7 Installation Guide

135 Installing Common EMC SourceOne Components Inspects whether the Microsoft Windows East Asian Language Pack is installed. This language pack is required to support full-text indexing of East Asian content. If support is not installed, a warning message is displayed. For information on enabling the appropriate support before installing the Native Archive software, refer to Regional and language options to support indexing on page 78. Inspects the local drives to determine if adequate space (20 GB) is available to support indexing. If this Native Archive server is to be used for indexing, you must have a minimum amount of free disk space available. Refer to the Native Archive disk configuration and storage information in Reference configurations on page 26. Click Yes to cancel the setup and allocate the local space. If this server is not used for indexing, click No to ignore the warning and continue with the installation. 3. Click Next to display the Destination Folder page. 4. Specify the destination directories: a. The first destination determines where the primary Native Archive Services files are installed. Click Change to specify a different directory, or accept the default directory. Note: Choose a drive other than the operating system drive. Installing common EMC SourceOne components 135

136 Installing Common EMC SourceOne Components b. The second destination identifies the work directory, which is a temporary storage area for message processing. You should specify a directory with at least 1 GB free space. 5. Click Next to display the Destination Folder page. 6. Specify a destination folder (i.e., Index Work directory) used to perform Native Archive indexing. If this Native Archive server will not perform indexing, select a destination folder on a local drive (other than the operating system drive), ignore any warnings about insufficient disk space, and continue with the installation. If this Native Archive server will perform indexing, this location: Must be regarded as a local drive by the operating system. Can not be the operating system drive (e.g., C:). Can be on local disk or SAN storage, as long as it is regarded as a local drive by the Native Archive server. For best performance, this should be on a dedicated physical disk. Requires a minimum of 20 GB of free disk space be available if this Native Archive Server is to perform indexing. Note: You can change the index work directory at any time post-installation. Refer to Native Archive Index Work directory considerations on page 70 for details. 136 EMC SourceOne Management Version 6.7 Installation Guide

137 Installing Common EMC SourceOne Components 7. Click Next to display the Logon Information page. 8. Enter the logon information: a. Type the Domain. b. Type the Service Account and Service Account Password. This is the EMC SourceOne primary service account username and password. c. Type the EMC SourceOne Security Group. The service account must be a member of this Security Group. d. The Enable checkbox is already checked in the Service Logon Policy region. This setting is required to enable services to run without a logged in user. Installing common EMC SourceOne components 137

138 Installing Common EMC SourceOne Components e. Click Next to validate the credentials and display the Database page. 9. Enter the database information: a. Type the Native Archive Database name. b. Type the Native Archive Database Server host name. If you are using the default named instance, enter the SQL Server name in the following format: hostname If you are using a named instance, enter the SQL Server name and instance in the following format: hostname\instance c. Click Next to display the Ready to Install the Program page. 10. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 11. Click Finish. 12. A message displays indicating that you must restart the system. Click Yes. 138 EMC SourceOne Management Version 6.7 Installation Guide

139 Installing Common EMC SourceOne Components Configure firewall rules (Windows Server 2008 only) If using Windows Server 2008, create inbound firewall rules as follows: 1. Create new firewall inbound rules to allow connections to the following EMC SourceOne services: EMC SourceOne Archive (ExAsArchive.exe) EMC SourceOne Query (ExAsQuery.exe) Refer to the following Microsoft article for details on configuring firewall rules using Windows Firewall with Advanced Security in Windows Server 2008: 2. Configure an inbound ICMP rule for ICMPv4. Refer to the following Microsoft article: %29.aspx 3. Enable the firewall exception rule for Enable COM+ Network Access (DCOM-In). Refer to the following Microsoft article: %29.aspx Installing common EMC SourceOne components 139

140 Installing Common EMC SourceOne Components Maintaining the installation This section provides information on maintaining installation of the components described in this chapter. Upgrade Refer to the product release notes for detailed instructions on upgrading EMC SourceOne product databases and components. Remove a component To remove (uninstall) an EMC SourceOne product component that is installed on a Microsoft Windows system: 1. Using an account that is a member of the local Administrators group, access the Microsoft Windows Add or Remove Programs dialog box. 2. Select the appropriate component and click Remove. 3. Follow the prompts to remove the component. Repair a component Windows 2003 systems Windows 2008 systems Repairing a component can fix missing or corrupt files, shortcuts, and registry entries. Due to differences in the permissions model between Windows 2003 and Windows 2008, use the appropriate procedure for your environment as described in the following sections. To repair an EMC SourceOne product component that is installed on a Microsoft Windows 2003 system: 1. Using an account that is a member of the local Administrators group, access the Microsoft Windows Add or Remove Programs dialog box. 2. Select the appropriate component and click Change. 3. Follow the prompts to repair the component. To repair an EMC SourceOne product component that is installed on a Microsoft Windows 2008 system, do one of the following, depending on the account your are logged in as. If you are logged in as the local system Administrator (highest permission level) Do the following: 1. Access the Microsoft Windows Program and Features dialog box. 140 EMC SourceOne Management Version 6.7 Installation Guide

141 Installing Common EMC SourceOne Components 2. Select the appropriate component and click Change. 3. Follow the prompts to repair the component. If you are logged in as a member of the local Administrators group Do the following: 1. Access the original setup executable for the EMC SourceOne component. 2. Run the executable. 3. Follow the prompts to repair the component. Maintaining the installation 141

142 Installing Common EMC SourceOne Components 142 EMC SourceOne Management Version 6.7 Installation Guide

143 6 Installing Management Support This chapter describes how to install the required and optional components of EMC SourceOne Management. Each section in this chapter is presented in the order in which the components should be installed, as some installed components are dependent on previously installed components. This chapter is organized as follows: Pre-installation checklist Installing Management components for Exchange Installing Management components for Domino Maintaining the installation Note: This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above). For details, see Guide to using this document on page 10. Installing Management Support 143

144 Installing Management Support Pre-installation checklist Before beginning the installation procedures detailed in this chapter, ensure that the items in the following checklist are completed. Table 40 Pre-installation checklist Activity Review the product overview information Understand the system architecture Description Review the product overview information and understand the features and options. See Product overview on page 12 and the EMC SourceOne Administration Guide. Review the components which comprise EMC SourceOne system. See System architecture on page 17 and System components on page 18. Complete analysis activities Compile and analyze the organization s requirements, metrics and processes. See Pre-deployment planning on page 24. Complete configuration planning activities Configure accounts and permissions Establish required hardware and network infrastructure Install common EMC SourceOne infrastructure Size the environment and adjust variable components of the configuration to support it. See System architecture on page 17 and Reference configurations on page 26. Establish the accounts and permissions required to support EMC SourceOne. See Pre-installation on page 37. Ensure that the appropriate hardware is available for installation and connected to the network. Hardware specifications, operating system, and network connectivity, and software prerequisites are detailed in Pre-installation on page 37. Establish the EMC SourceOne common infrastructure as described in Installing Common EMC SourceOne Components on page EMC SourceOne Management Version 6.7 Installation Guide

145 Installing Management Support Installation overview Table 41 provides an overview of the EMC SourceOne Management installations presented in the order in which you should perform them. Table 41 Installation procedure overview Installation/ Configuration Details Procedure Extensions for OWA software Extensions for IBM Lotus Domino ONM Viewer software If applicable in your environment, install extensions on Microsoft Exchange to support Outlook Web Access 2003, 2007, or If applicable in your environment, install and configure support for journaling and shortcutting on Lotus Domino servers. Installs the ONM Viewer software on client computers. Enables users to open Lotus Notes messages from EMC SourceOne Search results. Installing Extensions for OWA 2003 Support on page 147 Installing Extensions for OWA 2007 or 2010 Support on page 153 Domino Configuration and Administration on page 193 Installing the ONM Viewer software on page 186 Installation overview 145

146 Installing Management Support Installing Management components for Exchange The EMC SourceOne Extensions for Microsoft Outlook Web Access software is installed on a computer running Microsoft Exchange Server. A separate installation procedure is provided for each of the supported Microsoft Exchange versions. Topics include: Installing Extensions for OWA 2003 Support Installing Extensions for OWA 2007 or 2010 Support EMC SourceOne Management Version 6.7 Installation Guide

147 Installing Management Support Installing Extensions for OWA 2003 Support This section describes how to install the EMC SourceOne Extensions for Microsoft Outlook Web Access software on a computer running Microsoft Exchange Server Note: To install the Extensions for OWA 2007 or Extensions for OWA 2010 Support software on a computer running Microsoft Exchange Server 2007 or Exchange Server 2010, see Installing Extensions for OWA 2007 or 2010 Support on page 153. Prerequisites Table 42 Table 42 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions EMC SourceOne software Details This software is installed with Microsoft Exchange Server 2003 versions supported by EMC SourceOne. Refer to the EMC SourceOne Products Compatibility Guide for details. Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. This installation requires that an EMC SourceOne Web Services computer exists and is accessible on the network. You will specify this host name during the EMC SourceOne Extensions for OWA 2003 Support software installation. If you have configured two or more Web Services computers in a load balancing cluster, you will instead specify the virtual host name during the EMC SourceOne Extensions for OWA 2003 Support software installation. See Configuring load balancing on page 117 for more information. Installing Management components for Exchange 147

148 Installing Management Support Considerations Review the following considerations before installing the software. Server type You install this software only on Microsoft Exchange Server 2003 back-end servers. You do not need to install this software on Microsoft Exchange Server 2003 front end servers. ASP.NET considerations EMC SourceOne uses several Microsoft Internet Information Services (IIS) Web sites to support product functionality. These sites require ASP.NET 2.0 (as described in Establishing system requirements on page 54). If the default Web site on the IIS server is configured to use ASP.NET 1.1, the EMC SourceOne installation will change the version to ASP.NET 2.0, resulting in a restart of IIS. An error message similar to the following may be observed as a result of the IIS restart: Failed while restarting W3SVC. Error code: 0x You can avoid this error being generated by ensuring that the default Web site on your IIS server is configured to use ASP.NET 2.0 before installing EMC SourceOne software. Clustered Exchange considerations If installing the Extensions for OWA 2003 Support software in a clustered Exchange Server environment, you should plan appropriately for the installation of this software on each node and against each Exchange Virtual Server in the cluster group. Review these considerations: The node on which you are installing the software must have an active Exchange Virtual Server, or the installation cannot proceed. Run the installation on the first active node in the cluster. When prompted for the Exchange server name, enter the name of the Exchange Virtual Server that is active on that node. Run the installation on the next active node in the cluster. When prompted for the Exchange server name, enter the name of the Exchange Virtual Server that is active on that node. Ensure that this Virtual Server is not the same Virtual Server you specified when installing on the previous node. Note: Ultimately, you must specify each Exchange Virtual Server in your cluster configuration at least once during the installation of the OWA Extensions. 148 EMC SourceOne Management Version 6.7 Installation Guide

149 Installing Management Support Before running the installation on a passive node, perform a failover so that an Exchange Virtual Server is running on that node. When prompted by the install for the Exchange server name, enter the name of the Exchange Virtual Server that is active on that node. Ensure that this Virtual Server is not one of the Virtual Servers you specified when installing on previous nodes. Repeat this process until all Exchange Virtual Servers have been specified at least once during the installation of the Extensions for OWA 2003 Support software. Procedures Table 43 Table 43 provides an overview of the procedures to install and configure EMC SourceOne for OWA 2003 Support software on a computer running Microsoft Exchange Server Procedures Step Procedure Details 1 Copy the setup executable locally on page Install Extensions for OWA 2003 software on page 149 Copies the installation executables locally to the Exchange computer. Installs the EMC SourceOne Extensions for OWA 2003 Support software. Copy the setup executable locally To copy the setup executable for the Extensions for OWA 2003 software locally to the Microsoft Exchange Server 2003 host computer: 1. Navigate to the Setup\Windows directory on the EMC SourceOne Management Extensions for OWA software kit. 2. Copy the ES1_OWA2003Setup.exe file to a temporary location on the Exchange computer. Install Extensions for OWA 2003 software To install the EMC SourceOne Extensions for OWA 2003 Support software: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the ES1_OWA2003Setup.exe file and click Run. The Welcome page displays. Installing Management components for Exchange 149

150 Installing Management Support 3. Click Next to display the Destination Folder page. 4. Specify the destination directory. Click Change to specify a different directory, or accept the default directory. 5. Click Next to display the Logon Information page. 6. Enter the logon information: a. Type the Domain. b. Type the Service Account and Service Account Password. Depending on the Active Directory accounts you created during the planning process, the service account used when installing the Extensions for OWA Support software can be one of the following: Primary service account 150 EMC SourceOne Management Version 6.7 Installation Guide

151 Installing Management Support OWA service account For a more detailed discussion, see the following topics: Creating accounts in Active Directory on page 39 Additional service accounts to support least privileges on page 77 c. Type the EMC SourceOne Security Group. The service account must be a member of this Security Group. d. The Enable checkbox is already checked in the Service Logon Policy region. This setting is required to enable services to run without a logged in user. e. Click Next to validate the credentials and display the Web Services page. 7. Enter the Server Name for the computer on which Web Services software is installed. Note the following: If using load balancing such as Microsoft NLBS, enter the virtual host name. If using SSL, enter the server name or alias to which the SSL certificate was issued. Installing Management components for Exchange 151

