EMC SourceOne Supervisor Version 6.6 SP1

EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide P/N 300-999-405 REV 01 EMC Corporation Corporate Headquarters: Hopkinton, MA 01748-9103 1-508-435-1000 www.emc.com

Copyright 2012 EMC Corporation. All rights reserved. Published December, 2012 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED AS IS. EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. All other trademarks used herein are the property of their respective owners. 2 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Contents Chapter 1 Chapter 2 Pre-installation Planning considerations... 10 Confirm Email Supervisor purpose...10 Identify key players...10 Define monitoring objectives...11 Set up your supervisor organization...12 Set up your reviewer organization...12 Establish communication...13 Provide training...14 Conduct tests...14 Configuration considerations...14 Pre-installation checklist... 15 Configuring accounts and permissions... 16 Establishing system requirements... 17 Database host computer requirements...17 EMC SourceOne Email Supervisor server host computer requirements...20 EMC SourceOne Worker Services computer requirements.22 EMC SourceOne Email Supervisor client computer requirements...22 Installation scenarios... 23 New installations...23 Existing EmailXaminer installations...23 Installing Email Supervisor Installation overview... 26 Email Supervisor components...26 Important considerations when installing Email Supervisor components...26 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide 1

Contents Installing Email Supervisor server software... 28 Preparing for installation... 28 Installing the EMC SourceOne Runtime Environment... 29 Important consideration if installing on Windows Server 2008... 31 Installing the Email Supervisor server software... 31 Granting additional permissions on the Email Supervisor server... 37 Configuring Email Supervisor database permissions... 38 Creating an impersonate account... 38 Configuring EMC SourceOne primary service account access to the Email Supervisor database... 41 Configuring ExArchiveUser account access to the Email Supervisor database... 41 Installing the Email Supervisor Business Component Extension.. 44 Preparation... 44 Installing the Email Supervisor BCE... 44 Configure dependent settings in the EMC SourceOne console. 46 Configure the Supervisor BCE in the EMC SourceOne console... 46 Configure mapped folder permissions in EMC SourceOne console... 47 Configuring retrieval settings in the EMC SourceOne console 47 Installing Email Supervisor Manager... 48 Installing Email Supervisor Reviewer... 54 Installing Email Supervisor Reviewer interactively... 54 Installing the Reviewer application silently... 59 Configuring IIS 7 on a Supervisor server... 62 Configuring Supervisor Web service on IIS 7... 62 Configuring IIS 7 to use the Reviewer client... 63 Post-Installation configuration for Windows authentication... 65 Preparing for configuration... 65 Configuring Supervisor server for Windows authentication.. 66 Configuring Supervisor Manager client to enable Windows authentication... 69 Configuring Supervisor Reviewer client to enable Windows authentication... 70 Configuring the connection mode for Email Supervisor database connections... 77 Changing the Windows authentication mode to SQL Server 2 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Contents authentication...77 Troubleshooting installation issues... 79 Server component log files...79 Error creating service account...79 Error while configuring the email account information...80 Reviewer application MSI log file...80 Uninstalling Email Supervisor... 81 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide 3

Contents 4 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Preface As part of an effort to improve and enhance the performance and capabilities of its product lines, EMC periodically releases revisions of its hardware and software. Therefore, some functions described in this document may not be supported by all versions of the software or hardware currently in use. For the most up-to-date information on product features, refer to your product release notes. If a product does not function properly or does not function as described in this document, please contact your EMC representative. Audience Related documentation This document is part of the EMC SourceOne Email Supervisor documentation set, and is intended for use by installers of the product, EMC SourceOne system administrators, and mail server administrators. Related documents include: EMC SourceOne Email Supervisor Release Notes EMC SourceOne Email Supervisor Administration Guide EMC SourceOne Email Supervisor Reviewer Guide EMC SourceOne Email Products Compatibility Guide Messaging Current Product Compatibility Guide EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide 5

