Enterprise Vault™ Discovery Accelerator Administrator's Guide
- Introducing Discovery Accelerator
- Introducing the Discovery Accelerator client
- Setting up and assigning roles
- Working with cases
- Setting up review marks and tags
- Using rules to mark and tag items automatically
- Using Custodian Manager
- Searching for items
- About searching with Discovery Accelerator
- Defining email targets with Address Manager
- Building Discovery Accelerator search schedules
- Manually reviewing items
- About reviewing with Discovery Accelerator
- Searching within the review set
- Deleting items from Enterprise Vault archives
- Working with research folders
- Exporting and producing items
- About exporting and producing items
- Performing an export or production run
- Creating and viewing reports
- Appendix A. Customizing Discovery Accelerator
- Setting Discovery Accelerator system configuration options
- Appendix B. Importing configuration data from an XML file
- Appendix C. Enterprise Vault properties for use in Discovery Accelerator searches
- Appendix D. Troubleshooting
- Issues with Custodian Manager
- Issues with Discovery Accelerator reports
How to decrypt RMS-protected items
Discovery Accelerator exports RMS-protected SMTP journal items in the encrypted format on the Discovery Accelerator server. You need to use the command-line utility, EmlDecryptor.exe
, to decrypt all RMS-protected items.
EmlDecryptor.exe
decrypts the contents of the item, creates an unencrypted version of the EML file, and stores it in a separate folder at the same location as the source folder. EmlDecryptor.exe
is installed as a part of the Enterprise Vault API Runtime or the Enterprise Vault services installation on the Discovery Accelerator server.
Before you run EmlDecryptor.exe
, do the following:
Install the Active Directory Rights Management Services Client 2.1.
Confirm whether Discovery Accelerator has exported any RMS-protected items by generating an export or a production run report.
Ensure that the
EmlDecryptor.exe
andEmlDecryptor.ini
files are located in the Enterprise Vault API Runtime installation folder.
To use EmlDecryptor.exe to decrypt RMS-protected items
- Use a text editor to edit the
EmlDecryptor.ini
file with the following details:The licensing intranet URL of the rights management services (RMS) server.
The licensing extranet URL of the rights management services (RMS) server.
The unique application ID for the service principal in a tenant, which your service uses for interacting with Azure Rights Management Services.
The globally unique identifier (GUID) of the tenant. The tenant ID is tied to the Active Directory in Azure.
For example,
;This is the configuration file for the EmlDecryptor utility. ;EmlDecryptor.exe is a command-line utility, which decrypts ;all Azure RMS-protected SMTP emails available in the ;export/production location of the Discovery/Compliance ;Accelerator export/production run. ;All parameters in this ini file must be specified and should ;not be empty. ;The licensing intranet URL of the rights management services ;(RMS) server. RMSIntranetUrl=https://<RMSLicensingIntranetUrl> ;The licensing extranet URL of the rights management services ;(RMS) server. RMSExtranetUrl=https://<RMSLicensingExtranetUrl> ;The unique application ID for the service principal in a ;tenant, which your service uses for interacting with ;Azure Rights Management Services. ApplicationPrincipalId=<ApplicationPrincipalId> ;The globally unique identifier (GUID) of the tenant. The ;tenant ID is tied to the Active Directory in Azure. BposTenantId=<BposTenantId>
- Log on to the Discovery Accelerator server as a Discovery Accelerator administrator.
- Run
EmlDecryptor.exe
from the command line. For example,c:\Program Files (x86)\Enterprise Vault>EmlDecryptor.exe
EmlDecryptor.exe
prompts you to enter the following details:<Source Directory Path>. Enter the location where the RMS-protected SMTP emails are exported after the export run or the production run.
<Symmetric Key>. Enter the 256-bit AES symmetric key that is used to verify the application.
EmlDecryptor.exe
validates the provided information and starts the conversion process.
When EmlDecryptor.exe
executes successfully, it stores the decrypted files along with a CSV report in a separate folder within the source directory path. For example, if the source directory path is C:\Discovery Accelerator Export\customer_name
, the decrypted files and the CSV report are stored in the C:\ExportRun\customer_name_decrypted<DateTime>
folder.
If you encounter any issues when running the EmlDecryptor.exe
utility, enable DTrace on the utility and run it again.