152 Installing Management Support 8. Click Next to display the Messaging Server page. 9. Enter the messaging server information: a. Type the Server Name. If you are using: An Exchange Server 2003 cluster configuration, type the Exchange Virtual Server name. Ensure that you review the considerations for a cluster configuration provided in Clustered Exchange considerations on page 148. A single Exchange server configuration, type the host name of the current Exchange server. b. Type the SMTP Domain. This information is used for registering OWA 2003 shortcut forms. The SMTP domain name configured for this Exchange server is displayed by default. Accept the default information or type the correct SMTP domain. c. Type the Server Domain in which the Exchange server (or Exchange Virtual Server) is located.! IMPORTANT The information on this page is not validated by the installation program. Ensure that you provide accurate information. 10. Click Next to display the Ready for Installation page. 152 EMC SourceOne Management Version 6.7 Installation Guide

153 Installing Management Support 11. Click Install Once the installation is complete, the InstallShield Wizard Completed Page displays. 12. Click Finish. Installing Extensions for OWA 2007 or 2010 Support This section describes how to install the EMC SourceOne Extensions for Microsoft Outlook Web Access software on a computer running one of the following: Microsoft Exchange Server 2007 Microsoft Exchange Server 2010 Note: To install the Extensions for OWA 2003 Support software on a computer running Microsoft Exchange Server 2003, see Installing Extensions for OWA 2003 Support on page 147. Installing Management components for Exchange 153

154 Installing Management Support Prerequisites Table 44 Table 44 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions EMC SourceOne software Details This software is installed with Microsoft Exchange Server 2007 or Exchange Server 2010 versions supported by EMC SourceOne. Refer to the EMC SourceOne Messaging Compatibility Guide for details. Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. This installation requires that an EMC SourceOne Web Services computer exists and is accessible on the network. You will specify this host name during the EMC SourceOne Extensions for OWA 2007 Support or EMC SourceOne Extensions for OWA 2010 Support software installation. If you have configured two or more Web Services computers in a load balancing cluster, you will instead specify the virtual host name during this installation. See Configuring load balancing on page 117 for more information. Considerations Review the considerations in this section before installing the software. Server type You install this software only on Exchange Server 2007 or Exchange Server 2010 running the Client Access Server role. You do not need to install this software on Exchange Server 2007 or Exchange Server 2010 running only the Mailbox Server role. Exchange version A separate EMC SourceOne Extensions for Microsoft Outlook Web Access installer is provided for Exchange Server 2007 and Exchange Server The installer interface for either version of Exchange is essentially the same, and therefore is documented in this single section (although screenshots are specific to Exchange Server 2007). Differences between Exchange versions are provided in the text where appropriate. 154 EMC SourceOne Management Version 6.7 Installation Guide

155 Installing Management Support ASP.NET considerations EMC SourceOne uses several Microsoft Internet Information Services (IIS) Web sites to support product functionality. These sites require ASP.NET 2.0 (as described in Establishing system requirements on page 54). If the default Web site on the IIS server is configured to use ASP.NET 1.1, the EMC SourceOne installation will change the version to ASP.NET 2.0, resulting in a restart of IIS. An error message similar to the following may be observed as a result of the IIS restart: Failed while restarting W3SVC. Error code: 0x You can avoid this error being generated by ensuring that the default Web site on your IIS server is configured to use ASP.NET 2.0 before installing EMC SourceOne software. Clustered Exchange considerations If installing the Extensions for OWA in a clustered Exchange Server environment, you should plan appropriately for the installation of this software on each node in the cluster group. The node on which you are installing the software must have Exchange services actively running, or the installation cannot proceed. Therefore, you should: 1. Complete the installation on the currently active node. 2. Failover the cluster to the passive node (activating that node) and install the software. 3. Continue this process until the software is installed on all nodes. Procedures Table 45 Table 45 provides an overview of the procedures to install and configure EMC SourceOne for OWA 2007 Support or EMC SourceOne for OWA 2010 Support software on a computer running Microsoft Exchange Server 2007 or Exchange Server Procedures Step Procedure Details 1 Copy the setup executable locally on page Install Extensions for OWA 2007 or 2010 software on page 156 Copies the installation executables locally to the Exchange computer. Installs one of the following (depending on Exchange Server version): EMC SourceOne Extensions for OWA 2007 Support software EMC SourceOne Extensions for OWA 2010 Support software Installing Management components for Exchange 155

156 Installing Management Support Copy the setup executable locally To copy the setup executable for the Extensions for OWA 2007 or Extensions for OWA 2010 software locally to the Exchange Server 2007 or Exchange Server 2010 host computer: 1. Navigate to the Setup\Windows directory on the EMC SourceOne Management Extensions for OWA software kit. 2. Copy the ExOWA2007Setup.exe or ExOWA2010Setup.exe file to a temporary location on the Exchange computer. Install Extensions for OWA 2007 or 2010 software To install the EMC SourceOne Extensions for OWA 2007 Support or Extensions for OWA 2010 Support software: 1. Navigate to the temporary location to which you copied the setup executable. 2. Double-click the appropriate setup executable file for your Exchange Server version (ExOwa2007Setup.exe or ExOWA2010Setup.exe)and click Run. The Welcome page displays. 3. Click Next to display the Destination Folder page. 4. Specify the destination directory. Click Change to specify a different directory, or accept the default directory. 156 EMC SourceOne Management Version 6.7 Installation Guide

157 Installing Management Support 5. Click Next to display the Logon Information page. 6. Enter the logon information: a. Type the Domain. Type the Service Account and Service Account Password. Depending on the Active Directory accounts you created during the planning process, the service account used when installing the Extensions for OWA Support software can be one of the following: Primary service account OWA service account For a more detailed discussion, see the following topics: Creating accounts in Active Directory on page 39 Additional service accounts to support least privileges on page 77 b. Type the EMC SourceOne Security Group. The service account must be a member of this Security Group. c. The Enable checkbox is already checked in the Service Logon Policy region. This setting is required to enable services to run without a logged in user. Installing Management components for Exchange 157

158 Installing Management Support 7. Click Next to validate the credentials and display the Web Services page. 8. Enter the Server Name for the computer on which Web Services software is installed. Note the following: If using load balancing such as Microsoft NLBS, enter the virtual host name. If using SSL, enter the server name or alias to which the SSL certificate was issued. 9. Click Next to display the Ready for Installation page. 10. Click Install Once the installation is complete, the InstallShield Wizard Completed Page displays. 11. Click Finish. 158 EMC SourceOne Management Version 6.7 Installation Guide

159 Installing Management Support Installing Management components for Domino This section describes how to install the following software to support an IBM Lotus Domino environment: The EMC SourceOne Extensions for IBM Lotus Domino software is installed on IBM Lotus Domino servers to provide support for journaling and shortcutting on IBM Lotus Domino servers running on Microsoft Windows, Sun Solaris, Red Hat Linux, SuSE Linux, IBM AIX, or IBM i operating systems. The ONM Viewer software provides end users on client computers the ability to view Lotus Notes messages from EMC SourceOne Search results in Lotus Notes. Topics include: IBM Lotus Domino support overview Installing Extensions for IBM Lotus Domino Installing the ONM Viewer software IBM Lotus Domino support overview EMC SourceOne Management provides real-time archiving (also referred to as journaling), shortcutting, and historical archiving support for IBM Lotus Domino mail servers. This section includes the following topics: Journaling Shortcutting Historical archiving Supported Domino platforms Journaling Journaling copies messages processed by the Domino server to a designated database from which EMC SourceOne can then archive them. To support journaling, you have the following options: Install EMC SourceOne journaling extensions software on your Domino servers. The extensions automatically create and maintain journaling databases from which you can archive messages using the EMC SourceOne console. Installing Management components for Domino 159

160 Installing Management Support Utilize a native Domino journaling database. You can then target journaling activities against the native Domino journaling database using the EMC SourceOne console. Using EMC SourceOne journaling You must install the EMC SourceOne journaling extensions to support this journaling option. During message journaling, the EMC SourceOne Journaling Extension Manager copies each message on the Domino server to a journaling database. A journaling database (ExJournal.nsf) is created for the Domino mail.box database on the Domino server. If there is more than one mail.box database (mail2.box, mail3.box etc.), the Domino Extensions installer creates corresponding journaling databases using the same numbering scheme (ExJournal1.nsf, ExJournal2.nsf, etc).! IMPORTANT Before installing, ensure that you review the considerations for using EMC SourceOne journaling. For details, refer to EMC SourceOne journaling considerations on page 197. Using Native Domino journaling Native Domino mail journaling enables administrators to capture a copy of specified messages that the Router processes by the Domino system. Journaling can capture all messages handled by the Router or only messages that meet specific defined criteria. When mail journaling is enabled, Domino examines messages as they pass through mail.box and saves copies of selected messages to a Domino Mail Journaling database (e.g., mailjrn.nsf).! IMPORTANT Before installing, ensure that you review the considerations for using native Domino journaling. Included in this information are important settings required for EMC SourceOne to function against a native Domino journaling database. For details, refer to Native Domino journaling considerations on page EMC SourceOne Management Version 6.7 Installation Guide

161 Installing Management Support Shortcutting Historical archiving Shortcutting replaces messages archived by EMC SourceOne with smaller files called shortcuts on the Domino server. Shortcuts are pointers to messages archived in the EMC SourceOne repository. Mail users and mobile users can double-click the shortcut to retrieve the full archived message. To support shortcutting, you install the optional Shortcut Extension Manager on the Domino server. The Shortcut Extension Manager allows mail users to view the original message in the following ways: In the preview pane Opening the full message (double-click) Shortcut messages are retrieved during replication. The mobile user experience is unchanged. Historical archiving support is inherently provided through permissions granted to EMC SourceOne to mail databases on your Domino servers. You do not need to install any EMC SourceOne software to support historical archiving. Supported Domino platforms You can archive mail and support shortcutting on Lotus Domino servers running on the Microsoft Windows, Sun Solaris, Red Hat Linux, SuSE Linux, IBM AIX, or IBM i operating systems. For specific supported platform information, see the EMC SourceOne Products Compatibility Guide. Installing Management components for Domino 161

162 Installing Management Support Configure administrator access to journaling databases Configure access which enables EMC SourceOne administrators to configure Domino-related activities. Before installing journaling functionality, configure a group in Domino which corresponds to the EMC SourceOne Admins Group created in Active Directory which contains users of the EMC SourceOne console (see Creating accounts in Active Directory on page 39 for details on the Admins Group). You then associate the Domino group with each journal database used by EMC SourceOne. Procedure 1. Create a group using Domino Administrator. Use these guidelines: Group name - Use a contextual name such as SourceOne Admins Members - Add the same users in the Active Directory Admins Group to the Domino group. 2. Run the Notes client application using the EMC SourceOne Notes User account (typically on the Master Services computer or a Worker Services computer). 3. Configure the access control for each journal database by adding the Domino group with Reader access. Maintaining the configuration Ensure the following: As the EMC SourceOne Admins Group in Active Directory changes, ensure that users are added and deleted in the corresponding Domino group. As mail.box databases are created (and therefore corresponding journal mailboxes), ensure that you repeat this procedure to configure administrative access to the new journaling databases. 162 EMC SourceOne Management Version 6.7 Installation Guide

163 Installing Management Support Installing Extensions for IBM Lotus Domino The procedures for installing and configuring the Domino extensions software are different depending on the operating system: Installing Extensions for Domino on Microsoft Windows Installing Extensions for Domino on Solaris, Linux, or AIX Installing Extensions for Domino on IBM i Installing Extensions for Domino on Microsoft Windows This section describes how to install extensions for Lotus Domino servers running on Microsoft Windows to support journaling and shortcutting.! IMPORTANT Before installing EMC SourceOne Extensions for Domino, ensure that you have installed all of the common components as described in Installing Common EMC SourceOne Components on page 81. The EMC SourceOne Extensions for Domino install program allows you install support for journaling by installing the Journaling Extension Manager (optional) and shortcutting by installing the Shortcut Extension Manager. You optionally can utilize native Domino journaling or EMC SourceOne journaling. Ensure that you review the considerations for each type of journaling support as described in Journaling on page 159, as this information may impact your choices when installing the software. You must run the EMC SourceOne Extensions for Domino on each Domino server from which you want to journal or shortcut messages. This section includes the following topics: Copy setup executable to the host computer Running the Domino Extensions installer Installation results Consideration for 64-bit OS Configuration and administration Copy setup executable to the host computer To copy the setup executable for the EMC SourceOne Extensions for Domino software locally to the Domino host computer: Installing Management components for Domino 163

164 Installing Management Support 1. Navigate to the Setup\Windows directory on the EMC SourceOne Management Extensions for IBM Lotus Domino software kit. 2. If you are installing on a: 32-bit system Copy the ES1_DominoExtSetup.exe file to a temporary location on the Domino host computer. 64-bit system Copy the ES1_DominoExtSetupx64.exe file to a temporary location on the Domino host computer. Running the Domino Extensions installer To run the EMC SourceOne Extensions for Domino install program: 1. Shut down the Lotus Domino Server application by typing q and pressing Enter in the console window. 2. Double-click the setup file. The Welcome page displays. 3. Click Next to display the Custom Setup page. 4. Enter the custom setup information: a. Select Shortcut Extensions to install EMC SourceOne shortcutting functionality. b. Select Journaling Extensions to install journaling functionality. You have the following choices: SourceOne Journaling - Use EMC SourceOne journaling functionality Native Journaling - Use native Domino journaling functionality and install an agent used to automate the clean up of the Bad Documents Folder. 164 EMC SourceOne Management Version 6.7 Installation Guide