Preface Conventions used in this document EMC uses the following conventions for special notices. Note: A note presents information that is important, but not hazard-related.! CAUTION A caution contains information essential to avoid data loss or damage to the system or equipment.! IMPORTANT An important notice contains information essential to operation of the software. WARNING A warning contains information essential to avoid a hazard that can cause severe personal injury, death, or substantial property damage if you ignore the warning. DANGER A danger notice contains information essential to avoid a hazard that will cause severe personal injury, death, or substantial property damage if you ignore the message. Typographical conventions EMC uses the following type style conventions in this document: Normal Used in running (nonprocedural) text for: Names of interface elements (such as names of windows, dialog boxes, buttons, fields, and menus) Names of resources, attributes, pools, Boolean expressions, buttons, DQL statements, keywords, clauses, environment variables, filenames, functions, utilities URLs, pathnames, filenames, directory names, computer names, links, groups, service keys, file systems, notifications Bold: Used in running (nonprocedural) text for: Names of commands, daemons, options, programs, processes, services, applications, utilities, kernels, notifications, system call, man pages 6 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Preface Italic: Courier: Courier bold: Used in procedures for: Names of interface elements (such as names of windows, dialog boxes, buttons, fields, and menus) What user specifically selects, clicks, presses, or types Used in all text (including procedures) for: Full titles of publications referenced in text Emphasis (for example a new term) Variables Used for: System output, such as an error message or script URLs, complete paths, filenames, prompts, and syntax when shown outside of running text Used for: Specific user input (such as commands) Courier italic: Used in procedures for: Variables on command line User input variables < > Angle brackets enclose parameter or variable values supplied by the user [ ] Square brackets enclose optional values Vertical bar indicates alternate selections - the bar means or { } Braces indicate content that you must specify (that is, x or y or z)... Ellipses indicate nonessential information omitted from the example Where to get help EMC support, product, and licensing information can be obtained as follows. Product information For documentation, release notes, software updates, or for information about EMC products, licensing, and service, go to the EMC Powerlink website (registration required) at: http://powerlink.emc.com Technical support For technical support, go to EMC Customer Service on Powerlink. To open a service request through Powerlink, you must have a valid support agreement. Please contact your EMC sales representative for details about obtaining a valid support agreement or to answer any questions about your account. EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide 7

Preface Guide to using this document This document supports online reading using Adobe Reader version 7.0 or above. For optimal performance, you should download and install the latest free Adobe Reader version: (http://get.adobe.com/reader/) Simplifying navigation This document uses hyperlinks to other relevant sections. You can simplify navigation by enabling an optional Web browser-like navigation feature in Adobe Acrobat Reader (version 7.0 or above): 1. On the Acrobat toolbar, right-click the Page Up or Page Down icon. Page Up Page Down 2. Click Show All Tools. The Previous View and Next View navigation buttons are displayed on your toolbar. Previous View Next View The Previous View and Next View navigation buttons function similar to your Web browser navigation buttons, enabling you to navigate between views using document hyperlinks. More information For more information about Adobe Reader navigation and other features, refer to the product help system. Your comments Comments and suggestions about our product documentation are always welcome. To provide feedback: 1. Go to: http://powerlink.emc.com 2. Click the Feedback link. 8 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

1 Pre-installation This chapter provides an overview of the preparation that is required prior to installing Email Supervisor software, and includes the following topics: Planning considerations... 10 Pre-installation checklist... 15 Configuring accounts and permissions... 16 Establishing system requirements... 17 Installation scenarios... 23 Pre-installation 9

Pre-installation Planning considerations EMC SourceOne Email Supervisor is a supplementary product used with EMC SourceOne Email Management or EMC EmailXtender to sample indexed messages from message store and present them for supervisory review. Note: Email Supervisor can be configured to work with either the newer EMC SourceOne Email Management message archive or older EMC EmailXtender message archive. References to the message archive in this guide will focus on the newer EMC SourceOne Email Management message archive. Before you install Email Supervisor or upgrade EMC EmailXaminer, review these planning considerations. It is important that you plan your implementation and structure your organization to maximize the effectiveness of the Email Supervisor solution. Confirm Email Supervisor purpose Ensure that you have identified the reasons for using Email Supervisor, such as implementing the application to monitor compliance with external regulations such as NASD Rule 3010, other corporate policies, or both. Before configuring Email Supervisor, you must have the expertise within your organization to interpret, document, and collaborate with your Email Supervisor implementation team to establish the directives described in external regulations or corporate policy documentation that you intend to monitor. Identify key players Email Supervisor requires organized human interaction to produce intended results. You must understand who the key players are in your organization and train them to perform their respective roles. Typical players include administrators, supervisors, reviewers, individuals, and functional groups within your organization and your organization s management structure. 10 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Pre-installation Define monitoring objectives Defining your monitoring objectives consists of deciding who to monitor and how. You should first consider which users should receive a higher level of scrutiny based on the higher degree of risk inherent in the nature of their daily communications. Segmenting your users by function to determine the level of monitoring forms the basis for creating review groups. Once you establish how you intend to group users, you can then decide which specific business policies are applied to each group. When developing business policies, you must decide whether you will randomly sample messages, flag them for certain content, or use a combination of both. You must also decide whether to sample or flag inbound messages, outbound messages, or both. If you intend to randomly sample messages, identify the percentage of messages you want to sample. You must also understand the typical messaging traffic for users whose mail you intend to sample. This information can typically be found by working with your email system administrator to obtain statistical information about the volume of mail generated by groups of users. If you intend to configure content-based flagging, know what specific information you are looking for. For example, know if you are looking for proprietary content that is being sent outbound, or certain terminology, or abusive language. You must consider the specifics of what to flag in order to develop effective queries and lexicons that will accomplish your goals with a minimum number of false positives. If you want to use a combination of random sampling and content-based flagging, be sure to understand lexicon-weighted sampling in Email Supervisor, which carries with it some unique considerations to achieve expected results. The goal is to present a reasonable number of messages for your reviewers while still achieving your compliance objectives. More information on message flagging and the associated mathematics can be found in the EMC SourceOne Email Supervisor Administration Guide. Planning considerations 11

Pre-installation Also, as part of defining your monitoring goals, you should consider the following: The duration of the sample period. The number of days allowed for review. The domains in your company that are considered internal. Set up your supervisor organization Supervisors are responsible for interpreting the monitoring objectives for Email Supervisor and configuring the system to meet those objectives. The number of supervisors required to effectively configure and manage Email Supervisor is related to the size of your organization and how you organize the users you intend to monitor into review groups. In a typical configuration, each Supervisor is responsible for several review groups, yet they can share configurable elements that make up business policies in Email Supervisor such as lexicons, queries, supervisory codes, and registered documents. Therefore, supervisors should work together as a functional team to effectively develop, manage, and share common business policies or the configurable elements that comprise business policies where it makes sense to do so. Set up your reviewer organization An effective reviewer organization is the key to meeting compliance and policy adherence objectives. Carefully consider several factors when determining the scope of your reviewer organization. Questions to consider include: Who are your reviewers? Are they a separate organization or are they comprised of people from within your company s overall organization? Are your reviewers trained or certified in compliance and policy rules? How many reviewers are in the organization? How do you intend to organize your review groups and balance the workload across your reviewers? How many users should be in each review group? 12 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Pre-installation How many reviewers do you want to assign to each review group and which reviewer role will they fulfill (standard or escalated)? Note: The EMC SourceOne Email Supervisor Administration Guide discusses reviewer roles in detail. What is the typical number of messages for review that are generated by the users in a review group based on: The number of messages each member generates? Your sampling and flagging criteria? Can each reviewer reasonably review the expected number of messages? Are your reviewers dedicated full-time to reviewing messages, or do they have other roles and responsibilities? How long does a reviewer have to review and process a message? Who is responsible for communicating with reviewers who fall behind? To whom do reviewers report compliance or policy violations? What is the method of communication? By answering these questions beforehand, and combining this information with other considerations, you can better predict whether Email Supervisor will present a manageable number of emails for each reviewer to process. Establish communication It is important to encourage and formalize the means for communication between the supervisor and reviewer organizations. Ideally, supervisor and reviewers should constantly provide feedback to one another. For example, if a reviewer notices that message content is commonly flagged in a large number of messages, yet the content does not represent a compliance violation, the reviewer should relay that information to the review group supervisor. The supervisor can then update the Email Supervisor configuration to eliminate this issue and communicate the change to other supervisors and reviewers. Planning considerations 13

Pre-installation It is important to note that a flagged message does not necessarily indicate a policy violation. It is merely a first step to identify a possible violation. Reviewers must use their judgement to make the determination as to whether the flagged message is indeed a violation of defined external regulations or corporate policies. Ultimately, a supervisor s goal should be to fine-tune Email Supervisor over time so that most of the messages flagged by the system represent compliance or policy violations. Provide training To facilitate smooth rollout and support of Email Supervisor to affected organizations, you should schedule targeted training for administrators, supervisors, your internal help desk, and reviewers. You should also develop communication to your entire organization to describe how Email Supervisor functions and how its implementation benefits your organization. Conduct tests Before rolling out Email Supervisor to your entire organization, conduct tests on a small scale to ensure the Email Supervisor system is delivering expected results, as described in the EMC SourceOne Email Supervisor Administration Guide. Configuration considerations If your configuration exceeds 3,800 total mailboxes, 133,000 total messages per day, and has an average message size of more than 200 KB including attachments, you must specify different servers for the Email Supervisor Server component and Email Supervisor Database component during Email Supervisor setup. EMC does not support these components sharing a server if your configuration exceeds these parameters. 14 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Pre-installation Pre-installation checklist Table 1 Table 1 on page 15 provides an overview of the pre-installation tasks that must be completed before installing Email Supervisor software. Checklist overview Done Activity Description Validate the EMC SourceOne Email Management installation. Review the EMC SourceOne Email Supervisor Release Notes. Configure accounts and permissions. Configure and validate system requirements Ensure EMC SourceOne Email Management software is installed, configured, and working properly before starting the Email Supervisor installation. Refer to the EMC SourceOne Email Products Compatibility Guide for the supported version of EMC SourceOne Email Management. Review the release notes for important late-breaking information for the version of EMC SourceOne Email Supervisor software you are installing or upgrading. Refer to Configuring accounts and permissions on page 16. Refer to Establishing system requirements on page 17. Pre-installation checklist 15

Pre-installation Configuring accounts and permissions This section provides a checklist for the tasks required to configure groups and accounts. Table 2 Accounts and Permissions checklist for Active Directory Tasks Description Validation Create an impersonate login for EMC SourceOne Email Supervisor Manager and Reviewer clients Identify the Email Supervisor service account Add the Email Supervisor service account to the EMC SourceOne security group The Supervisor Manager and Reviewer clients use this login to connect to the database. Establishing system requirements on page 17 provides more details. Depending on your environment requirements, you can either use the existing EMC SourceOne primary service account (required in all EMC SourceOne environments) or a separate Email Supervisor service account. Depending on your environment requirements: If you decide to use the EMC SourceOne primary service account as your Email Supervisor service account, this account is already a member of the EMC SourceOne security group. If you use a separate Supervisor service account, add this account to the EMC SourceOne security group. Ensure the login is successfully created with specified permissions. Ensure the account is identified or created. Ensure the account is added to the group. 16 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Pre-installation Establishing system requirements This section provides minimum hardware, operating system, network connectivity, and prerequisite software requirements for components comprising a typical EMC SourceOne Email Supervisor configuration: Database host computer requirements on page 17. EMC SourceOne Email Supervisor server host computer requirements on page 20. EMC SourceOne Worker Services computer requirements on page 22. EMC SourceOne Email Supervisor client computer requirements on page 22. Database host computer requirements Table 3 on page 17 describes the requirements for a dedicated Microsoft SQL Server database host computer. Table 3 Database host computer base requirements (page 1 of 3) Hardware OS Disk configuration Network Software The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment. The EMC SourceOne Email Products Compatibility Guide details operating system requirements. The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment. High-speed connection to all components and systems in the configuration with sufficient bandwidth to process the expected workload. Refer to the EMC SourceOne Email Products Compatibility Guide for more detailed information on supported versions of the software described in this section. Establishing system requirements 17

Pre-installation Table 3 Database host computer base requirements (page 2 of 3) SQL Server version Refer to the EMC SourceOne Email Products Compatibility Guide for specific information on supported: Operating systems Microsoft SQL Server versions Editions Collation (case-sensitivity) settings Note the following: Can be the default instance or named instance. SQL Server host computer accessible from EMC SourceOne computers. Dedicate a separate server for your SQL Server. EMC does not support installing both the Email Supervisor server and the SQL Server on one computer unless you have: - 3,800 or fewer total mailboxes. - Less than 133,000 messages total per day. - An average message size of less than 200 KB, including attachments. Microsoft SQL Server authentication mode Ensure that the following requirements are met: The SQL Server s authentication must be set to SQL Server and Windows authentication. You can access this setting from the SQL Server Enterprise Manager by right-clicking your SQL Server s name, selecting Properties, and activating the Security tab. Note: Supervisor installer requires the authentication mode to be set to SQL Server and Windows authentication (mixed) mode to create the databases. However, Supervisor supports Windows Authentication mode to connect to the SQL server at runtime. Therefore, you can always switch the authentication mode to Windows Authentication after the Supervisor installation. System admin user, sa (default), is enabled. 18 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Pre-installation Table 3 Database host computer base requirements (page 3 of 3) Microsoft SQL Server Client Access Licenses (CALs) To function, Email Supervisor requires that a minimum of 10 Microsoft SQL Server Client Access Licenses (CALs) be available on the dedicated SQL Server. Ten available licenses support the following: One Administrator One Supervisor One Reviewer Seven Email Supervisor services Note: You must provide an additional CAL for each administrator, supervisor, and reviewer that you configure (or plan to configure) in Email Supervisor. The Microsoft website has more details on licensing for Microsoft SQL Server. Establishing system requirements 19

