What tasks need to be running for Transvault migration to EV?

[CGCI]

I'm working with a vendor to help us migrate from EmailXtender to Enterprise Vault.  Right now we are in the testing phase and are trying to migrate a single mailbox from EX to a mailbox archive in EV.  I have added a testing partion to EV so as not to write to the production partition.  Since we are journaling also, I shut down all of the tasks running (journal task, mailbox task, and provisioning).  I noticed when I do that, a user cannot even manually "store in vault".  And the tranvault migration fails everytime with an access error.  Is there a task that needs to be running in order for the TV migration to work?  The TV migration does work when writing to a PST.  Just not when writing directly to EV.  Thanks!

[Rob_Wilcox1]

A user performing a "Store in Vault" from Outlook, when they're an EV Archiving enabled user needs the archiving task running, and needs the storage service to be running.

That's regardless of any Transvault stuff or anything from any other party... ie that's pure EV.

If I remember correctly Transvault use the EV CMAPI to insert items in to the archive?  As well as stopping all tasks, did you use the service control manager and stop any/all EV services?  If you did, that's the cause of the problem, they'll need to be running in order for the items to be inserted.

[AndrewB]

no, transvault does not require any of your EV tasks to be running in order for the migration to work. if they can't do it themselves, your vendor should be able to work with transvault support to help figure out the issue.

[CGCI]

yeah the Transvault support has been terrible.  All support is done seemingly via email.  When if they got on the phone and a remote session could probably fix in a short time.  Been working on this for almost 3 months.

[CGCI]

thanks.  We did not stop any other services.  Just the tasks.  Thanks for answering about the  user trying to do a manual "store in vault".  Since the production partition wasn't open and only the test was, it was a good thing that it didn't work.  That would have caused a whole lot more work for me. 

[AndrewB]

do the connection tests from the TV client all pass?

just as a matter of interest, can you identify the error by looking at the tvengine logs and your EV logs for yourself?  i'd be curious to see it if you dont mind.

if they haven't already done so, you might also consider running a dtrace on the EV side to see if you're able to identify what might be going on.

[CGCI]

The connection tests tested fine, I'm told.  They also told me that we'll be running the Dtrace the next time we try.  Below is a sample of the error from TV.  The TV service is using the same account that has administrator access on the EV server as well as the account running the services on EV.

2012-01-25 15:05:20,431 [27] INFO  Process message #216804
2012-01-25 15:05:20,447 [27] INFO  EV output message metadata: Set:Vault; Name:CopiedFrom, Value:2012-01-25 20:05:20Z,4BD32916FA4B1BFCC2994BE6,,TransVault,6.0.8.29
2012-01-25 15:05:20,463 [27] INFO  EV output message metadata: Set:Vault; Name:TvIngestionId, Value:2
2012-01-25 15:05:20,463 [4] INFO  select * from sysobjects
2012-01-25 15:05:20,478 [27] INFO  Load compliance info for 16204B07B01057E41A3BE4319551AA5131110000evserver
2012-01-25 15:05:20,478 [4] INFO 
                select
                    EmailId,
                    RouteTypeId
                from
                    [dbo].Route
                where
                    MD5HashKey = @hash and TimeStamp = @timeStamp
        Parameters values:
            @hash='-411736871928348133'
            @timeStamp='1276345207'
2012-01-25 15:05:20,541 [27] ERROR Error processing message #216804:
System.Runtime.InteropServices.COMException (0x80040303): No access to the vaultstore, archive, or item.
   at KVS.EnterpriseVault.Interop.IArchive.get_ComplianceDevice()
   at TVS.TransVault.Connector.Output.Ev.EvApiOutputConnector.get_IsComplianceSupported()
   at TVS.TransVault.Connector.Output.Ev.EvApiOutputConnector.FinishMessage(IOutputMessage outputMessage, IMessageInfo messageInfo, CrossReference crossReference)
   at TVS.TransVault.Engine.Conversion.EnvelopeMessageConversionEngine.Convert(IOutputConnector outputConnector, IInputMessage inputMessage, IMessageInfo messageInfo, CrossReference crossReference)
   at TVS.TransVault.Engine.Conversion.MessageProcessor.Process(InputMessageWrapper wrapper, ILicenceTransaction parentTransaction)
 