165 Installing Management Support De-select the Journaling Extensions checkbox - No additional journaling software is installed. Choose this option if you want to utilize native Domino journaling, but do not want to install the cleanup agent. Note: Refer to Journaling on page 159 for information about supported types of journaling and specific considerations for each. c. Click Next to display the Notes Folders page. 5. Validate that the Notes folders that are displayed are accurate and click Next to display the Product Servers page. Installing Management components for Domino 165

166 Installing Management Support 6. Type the name of Worker Services host computer on which the EMC SourceOne Web Services software is installed. If using load balancing such as Microsoft NLBS, enter the virtual host name. See Configuring load balancing on page 117 for more information 32-bit systems only If using SSL, select the Use SSL (Secure Sockets Layer) 7. Click Next to display the Username page. 8. Type the fully-qualified hierarchical name of the Lotus Notes user configured during the planning process (see IBM Lotus Domino permissions on page 53). Click Next to validate the account and display the Choose Temporary Folder page. 9. Select a temporary journaling folder and click Next to display the Ready to Install the Program page. 166 EMC SourceOne Management Version 6.7 Installation Guide

167 Installing Management Support 10. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 11. Click Finish. 12. Start the Lotus Domino Server application. Installation results The results depend on the type of journaling support you selected during the installation. EMC SourceOne journaling If you selected EMC SourceOne journaling, the following occurs: Installs ExNotesJournal.dll. Installs the template upon which ExJournal.nsf databases are based. The ExJournal.nsf database(s) are created the first time the Domino server is run after the installation. Two templates are provided. One template enables transactional logging by default and one does not. You can configure which one to use by editing the notes.ini file. See Journaling templates on page 198 for details. Configures the journaling database and makes necessary changes to the Notes.ini file. Installs and configures the ExProcBadDocs agent. This cleanup agent processes corrupt and $Readers field messages by placing them in an envelope message that can be archived. Adds the ExProcBadDocs agent to the ServerTasks= line in the Notes.ini file. Adds the polling interval ( XtenderBadDocsInt=60) for the ExProcBadDocs agent to the Notes.ini file. Native Domino journaling If you selected native Domino journaling, the following occurs: Installs and configures the ExProcBadDocs agent. This agent processes corrupt and $Readers field messages by placing them in an envelope message that can be archived. Installing Management components for Domino 167

168 Installing Management Support Adds the ExProcBadDocs agent to the ServerTasks= line in the Notes.ini file. Adds the polling interval ( XtenderBadDocsInt=60) for the ExProcBadDocs agent to the Notes.ini file. Shortcutting For shortcutting, the EMC SourceOne Extensions for Domino installer: Creates the exshortcut.nsf database. Creates a user called ES1 Shortcut which is used to restore shortcuts. Note: In a clustered Domino environment (in which you run the installation on each computer), a duplicate ES1 Shortcut user is created which may cause shortcut problems. Manually delete one of the users. Updates the Comments field on the Miscellaneous tab for the ES1 Shortcut user to include the name of the Web Services host computer (or virtual host name if using load balancing) that you specified when you installed Domino Extensions. Consideration for 64-bit OS If running 32-bit Domino on a 64-bit Microsoft Windows operating system, and then installing the 32-bit version of the EMC SourceOne Extensions for IBM Lotus Domino, an error such as the following occurs: Error attempting to load or run ExProcBadDocsx64.EXE: Unable to locate program Edit the notes.ini file to update references to two 64-bit entries: 1. Open the notes.ini file. 2. Locate the ServerTasks line and locate ExProcBadDocsx64 and change it to ExProcBadDocs, removing the x64 from the entry. 3. Locate the EXTMGR_Addins line and locate the ExNotesJournalx64 entry and change it to ExNotesJournal, removing the x64 from the entry. 4. Restart your Domino server. Configuration and administration Review the information provided in the Domino Configuration and Administration on page 193 and perform any tasks required for your environment. 168 EMC SourceOne Management Version 6.7 Installation Guide

169 Installing Management Support Installing Extensions for Domino on Solaris, Linux, or AIX This section describes how to configure extensions to Domino servers running on Sun Solaris, Red Hat Linux, SuSE Linux, or IBM AIX to support journaling and shortcutting. For journaling support, you are prompted during the installation to: Install the Journaling Extension Manager which supports journaling on each Domino server. Use native Domino journaling. For shortcutting support, you must install the Shortcut Extension Manager. This section includes the following topics: Running the journaling script on Solaris, Linux, or AIX Installation results Running the shortcutting script on Solaris, Linux, and AIX Installation results Configuration and administration Running the journaling script on Solaris, Linux, or AIX To run the Domino journaling script: 1. Log in as root. 2. Copy the exnotesjournal.tgz file from the Setup/Unix/Notes_Extensions/Journal directory in the EMC SourceOne Management Extensions for IBM Lotus Domino installation kit to a local directory. 3. Set the current default directory to the directory to which you are going to extract the installation files. 4. Extract the installation files from the exnotesjournal.tgz file, which was compressed using the tar and gzip utilities, into the current default directory using the following command: # gunzip -c exnotesjournal.tgz tar xvf - The installation kit files are created in the current default directory, and in the newly created Aix, or Linux, or Solaris subdirectory. 5. Execute the install script, install.sh, using the following command:./install.sh Installing Management components for Domino 169

170 Installing Management Support 6. When prompted, type the directory in which Domino is installed. In the following example, the Domino install directory is /opt/lotus. Specify the Domino Install directory: /opt/lotus Installing Notes Journal Extension Manager in /opt/lotus/notes/latest/linux 7. When prompted, type the Notes data directory so that the install script can update the Notes.ini file. In the following example, the Notes data directory is /local/notesdata. Specify the Notes data directory: /local/notesdata Updating notes/local/notesdata/notes.ini. 8. When prompted, indicate whether you want to use native Domino journaling or EMC SourceOne journaling. Do you want to install IBM Lotus Domino Native Journaling or EMC SourceOne Domino Journaling Extensions? (N/E) Type N for native Domino journaling or E for EMC SourceOne journaling. 9. When prompted, type the fully-qualified hierarchical name of the Lotus Notes administrative user configured during the planning process (see IBM Lotus Domino permissions on page 53) and the Domino domain for the user. Enter them as NotesUser/NotesDomain, where NotesUser is the canonical name of the Notes user and NotesDomain is the Domino domain for that user. In the following example, the username is NotesAdmin and the Domino domain is CompanyDomain. Specify the EMC SourceOne user name: [UserName]/[NotesDomain] NotesAdmin/CompanyDomain 10. When prompted, enter a directory where attachments can be temporarily saved. You can enter either an existing directory or a new directory that the install script will create. In the following example, /local/notesdata/extemp is an existing directory that will be used as the temporary directory for attachments and other EMC SourceOne temporary data. 170 EMC SourceOne Management Version 6.7 Installation Guide

171 Installing Management Support Specify path of directory where attachments can be saved temporarily: /local/notesdata/extemp Existing directory /local/notesdata/extemp XtenderTempPath=/local/notesdata/extemp XtenderUserName=NotesAdmin/CompanyDomain 11. After you enter the temporary directory for attachments, the installation completes and prompts you to stop and then restart the Domino server. Installation complete. Stop the Lotus Domino server and restart it. Installation results The results depend on the type of journaling support you select when running the installation script. EMC SourceOne journaling If you selected EMC SourceOne journaling when running the journaling script on a Solaris, Linux, or AIX server completes the following: Installs libexnotesjournal.so in the program folder of the Domino server. The libexnotesjournal.so monitors incoming and outgoing mail and forwards a copy of all mail to the ExJournal.nsf database. Installs templates upon which ExJournal.nsf databases are based. The ExJournal.nsf database(s) are created the first time the Domino server is run after the installation. There are two templates provided - one which enables transactional logging by default and one that does not. You can configure which one to use by editing the notes.ini file. See Journaling templates on page 198 for details. Note: When you use antivirus software on the mail server, the antivirus software may remove infected messages in the journaling databases (ExJournal.nsf databases) for that mail server. If infected messages are removed from the journaling database, EMC SourceOne does not archive or index the messages. If you have antivirus software that is causing issues with the EMC SourceOne software, contact EMC Customer Support. Installing Management components for Domino 171

172 Installing Management Support Installs the ExProcBadDocs cleanup agent in the Lotus Domino binary directory and places a template in the Lotus Domino data directory (exbaddocs.ntf) Installs $Reader field support, which allows EMC SourceOne to access and archive all documents in a journal database, regardless of the value of the $Reader field. As part of the $Reader field support, ExProcBadDocs cleanup agent creates a EMC SourceOne compound document in the journal database that contains the documents found in the ExBadDocs folder, and then deletes those documents from the journal database. The ExProcBadDocs cleanup agent runs at a default interval of 60 minutes, which you can modify by editing the Notes.ini file for the Domino server. Makes the following changes to the Notes.ini file: Table 46 Journaling script changes to Notes.ini File - EMC SourceOne journaling LINE Change or Addition EXTMGR_ADDINS=libexnotesjour nal.so XtenderUserName= NotesAdministrator/NotesDoma in XtenderBadDocsInt=60 ServerTasks=exprocbaddocs XtenderTempPath=temppat h Description Supports the EMC SourceOne Notes Journaling Extension Utility. The canonical name of the Notes user you created for the EMC SourceOne and the Domino domain for that user. The default interval in minutes at which the $Reader field support agent creates a compound document in the journal database that contains documents found in the ExBadDocs folder. (You can modify this value if necessary.) Adds exprocbaddocs as a server task that is needed for $Reader field support. Used for $Reader field support. Native Domino journaling If you selected native Domino journaling when running the journaling script on a Solaris, Linux, or AIX server completes the following: Installs the ExProcBadDocs cleanup agent in the Lotus Domino binary directory and places a template in the Lotus Domino data directory (exbaddocs.ntf). 172 EMC SourceOne Management Version 6.7 Installation Guide

173 Installing Management Support Makes the following changes to the Notes.ini file: Table 47 Journaling script changes to Notes.ini File - native Domino journaling LINE Change or Addition XtenderBadDocsInt=60 ServerTasks=exprocbaddocs XtenderTempPath=temppat h Description The default interval in minutes at which the $Reader field support agent creates a compound document in the journal database that contains documents found in the ExBadDocs folder. (You can modify this value if necessary.) Adds exprocbaddocs as a server task that is needed for $Reader field support. Used for $Reader field support. Running the shortcutting script on Solaris, Linux, and AIX If you plan to use EMC SourceOne to create shortcuts of messages on the Domino server, run the Domino shortcutting script to install the Shortcut Extension Manager. The Shortcut Extension Manager allows mail users to view the original message either in the preview pane or when they double-click the shortcut to open the message. It also allows mobile users to view shortcut messages. Note: Shortcuts are replicated between server-based mail database replicas, but full messages are replicated to local mail database replicas. The shortcut messages reside on the Domino server, and full messages are in the local mail database for offline use. You must run the shortcutting script on each Domino server from which you want to shortcut messages. To run the shortcutting script on Solaris, Linux, or AIX: 1. Log in as root. 2. Copy the exnotesshortcut.tgz file from the Setup/Unix/Notes_Extensions/Shortcut directory on the EMC SourceOne Management Extensions for IBM Lotus Domino software kit to a local directory. 3. Set the current default directory to the directory where you are going to extract the installation files. Installing Management components for Domino 173

174 Installing Management Support 4. Extract the installation files from the exshortcut.tgz file, which was compressed using the tar and gzip utilities, into the current default directory using the following command: # gunzip -c exnotesshortcut.tgz tar xvf - The installation kit files are created in the current default directory, and in the newly created Aix, or Linux, or Solaris subdirectories. 5. Execute the install script, install.sh, using the following command:./install.sh 6. When prompted, enter the directory in which Domino is installed. (The Shortcut Extension Manager will be installed in this location.) In the following example, the Domino install directory is /opt/lotus: Specify the Domino Install directory: /opt/lotus Installing Notes Shortcut Extension Manager in /opt/lotus/notes/latest/linux The install script automatically identifies the correct operating system and installs the Notes Shortcut Extension Manager accordingly. 7. When prompted, enter the Notes data directory so that the install script can update the Notes.ini file. In the following example, the Notes data directory is /local/notesdata. Specify the Notes data directory: /local/notesdata Updating notes/local/notesdata/notes.ini. 8. When prompted, type the fully-qualified hierarchical name of the Lotus Notes administrative user configured during the planning process (see IBM Lotus Domino permissions on page 53) and the Domino domain for the user. Enter them as NotesAdmin/CompanyDomain, where NotesAdmin is the canonical name of the Notes user and CompanyDomain is the Domino domain for that user. In the following example, the username is NotesAdmin and the NotesDomain is CompanyDomain. Specify the Xtender user name: [ XtenderUserName]/[NotesDomain] NotesAdmin/CompanyDomain 174 EMC SourceOne Management Version 6.7 Installation Guide

175 Installing Management Support 9. When prompted, enter a directory where attachments and other EMC SourceOne temporary data can be temporarily saved. You can enter either an existing directory or a new directory that the install script will create. In the following example, /local/notesdata/extemp is an existing directory that will be used as the temporary attachments directory. Specify path of directory where attachments can be saved temporarily: /local/notesdata/extemp Existing directory /local/notesdata/extemp XtenderTempPath=/local/notesdata/extemp XtenderUserName=NotesAdmin/CompanyDomain 10. After you enter the temporary directory for attachments, the installation completes and prompts you to stop and then restart the Domino server. Installation complete. Stop the Lotus Domino server and restart it. 11. Add a person record called ES1 Shortcut to the public name and address book. a. Set the User Name field to ES1 Shortcut. b. Set the First Name field to ES1. c. Set the Last Name field to Shortcut. d. Set the Full Name field to ES1 Shortcut. e. Edit the Comments field on the Miscellaneous tab to include the EMC SourceOne Worker Services host computer on which EMC SourceOne Web Services is installed: If you are using a single Web Services host computer, enter the host name of that computer. If you are using a load balancing solution which configures a virtual host name pointing to multiple Web Services computers (see Configuring load balancing on page 117), enter the virtual host name. If you have installed two or more Web Services host computers but you are not using load balancing, you can enter multiple host names by placing each name on a new line using the ENTER key. Installing Management components for Domino 175

176 Installing Management Support Installation results When you install the Shortcut Extension Manager on a Solaris, Linux, or AIX server, the install script makes the following changes to the Notes.ini file. Table 48 Shortcut Extension Manager changes to the Notes.ini file Notes.ini Change or Addition XtenderShortcutDB=ExShortcu t EXTMGR_ADDINS=libexnotesshortcut ext.so ServerTasks=ExNotesShortcutCache XtenderShortcutCacheInt=15 Description Sets the name of the shortcut database to ExShortcut.nsf. Creates the Shortcut Extension Manager, ExNotesShortcutExt. Adds ExNotesShortcutCache as a server task and allows EMC SourceOne to manage the shortcut cache. Sets how often, in minutes, the shortcut cache should be cleared. The default value is 20, indicating the cache should be cleared every 20 minutes. Configuration and administration Review the information provided in Domino Configuration and Administration on page 193 and perform any tasks required for your environment. 176 EMC SourceOne Management Version 6.7 Installation Guide

177 Installing Management Support Installing Extensions for Domino on IBM i This section describes how to install and configure extensions to Lotus Domino servers running on IBM i to support journaling and shortcutting. For journaling support, you have the following options: You can install the Journaling Extension Manager which supports journaling on each Domino server. You can use native Domino journaling, but choose to install the ExProcBadDocs cleanup agent. For shortcutting support, you can install the Shortcut Extension Manager. You can install $Reader field support to allow EMC SourceOne to access and archive all documents in a journal database, regardless of the value of the $Reader field. This section includes the following topics: Installing journaling support on IBM i Installing Notes $Reader field support on IBM i Loading and unloading $Reader support on IBM i Installing shortcutting support on IBM i Configuration and administration Installing journaling support on IBM i To install the journaling support for EMC SourceOne or native Domino journaling on an IBM i server: 1. On the IBM i computer, do one of the following: If this is the first time this software has been installed on this computer, enter the following command to create the save file: CRTSAVF QGPL/LEGATOJN If this software has been installed on this computer before, enter the following command to clear any existing save file named legatojn.savf: CLRSAVF QGPL/LEGATOJN 2. Copy the installation kit, legatojn.savf, from the Setup\i5_OS\Notes_Extensions\Journal directory on the EMC SourceOne Management Extensions for IBM Lotus Domino software kit to a computer running Windows. 3. From the computer running Windows, set the default directory to the directory into which you copied legatojn.savf. Installing Management components for Domino 177

178 Installing Management Support 4. Copy the installation kit from the Windows computer to the IBM i computer using the FTP utility. You should use binary mode for the file copy. For example, the following commands would be used to log on to the IBM i computer and copy the file to that computer. In the following example, the IBM i computer is named tbone. >ftp ftp.tbone Connected to tbone. 220 tbone FTP server (Version wu-2.6.2(1) Thu Feb 21 17:02:27 PST 2010) ready. User (tbone:(none)): user1 Password: 230 User ftp logged in. Access restrictions apply. ftp> binary 200 Type set to I. ftp> put legatojn.savf QGPL/LEGATOJN 5. Change the default directory to the Domino data directory, and then use the FTP put command to place files in the Domino data directory, depending on the type of journaling you intend to use: If you want to use EMC SourceOne journaling, copy the exjournal.ntf and exbaddoc.ntf files to the Domino data directory. In the following example, /domino/boston/data is the Domino data directory on the IBM i computer. ftp> cd /domino/boston/data 250 CWD command successful. ftp> put exjournal.ntf ftp> put exbaddoc.ntf ftp> quit > If you want to use native Domino journaling, but want to take advantage of the ExProcBadDocs cleanup agent, copy the exbaddoc.ntf files to the Domino data directory. In the following example, /domino/boston/data is the Domino data directory on the IBM i computer. ftp> cd /domino/boston/data 250 CWD command successful. ftp> put exbaddoc.ntf ftp> quit 6. If you are installing on a Domino partitioned server, you must copy the appropriate.ntf files to each Domino server partition on which you want to install the Journaling Extension Manager. 7. n the IBM i computer, enter the following command: 178 EMC SourceOne Management Version 6.7 Installation Guide

179 Installing Management Support RSTLIB SAVLIB(EXJOURNAL) DEV(*SAVF) SAVF(QGPL/LEGATOJN) 8. Create a symbolic link using the ADDLNK command. Note: The ADDLNK command creates a new symbolic link named LIBEXADD.PGM in the /QIBM/UserData/LOTUS/NOTES directory. This symbolic link resides in the Integrated File System (IFS) and points to the LIBEXADD service program in the QSYS (legacy) file system. Note: If you previously installed EMC SourceOne Extensions for Domino (or Xtender Notes Listener support) on this computer, the symbolic link already exists. Skip to Step 9. On the IBM i computer, enter the following commands: ADDLNK OBJ( /QSYS.LIB/EXJOURNAL.LIB/LIBEXADD.PGM ) NEWLNK( /QIBM/USERDATA/LOTUS/NOTES/LIBEXADD.PGM ) 9. Stop the Domino server (or servers, if you are installing on a Domino partitioned server). 10. Add the following lines to the Domino server s Notes.ini file: EXTMGR_ADDINS=EXADD XtenderUserName=ExUser/NotesDomain where ExUser is the canonical name of the Lotus Notes administrative user configured during the planning process (see IBM Lotus Domino permissions on page 53) and NotesDomain is the Notes domain for that user. If you are installing the Journaling Extension Manager on a Domino partitioned server, you must modify the Notes.ini file for each Domino server partition on which you want to install the Journaling Extension Manager. 11. Restart the Domino server (or servers, if you are installing on a Domino partitioned server). Installing Notes $Reader field support on IBM i After you restart the Domino server, install $Reader field support. When Domino is running on an IBM i server, you must install $Reader field support, which allows EMC SourceOne to access and archive all documents in a journal database, regardless of the value of the $Reader field. Installing Management components for Domino 179

180 Installing Management Support As part of the $Reader support, the ExProcBadDocs cleanup agent creates a EMC SourceOne compound document in the journal database that contains the documents found in the ExBadDocs folder, and then deletes those documents from the journal database. You can set the default interval at which ExProcBadDocs cleanup agent runs when you edit the Notes.ini file for the Domino server. You must install $Reader field support on each Domino server from which you want to archive messages. To install $Reader field support for Lotus Domino on an IBM i server: 1. On the IBM i computer, enter the following command to clear any existing file named legatobd.savf. CLRSAVF QGPL/LEGATOBD 2. Copy the installation kit, legatobd.savf from the Setup\i5_OS\Notes_Extensions\Journal directory on the EMC SourceOne installation CD to a computer running Windows. 3. From the Windows computer, set the default directory to the directory into which you copied legatobd.savf. 4. Copy the installation kit from the Windows computer to the IBM i computer using the FTP utility. You should use binary mode for the file copy. For example, the following commands would be used to log on to the IBM i computer and copy the file to that computer. In the following example, the IBM i computer is named tbone. 180 EMC SourceOne Management Version 6.7 Installation Guide

181 Installing Management Support >ftp ftp.tbone Connected to tbone. 220 tbone FTP server (Version wu-2.6.2(1) Thu Feb 21 17:02:27 PST 2010) ready. User (tbone:(none)): user1 Password: 230 User ftp logged in. Access restrictions apply. ftp> binary 200 Type set to I. ftp> put legatobd.savf QGPL/LEGATOBD ftp>quit 5. n the IBM i computer, enter the following command: RSTLIB SAVLIB(EXBADDOC) DEV(*SAVF) SAVF(QGPL/LEGATOBD) 6. Create a symbolic link using the ADDLNK command. Note: The ADDLNK command creates a new symbolic link named LIBEXBD.PGM in the /QIBM/UserData/LOTUS/NOTES directory. Note: If you previously installed EMC SourceOne Extensions for Domino (or Xtender $Reader support) on this computer, the symbolic link already exists. Skip to Step 7. On the IBM i computer, enter the following commands: ADDLNK OBJ( /QSYS.LIB/EXBADDOC.LIB/LIBEXBD.PGM ) NEWLNK( /QIBM/USERDATA/LOTUS/NOTES/LIBEXBD.PGM ) 7. On the IBM i computer, create a temporary directory, such as /temp. 8. Add the following lines to the Domino server s Notes.ini file: ServerTasks=libexbd XtenderTempPath=tempdir XtenderBadDocsInt=60 where tempdir is the name of the temporary directory you created in step 7 and 60 is the interval in minutes at which the $Reader field support agent creates a compound document in the journal database that contains documents found in the ExBadDocs folder. You can append libexbd to the existing ServerTasks entry rather than creating a new entry. Installing Management components for Domino 181

182 Installing Management Support If you are installing $Reader Journaling support on a Domino partitioned server, you must modify the Notes.ini file for each Domino server partition on which you want to install $Reader Journaling support. 9. Stop and then restart the Domino server on the IBM i computer (or servers, if you are installing on a Domino partitioned server). Loading and unloading $Reader support on IBM i Once you install $Reader field support, you can load or unload it.! IMPORTANT If you loaded this support by adding it to the servertasks line in the Notes.ini file, do not load it using the Domino LOAD command from the console unless you have first unloaded it using the TELL command as described below. To load LIBEXBD, enter the following command in the Domino server console: LOAD LIBEXBD To unload and stop LIBEXBD, enter the following command in the Domino server console: TELL LIBEXBD QUIT Installing shortcutting support on IBM i If you plan to use EMC SourceOne to create shortcuts of messages on the Domino server, you must install the Shortcut Extension Manager. The Shortcut Extension Manager allows mail users to view the original message either in the preview pane or when they double-click the shortcut to open the message. It also allows mobile users to view shortcut messages. Shortcuts are replicated between server-based mail database replicas, but full messages are replicated to local mail database replicas. The shortcut messages reside on the Domino server, and full messages are in the local mail database for offline use. You must install the Shortcut Extension Manager on each Domino server from which you want to shortcut messages. 182 EMC SourceOne Management Version 6.7 Installation Guide

183 Installing Management Support To install shortcutting support on IBM i: 1. On the IBM i computer, enter the following to clear any existing files named legatosh.savf or legatoca.savf: CLRSAVF QGPL/LEGATOSH CLRSAVF QGPL/LEGATOCA 2. Copy the installation kit files, legatosh.savf,legatoca.savf and exshortcut.ntf, from the Setup\i5_OS\Notes_Extensions\Shortcut directory on the EMC SourceOne installation CD to a computer running Windows. 3. From the Windows computer, set the default directory to the directory into which you copied legatosh.savf, legatoca.savf and exshortcut.ntf. 4. Copy the installation kit from the Windows computer to the IBM i computer using the FTP utility. Use binary mode for the file copy. For example, the following commands would be used to log on to the IBM i computer and copy the file to that computer. In the following example, the IBM i computer is named tbone. >ftp ftp.tbone Connected to tbone. 220 tbone FTP server (Version wu-2.6.2(1) Thu Feb 21 17:02:27 PST 2010) ready. User (tbone:(none)): user1 Password: 230 User ftp logged in. Access restrictions apply. ftp> binary 200 Type set to I. ftp> put legatosh.savf QGPL/LEGATOSH ftp> put legatoca.savf QGPL/LEGATOCA 5. Change the default directory to the Domino data directory, and then use the FTP put command to copy the exshortcut.ntf file to the Domino data directory. In the following example, /domino/boston/data is the Domino data directory on the IBM i computer. ftp> cd /domino/boston/data 250 CWD command successful. ftp> put exshortcut.ntf ftp> quit > Installing Management components for Domino 183

184 Installing Management Support If you are installing the Shortcut Extension Manager on a Domino partitioned server, you must copy the exshortcut.ntf file to each Domino server partition on which you want to install the Shortcut Extension Manager. 6. n the IBM i computer, enter the following commands: RSTLIB SAVLIB(EXSHTCUT) DEV(*SAVF) SAVF(QGPL/LEGATOSH) RSTLIB SAVLIB(EXCACHE) DEV(*SAVF) SAVF(QGPL/LEGATOCA) 7. Use the ADDLNK and NEWLNK commands to create a new symbolic link named LIBEXCUT.PGM in the /QIBM/UserData/LOTUS/NOTES directory. Note: If you previously installed EMC SourceOne Extensions for Domino (or Xtender Shortcut Extension Manager support) on this computer, the symbolic link already exists. Skip to Step 9. n the IBM i computer, enter the following commands: ADDLNK OBJ( /QSYS.LIB/EXSHTCUT.LIB/LIBEXCUT.PGM ) NEWLNK( /QIBM/USERDATA/LOTUS/NOTES/LIBEXCUT.PGM ) 8. Use the ADDLNK and NEWLNK commands to create a new symbolic link named LIBEXCA.PGM in the /QIBM/UserData/LOTUS/NOTES directory. Note: If you previously installed EMC SourceOne Extensions for Domino on this computer, the symbolic link already exists. Skip to Step 9. n the IBM i computer, enter the following commands: ADDLNK OBJ( /QSYS.LIB/EXCACHE.LIB/LIBEXCA.PGM ) NEWLNK( /QIBM/USERDATA/LOTUS/NOTES/LIBEXCA.PGM ) 9. On the IBM i computer, create a temporary directory, such as /temp. (This could be the same directory as the one you created for use with $Reader field support, if applicable.) 10. Add the following lines to the Domino server s Notes.ini file: XtenderTempPath=tempdir EXTMGR_ADDINS=excut XtenderShortcutDb=ExShortCut.nsf XtenderUserName=ExUser/NotesDomain ServerTasks=Libexca XtenderShortcutCacheInt= EMC SourceOne Management Version 6.7 Installation Guide

185 Installing Management Support In the previous example of the Notes.ini file: tempdir is the name of the temporary directory that was created. ExUser is the canonical name of the Lotus Notes administrative user configured during the planning process (see IBM Lotus Domino permissions on page 53). NotesDomain is the name of the Notes domain for the Notes user for EMC SourceOne. Note the following: The XtenderTempPath=tempdir line may already exist in the Notes.ini file if you installed $Reader field support, and the XtenderUserName=ExUser/NotesDomain line should already exist in the Notes.ini file from the Journaling Extension Manager installation. You can append excut to the existing EXTMGR_ADDINS entry rather than creating a new entry. You can append ExNotesShortcutCache to the existing ServerTasks entry rather than creating a new entry. If you are installing the Shortcut Extension Manager on a Domino partitioned server, you must modify the Notes.ini file for each Domino server partition on which you want to install the Shortcut Extension Manager. 11. Add a person record called ES1 Shortcut to the public name and address book. a. Set the User Name field to ES1 Shortcut. b. Set the First Name field to ES1. c. Set the Last Name field to Shortcut. d. Set the Full Name field to ES1 Shortcut. e. Edit the Comments field on the Miscellaneous tab to include the EMC SourceOne Worker Services host computer on which EMC SourceOne Web Services is installed: If you are using a single Web Services host computer, enter the host name of that computer. If you are using a load balancing solution which configures a virtual host name pointing to multiple Web Services computers (see Configuring load balancing on page 117), enter the virtual host name. Installing Management components for Domino 185

186 Installing Management Support If you have installed two or more Web Services host computers but you are not using load balancing, you can enter multiple host names by placing each name on a new line using the ENTER key. 12. Stop and then restart the Domino server on the IBM i computer (or servers, if you are installing on a Domino partitioned server). Configuration and administration Review the information provided in Domino Configuration and Administration on page 193 and perform any tasks required for your environment. Installing the ONM Viewer software The ONM Viewer software provides end users on client computers the ability to view Lotus Notes messages from EMC SourceOne Search results in Lotus Notes. This section includes procedures for installing this software manually using the MSI installation, or silently using a distribution package such as Microsoft SMS. It also includes information on allowing end users to install the software dynamically from the EMC SourceOne Search application. Prerequisites Table 49 Table 49 provides an overview of the prerequisites you must complete before installing software. Prerequisites Prerequisite System requirements Accounts and permissions Details Hardware, operating system, network connectivity, and prerequisite software requirements are described in ONM Viewer client computer requirements on page 67. Ensure that: Active Directory accounts and groups and other permissions-related configuration is completed as described in Pre-installation on page 37. Database permissions are configured as described in Configure SQL permissions on page 92. Considerations If installing the ONM Viewer software on a system on which you intend to also install the EMC SourceOne Console software, ensure that you install the Console software first. 186 EMC SourceOne Management Version 6.7 Installation Guide

187 Installing Management Support Procedures Table 50 Table 50 provides an overview of the procedures to install and configure ONM Viewer software on a host computer. Procedures Step Procedure Details 1a 1b 1c Install the ONM Viewer software manually on page 187 Install the ONM Viewer software silently on page 188 Allow users to install the ONM software on page 189 Option. Installs the ONM Viewer software manually. Option. Installs the ONM Viewer software silently. Option. Allows the end user to install the ONM Viewer software from the EMC SourceOne Search application. 2 Disabling end user prompt for install on page 189 Option. Allows the administrator to disable end user prompt for install. Install the ONM Viewer software manually To install the ONM Viewer software manually: 1. Log in to the host computer using an account with local administrator privileges. 2. Navigate to the Setup\Windows directory on the EMC SourceOne software kit. 3. Copy the ES1_ONMViewerSetup.exe executable to a temporary location on the host computer. 4. Navigate to the temporary location to which you copied the setup executable. 5. Double-click the ES1_ONMViewerSetup.exe file and click Run. The Welcome page displays. Note: When the installer is run, it validates the system configuration to ensure that prerequisite components are installed. Depending on your system configuration, the installer may automatically install one or more prerequisite components before displaying the Welcome page. Automatically installed components are listed in Establishing system requirements on page 54. Installing Management components for Domino 187

188 Installing Management Support 6. Click Next to display the Destination Folder page. 7. Click Next to display the Ready for Installation page. 8. Click Install. Once the installation is complete, the InstallShield Wizard Completed Page displays. 9. Click Finish. 10. If manually installing the ONM Viewer for all users, you can disable the prompt to the end users to automatically install the ONM Viewer software. See Allow users to install the ONM software on page 189. Install the ONM Viewer software silently You can silently install the ONM Viewer software. This method can be used in environments in which: Users are not granted local administrator rights on their computers. Local administrator rights are required to install this software. Users have local administrator rights, but the administrator prefers to distribute the software using silent installation. Note: If your organization provides local administrator rights to users, you can alternatively allow users to install the software from the EMC SourceOne Search application. See Allow users to install the ONM software on page 189 for more information. 188 EMC SourceOne Management Version 6.7 Installation Guide

189 Installing Management Support The ES1_ONMViewerSetup.exe program confirms that the appropriate version of the Microsoft Installer (MSI) is on the system and it launches the MSI with the applicable parameters. For more information on standard command line parameters, refer to the Microsoft Installer documentation. Use the following syntax to silently install the ONM Viewer: ES1_ONMViewerSetup.exe /s /v"/qn REBOOT=ReallySuppress " You should disable the prompt to the end users to automatically install the ONM Viewer software. See Allow users to install the ONM software on page 189. Allow users to install the ONM software You can allow end users to install the ONM Viewer software in environments in which users have local administrator rights, and the administrator prefers to let users control the installation. EMC SourceOne Search users are presented with the option to dynamically install the ONM Viewer software the first time they attempt to view a Lotus Notes message. The user can choose to install the software immediately or postpone the installation. The user can also choose to suppress the installation message. For more information, refer to the EMC SourceOne Search User Guide. Note: If your organization does not provide local administrator rights to users, you can alternatively use a silent installation method to install the software. See Install the ONM Viewer software silently on page 188 for more information. Disabling end user prompt for install If you choose to manually or silently install the ONM Viewer software, you can use the EMC SourceOne console to disable the prompt to EMC SourceOne Search end users to install the ONM Viewer software. Refer to the EMC SourceOne Administration Guide for more information. Installing Management components for Domino 189

190 Installing Management Support Maintaining the installation This section provides information on maintaining installation of the components described in this chapter. Upgrade Refer to the product release notes for detailed instructions on upgrading EMC SourceOne product databases and components. Remove a component To remove (uninstall) an EMC SourceOne product component that is installed on a Microsoft Windows system: 1. Using an account that is a member of the local Administrators group, access the Microsoft Windows Add or Remove Programs dialog box. 2. Select the appropriate component and click Remove. 3. Follow the prompts to remove the component. Repair a component Windows 2003 systems Windows 2008 systems Repairing a component can fix missing or corrupt files, shortcuts, and registry entries. Due to differences in the permissions model between Windows 2003 and Windows 2008, use the appropriate procedure for your environment as described in the following sections. To repair an EMC SourceOne product component that is installed on a Microsoft Windows 2003 system: 1. Using an account that is a member of the local Administrators group, access the Microsoft Windows Add or Remove Programs dialog box. 2. Select the appropriate component and click Change. 3. Follow the prompts to repair the component. To repair an EMC SourceOne product component that is installed on a Microsoft Windows 2008 system, do one of the following, depending on the account your are logged in as. If you are logged in as the local system Administrator (highest permission level) Do the following: 1. Access the Microsoft Windows Program and Features dialog box. 190 EMC SourceOne Management Version 6.7 Installation Guide

191 Installing Management Support 2. Select the appropriate component and click Change. 3. Follow the prompts to repair the component. If you are logged in as a member of the local Administrators group Do the following: 1. Access the original setup executable for the EMC SourceOne component. 2. Run the executable. 3. Follow the prompts to repair the component. Maintaining the installation 191

192 Installing Management Support 192 EMC SourceOne Management Version 6.7 Installation Guide

193 A Domino Configuration and Administration This appendix provides important information related to configuration and administration of IBM Lotus Domino journaling and shortcutting functionality used with EMC SourceOne Management, and includes the following topics: Journaling configuration and administration Shortcutting configuration and administration Historical archiving configuration and administration Note: This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above). For details, see Guide to using this document on page 10. Domino Configuration and Administration 193

194 Domino Configuration and Administration Journaling configuration and administration This section provides information related to configuration and administration of journaling functionality and includes the following topics: Journaling administration EMC SourceOne journaling considerations Journaling administration This section includes the following topics: Configure administrator access to journaling databases Starting and stopping EMC SourceOne journaling Managing the native Domino journaling environment Configuring journaling activities Configure administrator access to journaling databases You must configure a group in Domino which corresponds to the EMC SourceOne Admins Group created in Active Directory which contains users of the EMC SourceOne console (see Creating accounts in Active Directory on page 39 for details). You then associate the Domino group with each journal database used by EMC SourceOne. Procedure 1. Create a group using Domino Administrator. Use the following guidelines: Group name - Use a contextual name such as SourceOne Admins Members - Add the same users in the Active Directory Admins Group to the Domino group. 2. Run the Notes client application using the EMC SourceOne Notes User account (typically on the Master Services computer or a Worker Services computer). 3. Configure the access control for each journal database by adding the Domino group with Reader access. 194 EMC SourceOne Management Version 6.7 Installation Guide

195 Domino Configuration and Administration Maintaining the configuration Ensure the following: As the EMC SourceOne Admins Group in Active Directory changes, ensure that users are added and deleted in the corresponding Domino group. As mail.box databases are created (and therefore corresponding journal mailboxes), ensure that you repeat this procedure to configure administrative access to the new journaling databases. Starting and stopping EMC SourceOne journaling EMC SourceOne journaling provides utilities to start and stop journaling for the supported platforms. Topics include: Microsoft Windows platforms Solaris, Linux, or AIX platforms IBM i platform Starting and stopping journaling on partitioned Domino Microsoft Windows platforms The EMC SourceOne Extensions for Domino install program installs the ExNotesCfg.exe utility in the Domino program folder. This utility allows you to stop and start journaling without affecting the state of the Lotus Domino server. When you run the utility, it creates an entry in the Notes.ini file. The command syntax depends on the relative location of the Notes.ini file and the ExNotesCfg.exe file as described in Table 51 on page 196. To stop or start journaling on the Domino server: 1. Verify that the Domino server is running. 2. Verify the location of the Notes.ini file. This is likely the Domino program folder (c:\notes\domino). 3. Verify that the ExNotesCfg.exe file is in the Domino program folder. 4. Open a command prompt and run ExNotesCfg.exe in the directory where Notes.ini resides. 5. Enter the command to enable or disable journaling (Table 51). Journaling configuration and administration 195

196 Domino Configuration and Administration Table 51 Commands to start or stop Domino journaling File location Command Result Notes.ini and ExNotesCfg.exe files are both in the c:\notes\domino directory Notes.ini file is located in c:\notes\data and ExNotesCfg.exe is located in c:\notes\domino Notes.ini and ExNotesCfg.exe files are both in the c:\notes\domino directory Notes.ini file is located in c:\notes\data and ExNotesCfg.exe is located in c:\notes\domino c:\notes\domino>exnotescf g journal_enable c:\notes\data>c:\notes\do mino\exnotescfg journal_enable c:\notes\domino>exnotescf g journal_disable c:\notes\data>c:\notes\do mino\exnotescfg journal_disable Enable journaling Enable journaling Disable journaling Disable journaling Solaris, Linux, or AIX platforms The Journaling Extension Manager includes a Notes Add-in task (exnotescfg) that allows you to stop or start journaling from the Domino server console without affecting the state of the Domino server. To start the Journaling Extension Manager, verify that the Domino server is running and then enter the following command in the Domino server console: load exnotescfg journal_enable To stop the Journaling Extension Manager, verify that the Domino server is running and then enter the following command in the Domino server console: load exnotescfg journal_disable To list the current setting for the Journaling Extension Manager, verify that the Domino server is running and then enter the following command in the Domino server console: load exnotescfg EMC SourceOne Management Version 6.7 Installation Guide