Pre-installation EMC SourceOne Email Supervisor server host computer requirements Table 4 on page 20 describes the requirements for the EMC SourceOne Email Supervisor server host computer. Table 4 EMC SourceOne Email Supervisor host computer requirements (page 1 of 2) Hardware OS Disk configuration Network Software The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment. Refer to the EMC SourceOne Email Products Compatibility Guide for detailed operating system requirements. The EMC SourceOne Sizing Calculator provides detailed recommendations based on your environment. High-speed connection to all components and systems in the configuration with sufficient bandwidth to process the expected workload. Refer to the EMC SourceOne Email Products Compatibility Guide for more detailed information on supported versions of the software described in this section. Email software (Exchange) Install Outlook 2007 (ensure Cached Exchange Mode is disabled). Email software (Domino) Install Notes client. Configure the Notes ID as the EMC SourceOne Notes user account. Validate by ensuring the client can access the mail server. Notes 8.5 Shared Login feature is not supported Do not update or change the version of Lotus Notes client software after EMC SourceOne components are installed. 20 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Pre-installation Table 4 EMC SourceOne Email Supervisor host computer requirements (page 2 of 2) Email software (general) Mixed-mail environments (Exchange and Domino): Ensure Outlook is the default mail client SMTP mail environment: No email client is required Validation: Validated by EMC SourceOne software installation that email client version is supported Microsoft.NET Framework Redistributable Package Microsoft Internet Information Services (IIS) Confirm the.net Framework is installed or manually install. Refer to the EMC SourceOne Email Products Compatibility Guide for the supported version. Validation: Validated by EMC SourceOne software installation that email client version is supported Windows 2003 Server IIS Server 6.0 is not an integrated component of Windows 2003 Server, and must be installed before running the Email Supervisor software setup. To verify or install the IIS Server: 1. From the Control Panel, double-click Add or Remove Programs. 2. Click Add/Remove Windows Components. 3. From the Windows Components Wizard, verify that the Internet Information Services (IIS) checkbox is selected. If not, select the checkbox and click Next to install IIS. Windows 2008 Server For Windows 2008, ensure that IIS 7.x is installed with IIS 6 compatibility settings enabled.! IMPORTANT Email Supervisor software cannot be installed on the mail server or the EMC SourceOne Email Management server. Optionally, you can choose to install the Email Supervisor Manager and Email Supervisor Reviewer applications on the Email Supervisor server as well. Establishing system requirements 21

Pre-installation EMC SourceOne Worker Services computer requirements Installing support for Email Supervisor in an EMC SourceOne Email Management environment entails installing EMC SourceOne Email Supervisor Business Component Extensions (BCE) software on EMC SourceOne Worker Services computers. Therefore, it is assumed that the Worker Services computers already exist and meet the system requirements, prerequisites, and software installations described in the following documents: EMC SourceOne Email Management Installation Guide EMC SourceOne Products Compatibility Guide EMC SourceOne Email Supervisor client computer requirements Table 5 on page 22 describes the requirements for client computers running the following EMC SourceOne Email Supervisor software: Email Supervisor Manager client software Email Supervisor Reviewer client software Table 5 EMC SourceOne Supervisor client computer base requirements Hardware OS Network Software Standard desktop or laptop used in a corporate environment. Refer to the EMC SourceOne Email Products Compatibility Guide for detailed operating system requirements. Standard connection to the corporate network. Refer to the EMC SourceOne Email Products Compatibility Guide for more detailed information on supported versions of the software described in this section. Email software (Exchange) Ensure Microsoft Outlook installed. Email software (Domino) Ensure IBM Lotus Notes installed. Email software (general) SMTP mail environment: No email client is required. Validation: Supported email client software versions validated if present. 22 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Pre-installation Installation scenarios The installation process differs depending on whether you are installing EMC SourceOne Email Supervisor for the first time, or upgrading an existing EmailXaminer installation. Ensure that you review the information for your installation scenario. New installations For new Email Supervisor installations, Chapter 2, Installing Email Supervisor provides the information needed to install and configure Email Supervisor components. Existing EmailXaminer installations If you have an existing EmailXaminer installation, ensure you do the following before installing Email Supervisor software: 1. Back up the existing EXM3.1 databases. 2. Uninstall the Existing EXM without removing the databases. 3. Establish the permissions and system requirements described in Chapter 1, Pre-installation on page 9. 4. Refer to Chapter 2, Installing Email Supervisor for details on installing and configuring Email Supervisor components. Specific information is provided within the procedures for migrating your existing EmailXaminer database information. Installation scenarios 23

Pre-installation 24 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

2 Installing Email Supervisor This chapter describes how to install Email Supervisor software, including the server, database, and client software. This chapter includes: Installation overview... 26 Installing Email Supervisor server software... 28 Configuring Email Supervisor database permissions... 38 Installing the Email Supervisor Business Component Extension 44 Configure dependent settings in the EMC SourceOne console.. 46 Installing Email Supervisor Manager... 48 Installing Email Supervisor Reviewer... 54 Configuring IIS 7 on a Supervisor server... 62 Post-Installation configuration for Windows authentication... 65 Troubleshooting installation issues... 79 Uninstalling Email Supervisor... 81 Installing Email Supervisor 25

