Enterprise Vault™ Migrating Enterprise Vault Data Using the AWS C2S Storage Migrator

Last Published:
Product(s): Enterprise Vault (14.1, 14.0, 12.5, 12.4, 12.3)

AWS C2S server properties

After you select AWS C2S as the secondary storage for a vault store partition, configure the properties for your AWS C2S storage. Use the Advanced tab of the vault store partition properties page to configure the storage server properties.

Most of the configuration parameters are populated with their default values. You need to set the following parameters:

  • The URL of the C2S portal.

  • The name of the agency.

  • The mission.

  • The role.

  • The client-side certificate that you want to use to access the C2S portal.

Table: AWS C2S server properties

Option

Description

Default value

Service URL

The service URL of the AWS C2S portal. For example: https://hostname:port_number/service_path

The AWS C2S migrator communicates with this endpoint to retrieve temporary credentials and tokens.

None

Agency

The name of the agency that the AWS C2S account belongs to.

None

Mission name

The name of the mission that is assigned to the AWS C2S account.

None

Role

The IAM Role that you want to associate with the AWS C2S account. An AWS Identity and Access Management (IAM) role is an entity that has a set of permissions to access and use AWS.

None

Certificate

The name of the certificate that you want to use for the C2S access portal authentication. The name must be unique and must not exceed 40 characters. The file must be a valid .pem file.

The AWS C2S migrator uses this certificate to communicate with the CAP service. You can add, remove, and view certificates. Note that you cannot remove a certificate that is in use.

See Adding the client-side certificate.

None

Storage server name

The storage server DNS name. You can select from the following:

  • amazongov.com

  • amazongovfips.com

amazongov.com

Amazon bucket name

The name of the Amazon bucket. The AWS C2S migrator creates the bucket if it does not already exist.

The bucket name must be unique across all existing bucket names in AWS C2S storage. Refer to the AWS documentation for bucket naming requirements and guidelines.

None

Amazon bucket region

The geographical location where the bucket is created if it does not already exist. Currently, the AWS C2S migrator supports the GovCloud (US) location only.

GovCloud (US)

Write buffer size

The buffer size, in megabytes, that Enterprise Vault uses for data uploads. Ensure that this value is greater than the Maximum collection file size setting on the Collections tab of the vault store partitions page.

Set this option to zero (0) to disable the use of buffers.

20

Read buffer size

The buffer size, in megabytes, that Enterprise Vault uses for data downloads.

20

Log level

The amount of detail to include in the log file. You can select from the following:

  • No logging

  • Errors only

  • Errors, Warnings

  • Errors, Warnings, Info

  • Everything

Note:

If you choose No logging, Enterprise Vault does not log cURL messages even if Log CURL messages is set to Yes.

Errors, Warnings

Use secure communication for control

When set to Yes, Enterprise Vault uses the TLS 1.2 protocol to establish a secure connection to the AWS C2S storage server.

Yes

Use secure communication for data r/w

When set to Yes, Enterprise Vault uses the TLS 1.2 protocol to establish a secure connection for read and write operations to the AWS C2S storage server.

Yes

Log CURL messages

Specifies whether to log cURL activity in the DTrace logs.

cURL is a command line tool for sending or receiving files using URL syntax. Enterprise Vault uses the cURL library to transfer data to the AWS C2S storage cloud.

No

CURL connect timeout

The maximum amount of time, in seconds, that the Enterprise Vault AWS C2S migrator waits to connect to the AWS C2S storage server. This only limits the connection phase, not the session time.

300

CURL operation timeout

The maximum amount of time, in seconds, that the Enterprise Vault AWS C2S migrator waits to transfer data to and retrieve data from the AWS C2S storage server.

900

CURL proxy type

The cURL proxy types. Proxy types are HTTP, SOCKS, SOCKS4, SOCKS5, SOCKS4A.

None

CURL proxy IP

The cURL proxy IP. By default, no proxy is used.

your_proxy_ip

CURL proxy port

The cURL proxy port number.

70000

User wait timeout

The number of seconds after which Enterprise Vault should display the following message if the retrieval of an archived item from the AWS C2S storage server takes time:

The archived item is being retrieved from a slow device. Try again later.

Enterprise Vault continues to retrieve the item in the background until the System wait timeout period has elapsed. Enterprise Vault then abandons the attempt to retrieve the item, and the user must submit the retrieval request again.

The recommended value is 40 seconds.

40

System wait timeout

The number of seconds after which to abandon the attempt to retrieve an archived file from AWS C2S storage server, and remove the requested item from the retrieval queue.

The recommended value is 900 seconds.

900

Recalled file cache period

The number of days that Enterprise Vault should retain recalled files in the cache. The collection process deletes the recalled files when the cache period has elapsed.

7

Migrate all files

If the value is set to Yes, Enterprise Vault forces all eligible files to be collected and migrated. Setting this value to Yes may cause Enterprise Vault to create a large number of collection files.

If the value is set to No, Enterprise Vault may leave some saveset files uncollected and thus unmigrated.

No