197 Domino Configuration and Administration IBM i platform The capability to start and stop journaling is not available in an IBM i installation of the Journaling Extension Manager. Starting and stopping journaling on partitioned Domino Disabling EMC SourceOne journaling on one partition of a Domino partitioned server disables all Domino servers on that computer. When EMC SourceOne journaling is started with two or more Domino partitioned servers on a computer, the messages that indicate journaling is starting are only displayed at the console for the first server journaled. Initialization messages for the journaling of the other servers are not displayed at the console. However, those message are available in the \Data\log.nsf file for each server. Managing the native Domino journaling environment Refer to the IBM Lotus Domino documentation for information on configuring and managing the native Domino journaling environment. Configuring journaling activities Refer to the EMC SourceOne Administration Guide for details and procedures for configuring Domino journaling activities against EMC SourceOne or native Domino journaling databases EMC SourceOne journaling considerations This section describes journaling considerations when using EMC SourceOne journaling extensions. Topics include: Additional journaling databases Cleaning up the Bad Documents Folder ExFailover.nsf database Multiple Domino servers Managing high-volume journaling databases Information resources Journaling databases Journaling databases are a holding place for messages before they are archived by EMC SourceOne. The Journaling Extension Manager creates ExJournal.nsf using a template which is installed with the Journaling Extension Manager. A task running on a EMC SourceOne Journaling configuration and administration 197

198 Domino Configuration and Administration Worker Services computer then archives messages from the journaling database to an EMC SourceOne archive. Journaling templates Two templates are included with EMC SourceOne journaling from which journaling databases (ExJournal.nsf) can be created. ExJournal.ntf The base template used to create the journaling mailbox databases. ExJournal_ntl.ntf This alternative template is the same as ExJournal.ntf, but does note have transactional logging enabled. You can control which template is used as follows: To use the ExJournal_ntl.ntf template (transaction logging disabled), add the following line to the notes.ini file: ExDisableJournalTXNLogging=1 To use the ExJournal.ntf template (transaction logging enabled), do not edit the notes.ini file. Additional journaling databases If the Domino administrator configures additional mail.box databases on the Domino server after you have installed the Journaling Extension Manager, the Journaling Extension Manager will create additional Notes databases and name them incrementally (such as ExJournal1.nsf, ExJournal2.nsf, and so on). There must be a one-to-one relationship between the mail.box files for the journaling databases and the Notes databases for each journaling database. Cleaning up the Bad Documents Folder Messages that could not be transferred from a Domino mail server are moved to the Bad Documents Folder of the Domino journaling database. Installing EMC SourceOne journaling also installs a "cleanup" agent (ExProcBadDocs) which takes messages from the Bad Documents Folder, places them in an NSF file and then places the NSF file into a message as an attachment. It then puts that message back in the All Documents view of the journaling database for processing. 198 EMC SourceOne Management Version 6.7 Installation Guide

199 Domino Configuration and Administration ExFailover.nsf database Multiple Domino servers In the event of a failure to copy mail to one of the ExJournal.nsf databases, an ExFailover.nsf database is created. A corresponding message will be written to the Domino console. If this occurs, you must configure an EMC SourceOne activity to archive mail from this database. When journaling messages in an environment in which there are multiple Domino servers sending messages, with some Domino servers routing those messages, you should install EMC SourceOne Journaling Extension Manager on all Domino servers (e.g., ones which are sending messages ones which are routing those messages). Capturing messages at the source prevents recipient information in the message from being lost during the routing process. Managing high-volume journaling databases If you have corruption issues with high volume journaling databases, turn off Transactional Logging on all Notes databases created for EMC SourceOne and then compact the databases. For instructions, refer to the Lotus Domino documentation. You can also control whether the template used to create EMC SourceOne journaling databases enables or disables transactional logging when it creates new journaling databases. Refer to Journaling templates on page 198. Native Domino journaling considerations This section describes journaling considerations when using native Domino journaling. Note: For EMC SourceOne journaling considerations, refer to Native Domino journaling considerations on page 199. Journaling database configuration To support native Domino journaling, you do not need to install any EMC SourceOne software. However, EMC SourceOne requires that the native Domino journaling database have the following minimum settings: Journaling Specify Enabled. Journaling configuration and administration 199

200 Domino Configuration and Administration Field encryption exclusion list Do not change the default fields (Form; From; Principal; PostedDate). Encrypt on behalf of user Specify the EMC SourceOne Lotus Notes user account ( IBM Lotus Domino permissions on page 53). Cleaning up the Bad Documents Folder Messages that could not be transferred from a Domino mail server are moved to the Bad Documents Folder of the Domino journaling database. The following options are available, depending on your environment. When you select the native Domino journaling options when installing EMC SourceOne Extensions, the ExProcBadDocs agent is installed. This "cleanup" agent (ExProcBadDocs) takes messages from the Bad Documents Folder, places them in an NSF file and then places the NSF file into a message as an attachment. It then puts that message back in the All Documents view of the journaling database for processing. To take advantage of this functionality, you must rename your native Domino journaling database from the Domino default name (e.g., mailjrn.nsf) to the same name used with EMC SourceOne 200 EMC SourceOne Management Version 6.7 Installation Guide

201 Domino Configuration and Administration journaling (ExJournal.nsf). This is required to enable the ExProcBadDocs agent to interact with the journaling database. If you choose not to use ExProcBadDocs, the mail administrator is responsible for manually monitoring and cleaning up this folder. Information resources For information on enabling native Domino mail journaling and setting up the mail journaling database, refer to the IBM Lotus Domino documentation set for the version of Domino you are using. Journaling configuration and administration 201

202 Domino Configuration and Administration Shortcutting configuration and administration This section provides information related to configuration and administration of shortcutting functionality and includes the following topics: Shortcutting administration Shortcutting considerations Shortcutting administration This section includes the following topics: Configuring antivirus software on the Domino server Starting and stopping shortcutting Configuring shortcutting activities Configuring antivirus software on the Domino server When EMC SourceOne creates a shortcut, it modifies the message by removing attachments from the message. If you have configured antivirus software on the Lotus Domino server to rescan that is modified in a Notes user's mailbox, the antivirus software detects the modified message and rescans the message. This results in the Domino server attempting to retrieve the shortcut message from the EMC SourceOne archive using an HTTP call. Because EMC SourceOne can quickly create thousands of shortcut messages, this can result in the Domino server being flooded with HTTP calls until it eventually crashes. When this occurs, the EMC SourceOne Shortcut Extension Manager signals multiple errors to the Domino console. There are a number of steps you can take to avoid this problem: 1. If the antivirus software rescans modified messages, disable that option on Domino servers that contain EMC SourceOne shortcuts. If you must run a full virus scan of user mail databases that contain shortcuts, disable the Shortcut Extension Manager before running the scan by running the exnotescfg utility. 2. Reload the Shortcut Extension Manager by replacing the appropriate filename in the Notes.ini file on the Domino server, saving the file, and then stopping and restarting the Domino server. 202 EMC SourceOne Management Version 6.7 Installation Guide

203 Domino Configuration and Administration Starting and stopping shortcutting EMC SourceOne journaling provides utilities to start and stop shortcutting for the supported platforms: Microsoft Windows platforms The EMC SourceOne Extensions for Domino install program installs the ExNotesCfg.exe utility in the Domino program folder. This utility allows you to stop and start shortcutting without affecting the state of the Lotus Domino server. When you run the utility, it creates an entry in the Notes.ini file. The command syntax depends on the relative location of the Notes.ini file and the ExNotesCfg.exe file as described in Table 51 on page 196. To stop or start shortcutting on the Domino server: 1. Verify that the Domino server is running. 2. Verify the location of the Notes.ini file. This is likely the Domino program folder (c:\notes\domino). 3. Verify that the ExNotesCfg.exe file is in the Domino program folder. 4. Open a command prompt and run ExNotesCfg.exe in the directory where Notes.ini resides. 5. Enter the command to enable or disable shortcutting (Table 52). Table 52 Commands to start or stop Domino shortcutting File location Command Result Notes.ini and ExNotesCfg.exe files are both in the c:\notes\domino directory c:\notes\domino>exnotes Cfg shortcut_enable Enable shortcutting Shortcutting configuration and administration 203

204 Domino Configuration and Administration Table 52 Commands to start or stop Domino shortcutting File location Command Result Notes.ini file is located in c:\notes\data and ExNotesCfg.exe is located in c:\notes\domino Notes.ini and ExNotesCfg.exe files are both in the c:\notes\domino directory Notes.ini file is located in c:\notes\data and ExNotesCfg.exe is located in c:\notes\domino c:\notes\data>c:\notes\ domino\exnotescfg shortcut_enable c:\notes\domino>exnotes Cfg shortcut_disable c:\notes\data>c:\notes\ domino\exnotescfg shortcut_disable Enable shortcutting Disable shortcutting Disable shortcutting Solaris, Linux, or AIX platforms The exnotescfg utility allows you to stop or start shortcutting from the Domino server console without affecting the state of the Domino server. To enable shortcutting, verify that the Domino server is running and then enter the following command in the Domino server console: load exnotescfg shortcut_enable To stop shortcutting, verify that the Domino server is running and then enter the following command in the Domino server console: load exnotescfg shortcut_disable To list the current setting for EMC SourceOne shortcutting, verify that the Domino server is running and then enter the following command in the Domino server console: load exnotescfg 3 IBM i platform The capability to start and stop shortcutting is not available in an IBM i installation of the Journaling Extension Manager. Configuring shortcutting activities Refer to the EMC SourceOne Administration Guide for details and procedures for configuring Domino shortcutting activities. 204 EMC SourceOne Management Version 6.7 Installation Guide

205 Domino Configuration and Administration Shortcutting considerations EMC SourceOne and SSL connections This section describes shortcutting considerations. Topics include: EMC SourceOne and SSL connections Agent issues Domino local replicas and shortcuts Domino compact operation and shortcut activity timing If the EMC SourceOne Worker Services computer (with Web Services installed) has been configured to only allow SSL connections, shortcuts cannot be retrieved in Notes using the Shortcut Extension Manager installed on the Domino server. Agent issues Agents such as the Out of Office agent can cause potential performance problems (for example, causing large scale restoration of shortcut messages), the Domino agent manager does not restore shortcuts. Domino local replicas and shortcuts Problem If using Domino local replicas and shortcuts exist in a user s mail database, Domino will temporarily restore attachments to the mail database hosted on the Domino server until a compact is run again. Workaround Domino administrators should be aware of this issue and monitor server space and user mail database size limits. Domino compact operation and shortcut activity timing Problem If a shortcut activity is launched while Domino is compacting databases, an error similar to the following is generated: Failed to open note. [ExShortcutJBC.exe, ExNotesUtils.cpp(3683).CExNotesUtils::OpenNote] Workaround Review the nightly compact schedule and adjust the timing of shortcut activities. You can also re-run activities against mail databases that failed to be shortcut. Shortcutting configuration and administration 205

206 Domino Configuration and Administration Historical archiving configuration and administration Historical archiving support is inherently provided through permissions granted to EMC SourceOne to mail databases on your Domino servers. You do not need to install any EMC SourceOne software to support historical archiving. Refer to the EMC SourceOne Administration Guide for details and procedures for configuring Domino historical archiving activities. 206 EMC SourceOne Management Version 6.7 Installation Guide

207 B Configuring Single Sign-on Support (Windows) This chapter describes how to configure support for single sign-on authentication for EMC SourceOne Search and shortcut resolution in a Microsoft Windows environment. This appendix is organized as follows: Overview Implementing single sign-on in Windows Server Implementing single sign-on in Windows Server 2008 R Note: This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above). For details, see Guide to using this document on page 10. Configuring Single Sign-on Support (Windows) 207

208 Configuring Single Sign-on Support (Windows) Overview You can configure EMC SourceOne web applications to use the Microsoft trusted subsystem design in which the Web service acts as a trusted subsystem to access additional resources. This configuration uses credentials provided in the configuration instead of the user's credentials to access the resource. For more details on this design, refer to: This section includes the following topics: Implementation details EMC SourceOne ediscovery - Kazeon considerations Implementation details This implementation will allow a user to access EMC SourceOne web applications and resolve shortcuts using the built-in Windows Integrated authentication mechanism of an IIS server and a properly-configured Internet Explorer web browser. When an authenticated Windows user accesses the URL for the EMC SourceOne web applications (e.g., EMC SourceOne Search and EMC SourceOne SharePoint Archive Search), the user will not be prompted for credentials. Instead the user is automatically logged in to the application and it will work normally based on the user s permissions.likewise, when a user attempts to resolve an or file shortcut, the user is not prompted for credentials, and the message or file is restored. EMC SourceOne ediscovery - Kazeon considerations EMC SourceOne ediscovery - Kazeon is an EMC product that enables organizations to efficiently and cost effectively classify, manage, and retrieve data. To integrate with the EMC SourceOne core product, EMC SourceOne ediscovery - Kazeon communicates with an EMC SourceOne Web Services IIS Web site using the Basic authentication method, while the single sign-on configuration detailed in this chapter is based on Windows Integrated authentication. 208 EMC SourceOne Management Version 6.7 Installation Guide