Installation overview This section describes the software components which comprise EMC SourceOne Email Supervisor and important considerations for installing those components. Email Supervisor components The following software executables are provided in the Email Supervisor software kit: ES1_SupervisorSetup.exe Installs the following components: Email Supervisor Server Email Supervisor Database Email Supervisor Manager application ES1_SupervisorBCE.exe Installs the Business Component Extension on EMC SourceOne Worker Services computers. ES1_SupervisorRSetup.exe Installs the Email Supervisor Reviewer application. ES1_SRESetup.exe Installs the EMC SourceOne Runtime Environment, if not already installed. The following SQL files are provided in the Email Supervisor software kit: ES1SupervisorBCEDatabase.sql Installation script for the creation of the Email Supervisor database. Convert_RT_Message_Master.sql Database migration script to support environments that are upgrading from EmailXaminer to Email Supervisor. Important considerations when installing Email Supervisor components At a minimum, you must install the Email Supervisor Server component on the Email Supervisor server and the Email Supervisor Database component on an existing SQL server. Optionally, you can choose to install the Email Supervisor Manager and Email Supervisor Reviewer applications on the Email Supervisor server as well. More information is in Installing Email Supervisor server software on page 28. 26 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

You can install the Email Supervisor Manager application on client computers that meet the minimum requirements described in EMC SourceOne Email Supervisor client computer requirements on page 22. More information is in Installing Email Supervisor Manager on page 48. You can install the Email Supervisor Reviewer application on client computers that meet the minimum requirements described in EMC SourceOne Email Supervisor client computer requirements on page 22. More information is in Installing Email Supervisor Reviewer on page 54. For troubleshooting a installation issues, refer to Troubleshooting installation issues on page 79. Installation overview 27

Installing Email Supervisor server software This section details procedures for installing Email Supervisor software on an Email Supervisor server host computer. This section includes the following topics: Preparing for installation on page 28 Installing the EMC SourceOne Runtime Environment on page 29 Important consideration if installing on Windows Server 2008 on page 31 Installing the Email Supervisor server software on page 31 Granting additional permissions on the Email Supervisor server on page 37 Preparing for installation Specific information required during installation is summarized in Table 6 on page 28. Table 6 Required information Item SQL server name and the SQL Administrator username and password EMC SourceOne Web Services EmailXtender host name Description Name of SQL Server used for the Email Supervisor database. SQL Server is typically installed on a dedicated server on your network. The SQL Administrator username and password are not cached. If using Email Supervisor in an environment in which EMC SourceOne Email Management is actively processing email, you will need to specify the name of the EMC SourceOne Worker on which the EMC SourceOne Web Services is installed. In some environments, you may employ a load balancing strategy in which Web Services software is installed on multiple worker computers and fronted by a virtual host name. In this case, you would specify the virtual host name. If using Email Supervisor in which EmailXtender is still actively processing email, you will alternatively specify the EmailXtender server name. 28 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Table 6 Required information (continued) Item Display name for default Administrator or Supervisor Notes Password (IBM Lotus Domino only) MAPI profile (Microsoft Exchange only) Service account username and password EMC SourceOne security group Description Display name for default Administrator or Supervisor for Email Supervisor. Password for the Display name selected during the installation. MAPI profile associated with the Display name selected during the installation. Username and password of the service account user. Refer to Configuring accounts and permissions on page 16 for details. Ensure that the service account user is a member of the EMC SourceOne security group that was configured when installing EMC SourceOne Email Management. Refer to Configuring accounts and permissions on page 16 for details. Installing the EMC SourceOne Runtime Environment To install the EMC SourceOne Runtime Environment (SRE) on the EMC SourceOne Email Supervisor server host computer: 1. Copy the ES1_SRESetup.exe executable to a temporary location on the host computer. 2. Navigate to the temporary location to which you copied the setup executable. 3. Double-click ES1_SRESetup.exe. Installing Email Supervisor server software 29

The EMC SourceOne SRE Installation page displays as shown in Figure 1 on page 30. Figure 1 EMC SourceOne SRE Installation page 4. Click Next. The Destination Folder page displays. Select a destination folder by clicking Change and navigating to the preferred folder, or accept the default. 5. Click Next. The Ready to Install page displays. 6. Click Install to start the installation and Finish when the installation is complete. Continue with Installing the Email Supervisor server software on page 31. 30 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Important consideration if installing on Windows Server 2008 Email Supervisor is a 32-bit application. To run a 32-bit application on a 64-bit host computer, you must first prepare the 64-bit host computer. In addition, Windows 2008, by default, uses IIS 7 that is not supported to run Supervisor Web services. To install and run Supervisor on a 64-bit Windows 2008 host computer and IIS 7, you must perform the following: 1. Open a command prompt, and change directory to c:\windows. 2. Run the following command: SysWOW64\inetsrv\appcmd set config -section:applicationpools -applicationpooldefaults.enable32bitapponwin64:t rue The configuration changes are applied to enable 32-bit applications on a 64-bit Windows 2008 server. 3. Continue with Installing Email Supervisor server software on page 28. 4. After successfully installing Email Supervisor software, you can configure IIS 7 as described in Configuring IIS 7 on a Supervisor server on page 62. Installing the Email Supervisor server software To install Email Supervisor server: 1. Log in to the host computer using an account with local administrator privileges. 2. Copy the ES1_SupervisorSetup.exe executable to a temporary location on the host computer. 3. Navigate to the temporary location to which you copied the setup executable. 4. Double-click ES1_SupervisorSetup.exe. The Email Supervisor Installation Wizard Welcome page displays. Installing Email Supervisor server software 31

