Veritas Enterprise Vault™ 12.4
ReadMeFirst

Last updated: 2-Nov-2018

The latest version of this document is available from the Veritas Support website at https://www.veritas.com/docs/100042569.

For the latest news about this release, including any hotfixes, subscribe to https://www.veritas.com/docs/100042567.

This document describes the new features in Veritas Enterprise Vault 12.4.

If you are performing a new installation of Enterprise Vault, follow the installation instructions in the Enterprise Vault Installing and Configuring guide. If you are upgrading, follow the instructions in Upgrade Instructions. These guides are in the Veritas Enterprise Vault\Documentation\English\Administration Guides folder on the Enterprise Vault media.

Contents

New features in Enterprise Vault 12.4

Enterprise Vault 12.4 includes the following new features. For information about the new features in earlier releases, see the release notes for Enterprise Vault 12, 12.1, 12.2, and 12.3.

Support for Azure RMS Decryption

You can now decrypt Office 365 Journal content using Azure RMS services. The encrypted items can then be fully indexed and available for search and preview.

A new tab called RMS is added to the Site Properties dialog box, which allows you to enable RMS decryption. This tab also allows you to specify details such as the Intranet URL, Extranet URL, a Tenant ID, a Symmetric Key, and an Application Principal ID so that the Enterprise Vault server can authenticate with the Azure Information Protection (AIP) services.

The Journal Reports section in the Advanced tab of the SMTP Policy Properties now includes an option called Decrypt RMS Protected Items. This setting controls whether Enterprise Vault should decrypt RMS-protected messages for indexing and preview. Note that to use this setting, you must store the RMS-protected message as the primary message during archiving.

Enterprise Vault currently supports the decryption of items that are archived using SMTP Journaling and SMTP Group Journaling. Items that are archived using SMTP Mailbox Journaling are available only in the encrypted format.

OData support for auditing

With Enterprise Vault 12.4, you can retrieve records from the Enterprise Vault auditing database using the Open Data (OData) web service. You can use this information with any OData-compatible reporting tool to create reports as required. Examples of such reporting tools include Excel/PowerQuery and Microsoft SQL Server Reporting Services (SSRS).

You can use the Open Data (OData) web service to query the Enterprise Vault auditing database by accessing the endpoints. The following table describes the auditing endpoints that you can view information about using the OData web service.

This endpoint

Shows

Archives

The list of archives for which audit entries are recorded in the audit database.

AuditEntries

The list of audit entries that are recorded in the audit database.

Categories

The list of audit categories for which audit entries are recorded in the audit database.

SubCategories

The subcategories on the basis of which audit entries are recorded in the audit database.

Users

The list of users for which audit entries are recorded in the audit database.

Servers

The list of servers for which audit entries are recorded in the audit database.

Statuses

The list of statuses that are recorded in the audit database.

For more information see the "Viewing the audit database entries using the OData web service" section of the Auditing guide.

Centralized configuration for auditing

In Enterprise Vault 12.4, you can configure auditing in the following ways:

 The Configure Auditing option in the Enterprise Vault Servers container in the Administration Console lets you enable and configure auditing for all the available Enterprise Vault servers in the site. Note that the option to enable auditing is no longer available from the Auditing tab of the Computer Properties of the Enterprise Vault server.

Support for Outlook 2016 Click to Run

This release includes support for Microsoft Office Outlook 2016 Click to Run (32-bit version) on Enterprise Vault servers and client computers.

Changes in Enterprise Vault 12.4

Changes to prerequisite software for Enterprise Vault 12.4

There are no changes to prerequisite software since Enterprise Vault 12.

The Enterprise Vault installer requires Microsoft .NET Framework 4.5.2, and all Enterprise Vault servers require both Microsoft .NET Framework 4.5.2 and .NET Framework 3.5 SP1.

For full details of all supported versions of software and devices, see the Enterprise Vault Compatibility Charts. Appendix A provides details of the versions of software that have been dropped since Enterprise Vault 11.0.