209 Configuring Single Sign-on Support (Windows) Review the following options when implementing single sign-on support in an environment which includes EMC SourceOne ediscovery - Kazeon: Mixed authentication Single sign-on for Universal URL only Mixed authentication You can provide a mixed authentication environment which simultaneously supports: EMC SourceOne Search, EMC SourceOne for Microsoft SharePoint Archive Search, and Universal URL authentication using Windows Integrated authentication. EMC SourceOne ediscovery - Kazeon authentication using Basic authentication. To support this configuration: Install Web Services software on separate workers to provide separate instances of a Web Services IIS site (SearchWS) for Kazeon and Search. Configure the first Web Services site (SearchWS) which supports Kazeon to use Basic authentication (e.g., retain the default configuration). When you install Kazeon software, configure it to utilize this Web Services site. Configure the second Web Services site (SearchWS) which supports Search to use Windows Integrated authentication as described in this chapter. When you install other EMC SourceOne components, configure them to utilize this Web Services site. Configure the Search site (Search) and Universal URL site (ExShortcut) to use Windows Integrated authentication as described in this chapter. Single sign-on for Universal URL only If single sign-on is needed only to support the Universal URL (ExShortcut) site: Configure the Universal URL site (ExShortcut) site to use Windows Integrated authentication. Configure the Web Services and Search sites (SearchWS and Search) to use Basic authentication. Overview 209

210 Configuring Single Sign-on Support (Windows) Implementing single sign-on in Windows Server 2003 The topics in this section describe how to configure single sign-on for the EMC SourceOne Search and shortcut Web applications in a Microsoft Windows Server 2003 environment: Configure Web Services site (SearchWS) Configure the Search site (Search) Configure Universal URL site (ExShortcut) Restart IIS Configure IIS 6.0 authentication Configure a User Principal Name for the service account Configure Internet Explorer Configure Web Services site (SearchWS) Do the following to configure the EMC SourceOne Web Services (SearchWS) site: 1. Open the computer on which Web Services is installed, open IIS Manager and navigate to the SearchWS virtual directory. 2. Right-click SearchWS and select Properties. 3. Click the Directory Security tab. a. In the Authentication and access control section, click Edit to display the Authentication Methods page. 210 EMC SourceOne Management Version 6.7 Installation Guide

211 Configuring Single Sign-on Support (Windows) b. Ensure that the Anonymous access check box is not selected and that Integrated Windows authentication check box is the only check box selected. 4. Click OK to return to the SearchWS Properties page and select the ASP.NET tab. 5. Click Edit Configuration. 6. Click the Authentication tab 7. Change Authentication mode from None to Windows. 8. Select the Authorization tab. 9. Change the Local authorization rules section (bottom pane) to deny access to all users but the EMC SourceOne service account or security group. a. Configure the first entry: Implementing single sign-on in Windows Server

212 Configuring Single Sign-on Support (Windows) a. Rule type: Allow b. Verbs: All verbs c. Users: DOMAIN\serviceAccountUser d. Alternatively, you can enter the EMC SourceOne security group in the Role field. Note: Ensure that the Users field is blank if specifying the security group in the Roles field. b. Configure the second entry: a. Rule type: Deny b. Verbs: All verbs 212 EMC SourceOne Management Version 6.7 Installation Guide

213 Configuring Single Sign-on Support (Windows) c. Users and roles: select All Users (*) 10. Click OK on the dialogs to save all changes and close the properties dialog. Configure the Search site (Search) Do the following to configure the Search site: 1. Open the computer on which EMC SourceOne Search is installed, open IIS Manager and navigate to the Search virtual directory. 2. Right-click Search and select Properties. 3. Click the Directory Security tab. a. In the Authentication and access control section, click Edit to display the Authentication Methods page. Implementing single sign-on in Windows Server

214 Configuring Single Sign-on Support (Windows) b. Ensure that the Anonymous access check box is not selected and that Integrated Windows authentication check box is the only check box selected. 4. Click OK to return to the Search Properties page and select the ASP.NET tab. 5. Click Edit Configuration. 6. Click the Authentication tab 7. Change Authentication mode from Forms to Windows. 8. Click OK on the dialogs to save all changes and close the properties dialog. Configure Universal URL site (ExShortcut) Do the following to configure the Universal URL (ExShortcut) site: 1. Open the computer on which Web Services is installed, open IIS Manager and navigate to the ExShortcut virtual directory. 2. Right-click ExShortcut and select Properties. 3. Click the Directory Security tab. a. In the Authentication and access control section, click Edit to display the Authentication Methods page. 214 EMC SourceOne Management Version 6.7 Installation Guide

215 Configuring Single Sign-on Support (Windows) b. Ensure that the Anonymous access check box is not selected and that Integrated Windows authentication check box is the only check box selected. 4. Click OK to return to the ExShortcut Properties page and select the ASP.NET tab. 5. Click Edit Configuration. 6. Click the Authentication tab 7. Change Authentication mode from Forms to Windows. Restart IIS To ensure the configuration changes take effect, use the iisreset command to restart IIS. 1. From the Start menu, click Run. 2. In the Open box, type cmd, and then click OK. 3. At the command prompt, type the following: iisreset Implementing single sign-on in Windows Server

216 Configuring Single Sign-on Support (Windows) See the following Microsoft article for details: 003/Library/IIS/95826e7a-bac4-4e1f-bcb6-c52d49c9d7f4.mspx?mfr=t rue Configure IIS 6.0 authentication For Windows Server 2003 environments which use IIS 6.0, you must configure a Service Principle Name (SPN) for the EMC SourceOne service account(s) used to run ASP.NET applications, specifically to support Kerberos authentication, the default authentication method used by Windows Integrated authentication. Note: The information in this section does not apply to Windows Server 2008 R2 environments which use IIS 7.5. Refer to Implementing single sign-on in Windows Server 2008 R2 on page 219 for details on configuring authentication in that environment. General information Procedure You configure the SPN by running the Setspn utility on a domain controller. This command-line tool allows you to read, modify, and delete the Service Principal Names (SPN) directory property for an Active Directory service account. SPNs are used to locate a target principal name for running a service. You can use Setspn to view the current SPNs, reset the account's default SPNs, and add or delete supplemental SPNs. For details on the Setspn utility: The Setspn utility is provided in the Windows Server 2003 Support Tools that are included on your Windows Server 2003 CD. To install the tools, double-click the Suptools.msi file in the Support/Tools folder. Use the following procedure to configure the SPN for the EMC SourceOne service account(s). 216 EMC SourceOne Management Version 6.7 Installation Guide

217 Configuring Single Sign-on Support (Windows)! IMPORTANT You must run the command twice for every EMC SourceOne worker host computer on which Web Services software is installed. 1. Register an SPN using the Setspn utility by running the following commands from a command prompt: a. Using the NetBIOS name of the EMC SourceOne Web Services host computer. For example: setspn -A HTTP/webservername domain\serviceaccountuser b. Using the fully-qualified domain name (FQDN) of the EMC SourceOne Web Services host computer. For example: setspn -A HTTP/webservername.fullyqualifieddomainname domain\serviceaccountuser 2. Repeat this procedure for the remaining Web Services and host computers. Configure a User Principal Name for the service account The service account under which the EMC SourceOne Web service is running must have a User Principal Name (UPN). Note: This configuration is in addition to the Service Principal Name (SPN) you configure as described in Configure IIS 6.0 authentication on page 216. The UPN is composed of the user logon name and the UPN suffix joined by sign. Ensure the service account has a UPN by modifying the properties for the service account using Active Directory Users and Computers. For details, see the following Microsoft KB article: 9.aspx Implementing single sign-on in Windows Server

218 Configuring Single Sign-on Support (Windows) Configure Internet Explorer To configure Internet Explorer settings for client computers accessing the EMC SourceOne Search, SharePoint Archive Search, and shortcut URLs: 1. Open Internet Explorer. 2. Select Tools > Internet Options and select the Security tab. 3. Click Local intranet and select Custom Level. 4. Scroll to the bottom of the Settings pane. 5. In the User Authentication > Logon section, ensure that Automatic logon only in Intranet zone is selected. 6. Click OK to return to the Security tab. 7. Click Sites. 8. Click Advanced. 9. Add the URLs for the Search, SharePoint Archive Search, and ExShortcut web sites. When this configuration is complete, the Internet Security Properties icon displayed in the lower right side of the browser should indicate that the site is in the local intranet. 218 EMC SourceOne Management Version 6.7 Installation Guide

219 Configuring Single Sign-on Support (Windows) Implementing single sign-on in Windows Server 2008 R2 The topics in this section describe how to configure single sign-on for the EMC SourceOne Search and shortcut Web applications in a Microsoft Windows Server 2008 R2 environment: Configure Web Services site (SearchWS) Configure the Search site (Search) Configure Mobile Services site (ExShortcut) Restart IIS Configure IIS 7.5 authentication Configure Internet Explorer Configure Web Services site (SearchWS) This section describes how to configure the Web Service site (SearchWS). Before you begin Configure the site Ensure that the required role services (including the ones required to support SSO) are installed as described in Configure IIS 7.5 role services (Windows Server 2008 R2 only) on page 118. Configure the EMC SourceOne Web Services (SearchWS) site: 1. Open the computer on which Web Services is installed, open Internet Information Services (IIS) Manager. Implementing single sign-on in Windows Server 2008 R2 219

220 Configuring Single Sign-on Support (Windows) 2. Navigate to SearchWS in the Connections pane. 3. Click SearchWS. The configuration options for SearchWS are displayed in the center pane. 4. In the IIS section, double-click the Authentication icon. 220 EMC SourceOne Management Version 6.7 Installation Guide

221 Configuring Single Sign-on Support (Windows) 5. Configure the following settings: Disable Anonymous Authentication Disable Forms Authentication Enable Windows Authentication 6. Click SearchWS in the location bar to return to /SearchWS Home. 7. Scroll to the Management section in the center pane. 8. Double-click the Configuration Editor icon. a. From the Section drop-down list, select system.web/authentication. b. Set the mode to Windows. Implementing single sign-on in Windows Server 2008 R2 221

222 Configuring Single Sign-on Support (Windows) 9. Click SearchWS in the location bar to return to /SearchWS Home. 10. Scroll to the ASP.NET section in the center pane. 11. Double-click the.net Authorization icon. 12. Remove any existing rules. Note: You cannot remove the Inherited rule, Allow > All Users 13. Create the following rules: a. Create an Allow rule for either: The EMC SourceOne security group role (using the Specified roles or user groups entry field). or The EMC SourceOne service account user (using the Specified users entry field). b. Add a Deny rule for All Users.! IMPORTANT The Allow rule must precede the Deny rule in the.net Authorization Rules section. 222 EMC SourceOne Management Version 6.7 Installation Guide

223 Configuring Single Sign-on Support (Windows) 14. Click SearchWS in the location bar to return to /SearchWS Home. 15. Exit the Internet Information Services (IIS) Manager application. Configure the Search site (Search) This section describes how to configure the Search site (Search). Before you begin Configure the site Ensure that the required role services (including the ones required to support SSO) are installed as described in Configure IIS 7.5 role services (Windows Server 2008 R2 only) on page 126. Configure the EMC SourceOne Search (Search) site: 1. Open the computer on which Web Services is installed, open Internet Information Services (IIS) Manager. 2. Navigate to Search in the Connections pane. 3. Click Search. The configuration options for Search are displayed in the center pane. Implementing single sign-on in Windows Server 2008 R2 223

224 Configuring Single Sign-on Support (Windows) 4. In the IIS section, double-click the Authentication icon. 5. Configure the following settings: Disable Anonymous Authentication Disable Forms Authentication Enable Windows Authentication 6. Click Search in the location bar to return to /Search Home. 7. Exit the Internet Information Services (IIS) Manager application. Configure Mobile Services site (ExShortcut) This section describes how to configure the Mobile Services site (ExShortcut). Before you begin Configure the site Ensure that the required role services (including the ones required to support SSO) are installed as described in Configure IIS 7.5 role services (Windows Server 2008 R2 only) on page 132. Configure the EMC SourceOne Mobile Services (ExShortcut) site: 1. Open the computer on which Web Services is installed, open Internet Information Services (IIS) Manager. 2. Navigate to ExShortcut in the Connections pane. 3. Click ExShortcut. The configuration options for ExShortcut are displayed in the center pane. 4. In the IIS section, double-click the Authentication icon. 5. Configure the following settings: 224 EMC SourceOne Management Version 6.7 Installation Guide

225 Configuring Single Sign-on Support (Windows) Disable Anonymous Authentication Disable Forms Authentication Enable Windows Authentication 6. Click ExShortcut in the location bar to return to /ExShortcut Home. 7. Exit the Internet Information Services (IIS) Manager application. Restart IIS To ensure the configuration changes take effect, use the iisreset command to restart IIS. Implementing single sign-on in Windows Server 2008 R2 225

226 Configuring Single Sign-on Support (Windows) Configure IIS 7.5 authentication By default, Windows Server 2008 R2/IIS 7.5 uses Windows Authentication with Kernel-mode authentication enabled, resulting in improved performance. Unlike Windows Server 2003/IIS 6.0, which required that you use the Setspn utility to configure an application pool identity for the EMC SourceOne service account, the IIS 7.5 configuration instead uses the IIS server s machine account to decrypt single sign-on Kerberos tickets for the requested service. Typical scenario Alternate scenarios In most cases, you do not need to perform any further configuration for Windows Authentication, assuming that you are accessing the server by the NetBIOS or fully-qualified domain name (e.g., MyIISServerName or MyIISServerName.Domain.com.) If this is not the case in your environment, refer to Alternate scenarios on page 226. There may be alternate scenarios, depending on your environment: Custom host name or host header names on page 226 Web farm on page 226 Custom host name or host header names If your environment uses a custom host or host header names (e.g., an SPN must be added only for the IIS server s machine account (and not for the Domain\Username account). The Setspn utility is run on the domain controller. For example: setspn -A HTTP/site_custom_name netbios_name Web farm If you are running the IIS 7.5 server in a Web farm, the Kerberos Ticket Granting Server (KDC) cannot predict which individual server the request may go to to decrypt tickets. In this scenario, instead of registering SPNs under a specific machine account, use a domain account. Scenario A (recommended) Retain Kernel-mode authentication, configure SPNs for the EMC SourceOne service account, and 226 EMC SourceOne Management Version 6.7 Installation Guide