5. Click Next. The Select Features page displays as shown in Figure 2 on page 32. Figure 2 Select Features page 6. Select or clear components as needed.! CAUTION If you have an existing EMC SourceOne Email Supervisor database or existing EMC EmailXaminer database, and are performing a reinstall or an upgrade, clear the EMC SourceOne Email Supervisor Database component checkbox so that you do not overwrite and can reconnect to your existing database. Then be sure to complete the steps in Configuring Lotus Notes clients on page 36. At a minimum, you must install the Email Supervisor Server and Email Supervisor Database components when installing Email Supervisor for the first time. The Email Supervisor Server component is installed on the Email Supervisor server, while the Email Supervisor Database component is installed on a SQL server that you select during Email Supervisor setup. 32 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

7. Select a destination folder by clicking Browse and navigating to the preferred folder, or accept the default. 8. Click Next to display the User Information page. 9. Enter the User Name and Company Name under which Email Supervisor will be licensed and click Next to display the SQL Server Information page as shown in Figure 3 on page 33. Figure 3 SQL Server Information page Installing Email Supervisor server software 33

10. Enter the information from Table 7 on page 34. Table 7 SQL Server information page setup information Field Database name Information Enter a name for the SQL database or accept the default (Supervisor). Note: Ensure that the database name you enter is unique. Entering an existing database name will overwrite the database on the selected SQL Server. This is especially important if you are reinstalling Email Supervisor Server software and want to retain your existing database information. SQL Server name Enter your SQL server name or click Browse to navigate. Note: The SQL server engine, by default, listens on port 1433. The software installation supports only SQL server authentication on the default port unless you specify a different port number during installation. Therefore, to specify a different port during the installation, use the following format: sql_servername,port_number. SQL User Name and Password Enter a valid user name and password with privileges to create databases and users for the selected SQL server. 11. Click Next to display the Email Account Information page. 12. Enter the Display Name of the default Email Supervisor Administrator. Note: If you are using IBM Lotus Domino, enter the IBM Lotus Notes Password for the user listed in the Display Name field. 13. Click Next. Note: If you are using Microsoft Exchange, the Choose Profile dialog box opens. Select the appropriate MAPI profile name for name resolution and click OK. The Services Account Credentials page opens. 34 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

The Services Account Credentials page allows you to specify the Windows service account that is used to access Email Supervisor components and services. Note: The user information specified in this page does not have to be the user that is performing the installation. However, the user must be a valid domain user on this system. The Installation Wizard will grant local administration rights and login as service rights to this user on this computer. After completing the installation, you must manually grant some additional permissions on this system for this account as described in Granting additional permissions on the Email Supervisor server on page 37. 14. On the Services Account Credentials page, complete the following fields: a. Domain The name of the domain for the service account user. You must enter a valid domain for the service account user. b. User Name Service account username. c. Password Service account password. d. Confirm Password Service account password confirmation. 15. Click Next to display the Start Copying Files page. 16. Review the information in the Current Settings box. Click Next to continue or click Back to navigate through previous Installation Wizard pages to change information if necessary. Files are copied to your system. A Setup Status page displays the installation progress. 17. Once installation is complete, do one of the following: If you are installing Email Supervisor in an IBM Lotus Domino environment, continue with Configuring Lotus Notes clients on page 36. If you are installing Email Supervisor in a Microsoft Exchange environment, continue with Completing Email Supervisor server setup on page 36. Installing Email Supervisor server software 35

Configuring Lotus Notes clients Before you can complete the Email Supervisor setup in a Lotus Domino mail environment, you must configure a Lotus Notes client on the Email Supervisor server for the administrator you configured in Step 12 on page 34. To configure a Lotus Notes client on the Email Supervisor server: 1. When the Setup procedure finishes copying files, the Email Supervisor Setup message box displays. Click OK. The IBM Lotus Notes client Setup wizard displays. Follow the instructions provided in the wizard and your IBM Lotus Notes documentation to install and configure the client. Note: You must configure the Notes client by using the same mail user account that you specified in the Email Account Information page when you installed Email Supervisor. 2. When you are finished, exit the Notes client. The Email Supervisor Setup message box displays, indicating that setup is waiting for Notes configuration to be completed as shown in Figure 4 on page 36. Figure 4 Email Supervisor Setup message 3. When the Notes application has shut down, click OK and proceed to Completing Email Supervisor server setup on page 36. Completing Email Supervisor server setup The InstallShield Wizard Complete page displays once setup is complete. To complete the Email Supervisor installation: 1. Click Finish to complete the installation. The Restart Required page displays. 2. Restart the Email Supervisor server. 36 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