Visual C++ 2008 SP1 Redistributable package is no longer required

Earlier versions of Enterprise Vault required you to install the Microsoft Visual C++ 2008 SP1 Redistributable package on both client and server computers. This is not the case with Enterprise Vault 12.4.

If you previously installed the 2008 SP1 Redistributable package and do not need it for any other applications that you run on your client and server computers, you can uninstall it.

Enhancements to the FSAUtility -t command

The FSAUtility -t command now includes an option to restore files that were archived before the specified date. The options to specify a date for restoring files are as follows:

New and enhanced PowerShell cmdlets

Enterprise Vault 12.4 includes the following new PowerShell cmdlets:

Cmdlet Description
Get-EVArchivePermission Returns a list of all the users and groups who have read, write, or delete permissions in the specified archive.
Get-EVFSAComputerSettings

Returns the Enterprise Vault server level settings configured for NetApp C-Mode server communication.

Get-EVFSASiteSettings

Returns the site level settings configured for NetApp C-Mode server communication.

Remove-EVArchivePermission Removes the access permissions that are granted or denied to a given user or group on the specified archive.
Set-EVArchivePermission Allows you to grant or deny access permissions to a given user or group on the specified archive.

Set-EVFSAComputerSettings

Updates the Enterprise Vault server level settings configured for NetApp C-Mode server communication.

Set-EVFSASiteSettings

Updates the site level settings configured for NetApp C-Mode server communication.

Enterprise Vault 12.4 includes the following changes to existing PowerShell cmdlets:

Cmdlet Change
New-EVSMTPTarget You cannot specify a retention plan to associate with the SMTP target. The -RetentionPlan parameter is no longer available.
New-EVSkypeForBusinessTarget You cannot specify a retention plan to associate with the Skype for Business archiving target. The -RetentionPlan parameter is no longer available.

See the PowerShell Cmdlets guide for more information on these cmdlets.

Changes to Enterprise Vault registry values

Enterprise Vault 12.4 includes the following changes to the registry values:

Weak protocols and ciphers are blocked for HTTPS communications

Starting Enterprise Vault 12.3, the Enterprise Vault installer disables weak protocols and ciphers for all applications that require HTTPS communications.

Weak protocols

Enterprise Vault disables the following protocols, if you have not enabled them manually:

Weak protocols are managed using registry values under the following subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

If you have manually enabled the weak protocols listed above, registry values will exist under the Protocols subkey. Enterprise Vault does not disable a protocol that you have enabled in this way.

Weak cyphers

Enterprise Vault disables the following ciphers:

Ciphers are managed using the registry value called functions under the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002

Enterprise Vault disables all the weak ciphers listed above, even if you have enabled any of them using the functions registry value.

Oracle Outside In Technology content converters updated

This release includes the following patch for Oracle Outside In Technology content converters:

Known issues and limitations

Outlook 2016 Click-to-Run causes performance degradation during Exchange archiving

If you have installed Outlook 2016 Click-to-Run on the Enterprise Vault server, you will experience performance degradation when you archive items from Microsoft Exchange user mailboxes, journal mailboxes, and public folders.

Too many audit database entries could cause the Enterprise Vault database upgrade to take a long time

After you have upgraded to the 12.4 version of the Enterprise Vault server software, you must run the Start-EVDatabaseUpgrade cmdlet to upgrade the Enterprise Vault databases. The database upgrade process can take a long time if there are too many entries in the AuditTrail table in the Enterprise Vault audit database.
The duration of the database upgrade process also depends on any one or both of the following conditions:

For more information, see https://www.veritas.com/docs/100044573.html.

Documentation

The Enterprise Vault media includes the Enterprise Vault documentation in all supported languages.

The Enterprise Vault documentation is available in PDF and HTML format in the Veritas Documentation Library.

Administration documentation

The Enterprise Vault administration documentation is available in English, Japanese, and Simplified Chinese from the following locations:

Document Comments
Enterprise Vault Documentation Library

Includes all the following documents in Windows Help (.chm) format so that you can search across them all. It also includes links to the guides in Acrobat (.pdf) format.