227 Configuring Single Sign-on Support (Windows) configure the ApplicationHost.config file to use the application pool credentials. Configure the SPNs: Note the following differences when using the Setspn utility in Microsoft Windows Server 2008 R2 environment: Microsoft Windows Server 2008 R2 includes an updated version of the Setspn utility as part of the operating system. You must use this version of the utility if running Windows Server 2008 R2. The utility includes an additional parameter switch used when configuring the SPN (-u). This switch indicates that the SPN is for a user instead of a computer. You must run the command twice for every EMC SourceOne worker host computer on which Web Services software is installed. 1. Register an SPN using the Setspn utility by running the following commands from a command prompt: a. Using the NetBIOS name of the EMC SourceOne Web Services host computer. For example: setspn -U -A http/webservername domain\serviceaccountuser b. Using the fully-qualified domain name (FQDN) of the EMC SourceOne Web Services host computer. For example: setspn -U -A http/webservername.fqdn domain\serviceaccountuser 2. Repeat this procedure for the remaining Web Services and host computers. 3. Configure a User Principal Name (UPN) for the service account as described in Configure a User Principal Name for the service account on page 217. Configure ApplicationHost.config file to use the application pool credentials: 1. Ensure the application pool is run under the EMC SourceOne service account (this should already be configured). Implementing single sign-on in Windows Server 2008 R2 227

228 Configuring Single Sign-on Support (Windows) 2. Locate the the ApplicationHost.config file on the IIS server. Typically: <system_drive>/windows/system32/inetsrv/config 3. Add the useapppoolcredentials attribute to the file: <system.webserver> <security> <authentication> <windowsauthentication enabled="false" usekernelmode="true" useapppoolcredentials="true" /> </authentication> </security> </system.webserver> Scenario B (not recommended) You can disable Kernel-mode authentication and configure SPNs for the EMC SourceOne service account. You forfeit the performance benefits provided using Kernel-mode authentication. Disable Kernel-mode authentication for EMC SourceOne sites: 1. Open the computer on which Web Services is installed, open Internet Information Services (IIS) Manager. 2. Navigate to SearchWS in the Connections pane. 3. Click SearchWS. The configuration options for Search are displayed in the center pane. 4. In the IIS section, double-click the Authentication icon. 5. Select Windows Authentication. 6. In the right pane, select Advanced Settings. 7. Uncheck Kernel-mode Authentication. 8. Repeat this procedure for the Search (Search) and Mobile Services (ExShortcut) site. Configure the SPNs: Note the following differences when using the Setspn utility in Microsoft Windows Server 2008 R2 environment: Microsoft Windows Server 2008 R2 includes an updated version of the Setspn utility as part of the operating system. You must use this version of the utility if running Windows Server 2008 R EMC SourceOne Management Version 6.7 Installation Guide

229 Configuring Single Sign-on Support (Windows) The utility includes an additional parameter switch used when configuring the SPN (-u). This switch indicates that the SPN is for a user instead of a computer. You must run the command twice for every EMC SourceOne worker host computer on which Web Services software is installed. 1. Register an SPN using the Setspn utility by running the following commands from a command prompt: a. Using the NetBIOS name of the EMC SourceOne Web Services host computer. For example: setspn -U -A http/webservername domain\serviceaccountuser b. Using the fully-qualified domain name (FQDN) of the EMC SourceOne Web Services host computer. For example: setspn -U -A http/webservername.fqdn domain\serviceaccountuser 2. Repeat this procedure for the remaining Web Services and host computers. 3. Configure a User Principal Name (UPN) for the service account as described in Configure a User Principal Name for the service account on page 217. Configure Internet Explorer To configure Internet Explorer settings for client computers accessing the EMC SourceOne Search, SharePoint Archive Search, and shortcut URLs: 1. Open Internet Explorer. 2. Select Tools > Internet Options and select the Security tab. 3. Click Local intranet and select Custom Level. 4. Scroll to the bottom of the Settings pane. 5. In the User Authentication > Logon section, ensure that Automatic logon only in Intranet zone is selected. 6. Click OK to return to the Security tab. Implementing single sign-on in Windows Server 2008 R2 229

230 Configuring Single Sign-on Support (Windows) 7. Click Sites. 8. Click Advanced. 9. Add the URLs for the Search, SharePoint Archive Search, and ExShortcut web sites. When this configuration is complete, the Internet Security Properties icon displayed in the lower right side of the browser should indicate that the site is in the local intranet. 230 EMC SourceOne Management Version 6.7 Installation Guide

231 Configuring Single Sign-on Support (Domino) This chapter describes how to configure support for single sign-on authentication for EMC SourceOne Search in an IBM Lotus Domino environment. This appendix is organized as follows: Overview Configuring EMC SourceOne for single sign-on Note: This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above). For details, see Guide to using this document on page 10. Configuring Single Sign-on Support (Domino) 231

232 Configuring Single Sign-on Support (Domino) Overview The single sign-on solution for EMC SourceOne Search and shortcut resolution functionality requires as a foundation the single sign-on solution published by IBM. The IBM single sign-on (SSO) solution is based on a configuration between IBM Websphere Portal and IBM Lotus Domino. Once this configuration is established, you perform some additional configuration steps specific to EMC SourceOne to complete the configuration. For white papers detailing the concepts, implementation details and troubleshooting information, refer to the following IBM web site, "Understanding single sign-on (SSO) between IBM WebSphere Portal and IBM Lotus Domino": proddoc/dw-w-sso-portal-domino/index.html After implementing this configuration, perform the configuration procedures in Configuring EMC SourceOne for single sign-on on page EMC SourceOne Management Version 6.7 Installation Guide

233 Configuring Single Sign-on Support (Domino) Configuring EMC SourceOne for single sign-on Assuming the IBM single-sign on configuration between IBM WebSphere Portal and IBM Lotus Domino has been established, the following sections detail the additional configuration steps required to complete the single sign-on configuration. This section includes the following topics: Enable the DIIOP task on the Domino server Install the ExValidateLTPA web service Configure IIS Web sites in Windows Configure IIS authentication EMC SourceOne ediscovery - Kazeon considerations EMC SourceOne ediscovery - Kazeon is an EMC product that enables organizations to efficiently and cost effectively classify, manage, and retrieve data. To integrate with the EMC SourceOne core product, EMC SourceOne ediscovery - Kazeon communicates with an EMC SourceOne Web Services IIS Web site using the Basic authentication method, while the single sign-on configuration detailed in this chapter is based on Windows Integrated authentication. You must review the following considerations before implementing single sign-on support if implementing EMC SourceOne ediscovery - Kazeon with the EMC SourceOne core product: Mixed authentication You can provide a mixed authentication environment which simultaneously supports: EMC SourceOne Search and Universal URL authentication using Windows Integrated authentication. EMC SourceOne ediscovery - Kazeon authentication using Basic authentication. To support this configuration: Install Web Services software on separate workers to provide separate instances of a Web Services IIS site (SearchWS) for Kazeon and Search. Configuring EMC SourceOne for single sign-on 233

234 Configuring Single Sign-on Support (Domino) Configure the first Web Services site (SearchWS) which supports Kazeon to use Basic authentication (e.g., retain the default configuration). When you install Kazeon software, configure it to point to this Web Services site. Configure the second Web Services site (SearchWS) which supports Search to use Windows Integrated authentication as described in this chapter. When you install other EMC SourceOne components, configure them to point to this Web Services site. Configure the Search site (Search) and Universal URL site (ExShortcut) to use Windows Integrated authentication as described in this chapter. Single sign-on for Universal URL only If single sign-on is needed only to support the Universal URL (ExShortcut) site, you can: Configure the Universal URL site (ExShortcut) site to use Windows Integrated authentication. Configure the Web Services and Search sites (SearchWS and Search) to use Basic authentication. Enable the DIIOP task on the Domino server The Domino Internet Inter-ORB Protocol ( DIIOP) enables EMC SourceOne to attach to and manipulate Domino databases. You can enable the DIIOP task by typing the load diiop command on the Domino server, or you can enable the DIIOP task to load automatically every time the Domino server starts by editing the notes.ini file in the Domino Program directory. For details, refer to the IBM Lotus Domino documentation set. The following link provides relevant information: topic=/com.ibm.wp.zos.doc/collab/ksa_cfg_dommailptl.html 234 EMC SourceOne Management Version 6.7 Installation Guide

235 Configuring Single Sign-on Support (Domino) Install the ExValidateLTPA web service Deploy the ExValidateLTPA web service in WebSphere using the ExValidateLPTA_WS.war file which is packaged in a hot fix available on Powerlink (SourceOne for IBM Lotus Domino SSO Hotfix 1). To install the ExValidateLPTA web service on WebSphere: 1. Unzip the hotfix package and copy the ExValidateLPTA_WS.war file to an appropriate location on the WebSphere server. 2. Log in to the WebSphere Integrated Solutions Console as a WebSphere administrator. 3. Expand the Applications node in the Tasks tree and select Install New Application. The Preparing for application installation page displays. Configuring EMC SourceOne for single sign-on 235

236 Configuring Single Sign-on Support (Domino) 4. In the Path to new application section, select Local file system and browse to the path to which you copied the ExValidateLTPA_WS.war file. 5. In the Context root text box, type ExValidateLTPA_WS. 6. Click Next. The Select installation options page displays. 7. In the Application name text box, remove the "_war" from the displayed text and click Next. The Map modules to servers page displays. 8. Select the ExValidateLTPA_WS module and click Next. The Map virtual hosts for Web modules page displays. 236 EMC SourceOne Management Version 6.7 Installation Guide

237 Configuring Single Sign-on Support (Domino) 9. Select the ExValidateLTPA_WS module and click Next. An installation summary page displays. 10. Click Finish. 11. An installation progress page displays. 12. After installation completes, click Save. 13. Expand the Applications node in the Tasks tree and select Enterprise Applications. The Enterprise Applications page displays. Configuring EMC SourceOne for single sign-on 237

238 Configuring Single Sign-on Support (Domino) 14. Select the ExValidateLTPA_WS application and click Start. The web service is now started. 238 EMC SourceOne Management Version 6.7 Installation Guide

239 Configuring Single Sign-on Support (Domino) Configure IIS Web sites in Windows 2003 This section describes how to configure the EMC SourceOne Search and Web Services IIS Web sites for single sign-on: Configure the Search Web site on page 239 Enable Windows Authentication for the Web Services site on page 240 Configure the Search Web site Do the following to configure the Search (Search) site: 1. Open the computer on which EMC SourceOne Search is installed, open IIS Manager and navigate to the Search virtual directory. 2. Right-click Search and select Properties. 3. Click the ASP.NET tab. 4. Click Edit Configuration. The ASP.NET Configuration Settings page (General tab) displays. 5. In the Application settings section, do the following: a. Click the LTPAAuthEnabled key and click Edit. Configuring EMC SourceOne for single sign-on 239

240 Configuring Single Sign-on Support (Domino) b. In the Value text box, type true. c. Click OK. d. Click the LTPAAuthFailURL key and click Edit. e. In the Value text box, type the URL for the IBM Portal. For example: f. Click OK. g. Click the ExValidateLTPAURL key and click Edit. h. In the Value text box, type the URL for the ExValidateLTPA Web service. For example: S/services/ExValidateLTPAToken.ExValidateLTPATokenH ttpsoap11endpoint i. Click OK. j. Click the DominoServer key and click Edit. k. In the Value text box, type the fully-qualified domain name of the Domino server. For example: servername.domain.com l. Click OK. 6. Click the Autentication tab. 7. In the Authentication settings section, select None in the Authentication mode dropdown list. Enable Windows Authentication for the Web Services site Do the following to configure the EMC SourceOne Web Services (SearchWS) site: 1. Open the computer on which Web Services is installed, open IIS Manager and navigate to the SearchWS virtual directory. 240 EMC SourceOne Management Version 6.7 Installation Guide

241 Configuring Single Sign-on Support (Domino) 2. Right-click SearchWS and select Properties. 3. Click the Directory Security tab. a. In the Authentication and access control section, click Edit to display the Authentication Methods page. b. Ensure that the Anonymous access check box is not selected and that Integrated Windows authentication check box is the only check box selected. 4. Click OK to return to the SearchWS Properties page and select the ASP.NET tab. 5. Click Edit Configuration. 6. Click the Authentication tab Configuring EMC SourceOne for single sign-on 241

242 Configuring Single Sign-on Support (Domino) 7. Change Authentication mode from None to Windows. 8. Select the Authorization tab. 9. Change the Local authorization rules section (bottom pane) to deny access to all users but the EMC SourceOne service account or security group. a. Configure the first entry: a. Rule type: Allow b. Verbs: All verbs c. Users: DOMAIN\serviceAccountUser d. Alternatively, you can enter the EMC SourceOne security group in the Role field. 242 EMC SourceOne Management Version 6.7 Installation Guide

243 Configuring Single Sign-on Support (Domino) Note: Ensure that the Users field is blank if specifying the security group in the Roles field. b. Configure the second entry: a. Rule type: Deny b. Verbs: All verbs c. Users and roles: select All Users (*) 10. Click OK on the dialogs to save all changes and close the properties dialog. Configuring EMC SourceOne for single sign-on 243