How To Process PST Files With Encryption Using Certificates in Distributed Processing Environment
book
Article ID: 100038552
calendar_today
Updated On:
Description
Description
In a distributed processing environment, all of the PKI certificates must be imported for each appliance in the cluster, for each of the following user accounts: EsaApplicationService, EsaPstRetrieverService, and the Native Reviewer (IGC Services). This will enable support for processing and review of signed and encrypted messages.
First, for two of the three user accounts (EsaApplicationService and EsaPstRetrieverService) you can install the certificates in one of two ways, depending on your preference:
A. Manual Installation. See "Option A" (This method is required for installing on utility nodes.)
B. Installation using the eDiscovery Platform server. See "Option B"
Next, for the third user account: Native Reviewer (IGC Services), installation must be done through the user interface, using the "PKI Certificate Installer" property in Support Features. See "Installation using Support Feature [for Native Reviewer (IGCService) user]".
Option A: Manual Installation
If you prefer to use command line, use the following command to install the certificates for both the EsaApplicationService and EsaPstRetrieverService user accounts.
To manually install PKI certificates
Note: This method (manual installation) is required for utility nodes, and optional for EsaApplicationService and EsaPstRetrieverService user accounts.
1. Log in to the appliance as the EsaApplicationService account user, then from a command line, run the command:
certutil -f -p -importpfx
2. Repeat this command for the Retriever account. (Log in as the EsaPstRetrieverService user account, and enter the same command.)
The PKI certificate location should be accessible to the EsaApplicationService, and EsaPstRetrieverService user accounts. For the Native Review user, use the Support Feature from the user interface.
3. (For utility nodes only): Repeat this step for each utility node, for each of the EsaApplicationService, EsaPstRetrieverService user accounts.
4. Continue to "Installation using Support Feature [for Native Reviewer (IGCService) user]" in this section.
Option B: Installation using eDiscovery Platform Server
If you prefer to use the eDiscovery server to install certificates, follow the steps below for both the EsaApplicationService and EsaPstRetrieverService user accounts.
Note: This method (eDiscovery Platform Server installation) cannot be used for installing on utility nodes. Use Option A (manual installation).
To install certificates from the eDiscovery Platform server
1. Log in to the appliance, as the EsaApplicationService account user.
2. Double-click on the PKI certificate to import, and provide the password.
3. Follow online instructions to install the certificate, keeping all default settings.
4. Repeat steps 1-3 for the Retriever account. (Log in as the EsaPstRetrieverService user account, and follow online instructions.)
The PKI certificate location should be accessible to the EsaApplicationService, and EsaPstRetrieverService user accounts. For the Native Review user, use the Support Feature from the user interface.
5. Continue to "Installation using Support Feature [for Native Reviewer (IGCService) user]" in this section.
Installation using Support Feature [for Native Reviewer (IGCService) user]
After installing certificates for each of the other two user accounts, follow these steps to install them for the Native Reviewer (IGC Services) user account.
Note: This method (user interface) is required only for the Native Reviewer (IGC Services) user account.
To install certificates from the user interface
1. In the user interface, go to System > Support Features, and select the property PKI Certificate Installer.
2. Select an appliance. (This will need to be repeated for each appliance in the cluster.)
3. Enter the PKI certificate location and password.
4. Enter the User Name (and Domain, if desired) for Native Review.
5. Enter the user password for Native Review.
6. Click Submit to save your settings.
Issue/Introduction
How To Process PST Files With Encryption Using Certificates in Distributed Processing Environment
Was this article helpful?
thumb_up
Yes
thumb_down
No