You can access the library in several ways, including the following:

  • In Windows Explorer, browse to the Documentation\language\Administration Guides subfolder of the Enterprise Vault installation folder, and then open the EV_Help.chm file.
  • On the Help menu in the Administration Console, click Help on Enterprise Vault.
Introduction and Planning Provides an overview of Enterprise Vault functionality.
Deployment Scanner Describes how to check the required software and settings before you install Enterprise Vault.
Installing and Configuring Provides detailed information on setting up Enterprise Vault.
Upgrade Instructions Describes how to upgrade an existing Enterprise Vault installation to the latest version.
Setting up Domino Server Archiving Describes how to archive items from Domino mail files and journal databases.
Setting up Exchange Server Archiving Describes how to archive items from Microsoft Exchange user mailboxes, journal mailboxes, and public folders.
Setting up File System Archiving Describes how to archive files that are held on network file servers.
Setting up IMAP Describes how to configure IMAP client access to Exchange archives and Internet Mail archives.
Setting up SharePoint Server Archiving Describes how to archive documents from Microsoft SharePoint servers.
Setting up Skype for Business Archiving Describes how to archive Skype for Business sessions.
Setting up SMTP Archiving Describes how to archive SMTP messages from other messaging servers.
Classification using the Microsoft File Classification Infrastructure Describes how to use the classification engine that is built into recent Windows Server editions to classify all new and existing archived content.
Classification using the Veritas Information Classifier Describes how to use the Veritas Information Classifier to evaluate all new and archived content against a comprehensive set of industry-standard classification policies.
If you are new to classification with Enterprise Vault, we recommend that you use the Veritas Information Classifier rather than the older and less intuitive File Classification Infrastructure engine.
Administrator's Guide Describes how to perform day-to-day administration procedures.
PowerShell Cmdlets Describes how to perform various administrative tasks by running the Enterprise Vault PowerShell cmdlets.
Auditing Describes how to collect auditing information for events on Enterprise Vault servers.
Backup and Recovery Describes how to implement an effective backup strategy to prevent data loss, and how to provide a means for recovery in the event of a system failure.
Reporting Describes how to implement Enterprise Vault Reporting, which provides reports on the status of Enterprise Vault servers, archives, and archived items. If you configure FSA Reporting, additional reports are available for file servers and their volumes.
NSF Migration Describes how to import content from Domino and Notes NSF files into Enterprise Vault archives.
PST Migration Describes how to migrate content from Outlook PST files into Enterprise Vault archives.
Utilities Describes Enterprise Vault tools and utilities.
Registry Values A reference document that lists the registry values with which you can modify many aspects of Enterprise Vault behavior.
Help for Administration Console The online Help for the Enterprise Vault Administration Console.

Guides for end users

The following guides for end users are provided in .PDF format on the Enterprise Vault media, in the folder Veritas Enterprise Vault\Documentation\language\Client User Guides:

Legal notice

Copyright © 2018 Veritas Technologies LLC. All rights reserved.

Veritas, the Veritas Logo, Enterprise Vault, Compliance Accelerator, and Discovery Accelerator are trademarks or registered trademarks of Veritas Technologies LLC or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

This product may contain third-party software for which Veritas is required to provide attribution to the third party ("Third-party Programs"). Some of the Third-party Programs are available under open source or free software licenses. The License Agreement accompanying the Software does not alter any rights or obligations you may have under those open source or free software licenses. Refer to the Third-party Legal Notices document accompanying this Veritas product or available at:

https://www.veritas.com/about/legal/license-agreements

The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Veritas Technologies LLC and its licensors, if any.

THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. VERITAS TECHNOLOGIES LLC SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.

The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq. "Commercial Computer Software and Commercial Computer Software Documentation," as applicable, and any successor regulations, whether delivered by Veritas as on-premises or hosted services. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.

Veritas Technologies LLC
500 E Middlefield Road
Mountain View, CA 94043

https://www.veritas.com