[AndrewB]

just to clarify, is the transvault service running as the ev service account? (since you said that EMX to PST works fine, I assume the ev service account has the proper access into EMX)

[TonySterling]

I don't see this in the post, what version of EV are you?  I saw this in older version of EV when the API wasn't licensed.

Can you post the contents of your license file?

[GertjanA · Accepted solution]

I am using TV (6 something( to migrate EMC archives to EV (9SP2)

It works without issues, provided you have the setup correct. Make sure that you have a dedicated TransVault server. Do NOT install EV on it, only the EV API. Make sure you install TV using the VaultService account. Make sure that you use the 'verify' buttons in TransVault to verify the connection. Make sure you have the latest TV updates and patches where necessary.

If all fails, call TransVault. My experience with using e-mail is that they are really quick to answer, but solving issues like this should be done via phone, to avoid an endless 'did you check this'  line of mails going back and fourth.

For what it is worth, if a vendor cannot get this to work in three months, you might be better off with another one :)

[CGCI]

Yes, the transvault service is running as the ev service account.  And you are correct.  The account has full control over the source. 

[CGCI]

We are running version 9.0.2.

<product_name>Symantec Enterprise Vault 9.0 Storage Managment Advanced Edition for Microsoft Exchange License</product_name>
<sign_date>2011-04-07</sign_date>
<key>
<name>EVBase</name>
<version>1.0</version>
</key>
<key>
<name>EVArchive</name>
<version>1.0</version>
</key>
<key>
<name>EVPSTM</name>
<version>1.0</version>
</key>
<key>
<name>EVOfflineVault</name>
<version>1.0</version>
</key>
<key>
<name>EVPubFolder</name>
<version>1.0</version>
</key>
<key>
<name>EVOSL</name>
<version>1.0</version>
</key>
<key>
<name>EVFTC</name>
<version>1.0</version>
</key>
<key>
<name>EVHFM</name>
<version>1.0</version> 

[TonySterling]

Ok, I see the following missing and may be causing your issue.

<name>EVStorageAPIUsr</name>

<name>EVStorageAPIVol</name>

I am going to PM you a trial key that you can load and try again to see if that solves your issue.

Regards,

[DanClark]

Hey,

As you'll probably know, TransVault support isn't just by mail - it's also by phone or remote support as well. Have you tried calling the support team on either the US or international numbers - 646.808.0407 or +44 (0) 3333 404433? There is an entire team of engineers available to take your call...

If you do have a problem getting a response or getting your issue fixed, escalate to the support escalation point - products@transvault.com, or call and ask to speak to one of the Channel Managers or Support Team Leaders. That has to be reported, and has the entire view of senior management.

Our of interest, are you a direct partner of TransVault or a Customer of a Partner?

Thanks,

Dan

[DanClark]

Hey,

Interesting error. As the support team may have explained, this isn't a problem with TransVault per-say... its actually the EV API returning an error - "No access to the vaultstore, archive, or item.". 

In general, TransVault first asks the EV API for compliance information in the target archive, and then passes a message to the EV API, calling a special "Insert" method. The EV API is then effectively saying "you haven't got permission to that archive" to find out this compliance information.

I'd say the most likely cause is a missing pre-req in terms of permissions (i.e. the account TransVault is running as), or the right permissions are not on the archive. Either way, running a DTrace will tell the TransVault support teams (who will seek support from a specialist Symantec EV Engineering group) exactly what permission setting or pre-req is missing as far as the API is concerned!

Hopefully the both teams can find out what you are missing very quickly - but it's definately worth checking those pre-reqs to be sure they are all in place.

Thanks,

Dan