3. Continue to Granting additional permissions on the Email Supervisor server on page 37. Migrating an existing EMC EmailXaminer database Perform the following steps to migrate an existing EMC EmailXaminer database to EMC Source Email Supervisor. 1. Copy the Convert_RT_Message_Master.sql file from the Database folder to the SQL Server. 2. Open Microsoft SQL Server Management Studio. 3. Open the file Convert_RT_Message_Master.sql with Query analyzer. 4. Replace @@DATABASENAME@@ with the EmailXaminer_Run database name to be migrated. 5. Execute the SQL script. 6. Create the new EmailXaminer_Queue database manually by executing ES1SupervisorBCEDatabase.sql, if not already created. Granting additional permissions on the Email Supervisor server Check for local policies on the Supervisor server and add the Email Supervisor Service Account to the Local Security Policies Security Settings. For Windows 2008, navigate to Start > Administration Tools >Local Security Policy > Local Policies > User Rights Assignments For Windows 2003, navigate to Start > Administration Tools > Local Security Policy > Local Policies > User Rights Assignments Grant the following permissions: Act as part of operating system Adjust memory quotas for a process Allow log on locally Log on as service Replace a process-level token Installing Email Supervisor server software 37

Configuring Email Supervisor database permissions This section describes the following topics: Creating an impersonate account on page 38 Configuring EMC SourceOne primary service account access to the Email Supervisor database on page 41 Configuring ExArchiveUser account access to the Email Supervisor database on page 41 Creating an impersonate account This section describes how to create an impersonate user login on the SQL server for the Supervisor Manager client and Supervisor Reviewer client, and provide each with the necessary database rights on the Email Supervisor databases. 1. Open SQL Server Management Studio and expand the tree on the left navigation bar. 2. Expand the Security role. 3. Right-click Logins and select New Login. 38 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

4. In the Login Name field, enter a Domain\Account, as shown in Figure 5 on page 39. Figure 5 Login name field 5. Select Windows Authentication and click OK. 6. On the left navigation bar, expand the EmailXaminer database. 7. Select Security > Users. 8. Right-click Users and select New User. Configuring Email Supervisor database permissions 39

9. In the Login Name field, enter the Domain\Account as shown in Figure 6 on page 40. Figure 6 Login name 10. From Role Members, select db_owner and click OK. 11. On the left navigation bar, expand the EmailXaminer_Run database. 12. Select Security > Users. 13. Right-click Users and select New User. 14. In the Login Name field, enter the Domain\Account information you configured earlier. 15. From Role Members, select db_owner and click OK. 40 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

Configuring EMC SourceOne primary service account access to the Email Supervisor database Add the EMC SourceOne primary service account to the security of the EmailXaminer_Queue database (which is created during the Supervisor server installation) by doing the following: 1. Open Microsoft SQL Server Management Studio. 2. In SQL Server Management Studio tree on the left, expand the Security > Logins folders. 3. Right-click the Logins folder and select New Login. The Login - New dialog box displays. 4. Complete the Login - New dialog as follows: Login name Specify the EMC SourceOne service account login information as follows: <domain_name><service_account> where: <domain_name> is the domain on which the server operates <service_account> is the username of the EMC SourceOne primary service account. Authentication Select Windows authentication. Note: This login information might already exist if the EMC SourceOne database is installed on the same SQL server. 5. Click OK to save the new login information. Configuring ExArchiveUser account access to the Email Supervisor database Add the ExArchiveUser Login to the security of the ES1Supervisor database by doing the following: 1. In SQL Server Management Studio tree on the left, expand Security > Logins folders. 2. Right-click the Logins folder and select New Login. The Login - New dialog box displays. Configuring Email Supervisor database permissions 41

3. Complete the Login - New dialog box as follows: Login name Enter ExArchiveUser. Authentication Select SQL authentication, and enter and confirm the password. Figure 7 Completed Login 4. Click OK to save the new login information. 5. Expand the Databases > EmailXaminer_Queue > Security > Users folder: 6. Right-click the Users folder and select New User. 42 EMC SourceOne Email Supervisor Version 6.6 SP1 Installation Guide

The Database User - New dialog box displays. Complete the Database User - New dialog box as follows: User name Enter ExArchiveUser. Login name Enter ExArchiveUser. Database role membership: Role Members Select db_owner. 7. Click OK to save the new user information. Note: Supervisor Server accesses the Web Services server by using the Port Number 8001. The entry in the EmailXaminer.INI file specifying the default port number is DefaultPort=8001. Configuring Email Supervisor database permissions 43