Simpana 10.x

You are using Simpana 10 Exchange Mailbox archiving (not the previous Exchange Mailbox Archiver) in CommVault and you may have seen that your OnePass-Stubs have broken recall links in Quick Look. This is only visible in Outlook Web Access or on mobile. If you click the Quick Look link inside an e-mail you are redirected to https://webconsole/webconsole/RestServlet/Recall. Let me note that this is excactly the link that your users will see. Your global Recall Service URL configued for the archiver host is ignored.

Symptom:

• Recall Service is configured with hostname that contains "webconsole" in the hostname e.g. https://webconsole.example.com
• All Quick Look links in e-mails contain URLs to https://webconsole/webconsole/RestServlet/Recall and your custom hostname is ignored.
• Recalls fail as the hostname cannot resolved to a host.

Solution:

If you have installed Commvault Web Console on a Windows Core server you may wonder why you cannot reach the tomcat server on this host. You have for sure configured the firewall with the setup and added the exceptions to the windows firewall, but it is still boarded-up.

Reason:

• Commvault has missed to add the tomcat process to the exception list as the executable is not inside Simpana\Base folder.

Solution:

• Add the exception manually by running the command:
  
  Simpana 10.x:
  netsh advfirewall firewall add rule action=allow dir=in program="C:\Program Files\CommVault\Simpana\Apache\bin\tomcat6.exe" name="CommVault_Process_1_tomcat6 / C:\Program Files\CommVault\Simpana\Apache\bin\tomcat6.exe" enable=yes
  
  Simpana 11.x:
  netsh advfirewall firewall add rule action=allow dir=in program="C:\Program Files\Commvault\ContentStore\Apache\bin\tomcat.exe" name="CommVault_Process_1_tomcat / C:\Program Files\Commvault\ContentStore\Apache\bin\tomcat.exe" enable=yes

History:

I just installed a Web Console on Windows 2012 R2 Core server and learned how insecure this system is out of the box. You may have worked through the Post-Installation Configurations for Web Server and Web Console. This ends with an highly insecure web server configuration. The SSL encryption is sooo weak that I tend to say you can also leave SSL switched off. You can check your server with SSL Server Test. Commvault default with Java 7 will end with the most worse test result of F.

If you are running Commvault Exchange Mailbox Archiver and Public Folder Archiver you may wonder about Install Outlook Add-In - Administrator that suggest some strange ways to deploy the Outlook Add-in. They require you to run EXE command line tools via Logon scripts in a GPO. A horrible bad idea to deploy software... ! Below is the way how you should deploy it to have full controll about all. Do not follow the documentation of Commvault!

This documentation has been written for Windows x64 and this means Windows 7/8/10. An installation on Windows x86 has not been tested, but can be easily adapted.

First of all there are some pre-requirements for this software to run. These are as follows: