Search <book_title>...

Veritas Enterprise Vault™ Installing and Configuring

Last Published: 2017-07-28

Product(s): Enterprise Vault (12.1)

Performance issues when Enterprise Vault has limited or no access to the Internet

Enterprise Vault files are digitally signed with a Veritas SSL certificate. By default, when these files are accessed, Windows checks online to determine whether their digital certificate has been revoked. If Enterprise Vault does not have an Internet connection, or connectivity is slow, delays can occur at the following times:

When you install Enterprise Vault
When you start the Administration Console
When users browse and search archives through a web browser

If you experience these delays, you can stop Windows from checking for digital certificates that have been revoked. You can do this on a per-process basis or for all processes that run under a particular user account.

Turning off certificate revocation checking for individual processes

Note that if the Enterprise Vault server gains Internet access in the future, you can turn certificate revocation checking back on by deleting the configuration files that you create below.

To turn off certificate revocation checking for individual processes

Use a plain-text editor such as Windows Notepad to create a configuration file that contains the following lines:
```
<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <runtime>
    <generatePublisherEvidence enabled="false"/>
  </runtime>
</configuration>
```
For more information on the generatePublisherEvidence element, see the following article on the Microsoft website:
http://msdn.microsoft.com/library/bb629393.aspx
Do one or more of the following:
- To turn off checks by the self-installation routines in the Enterprise Vault installer, save the configuration file as InstallUtil.exe.config in the same folder as InstallUtil.exe (typically %windir%\Microsoft.NET\Framework\v4.n.n.n).
- To turn off checks by the self-registration routines in the Enterprise Vault installer, save the configuration file as RegAsm.exe.config in the same folder as RegAsm.exe (typically %windir%\Microsoft.NET\Framework\v4.n.n.n).
- To turn off checks by the Enterprise Vault System Status MMC snapin, save the configuration file as mmc.exe.config in the same folders as mmc.exe (typically %windir%\SysWOW64 and %windir%\system32).
- To turn off checks by all web applications on the server, save the configuration file as w3wp.exe.config in the same folders as w3wp.exe (typically %windir%\SysWOW64\inetsrv and %windir%\system32\inetsrv).

Turning off certificate revocation checking for all processes that run under a particular user account

If you use this method, you must change the settings on each Enterprise Vault server for every account that runs an Enterprise Vault service.

To turn off certificate revocation checking for all processes that run under a particular user account

Log on to the Enterprise Vault server as an account that runs Enterprise Vault services on that server. This account is typically the Vault Service account.
In Windows Control Panel, double-click Internet Options.
In the Internet Properties dialog box, click the Advanced tab.
In the Security section, uncheck Check for publisher's certificate revocation.
Click OK.