Jump to:navigation, search
Wiki
































De.png
En.png
Fr.png






Using the Setup Wizard for the UMA NG
Last adaptation to the version: 3.3.4
New:
  • Azure Cloud Update
  • Authentifizierung direkt durch Azure ermöglicht MFA
  • Connection to an Azure Active Directory with OAuth2 possible
notempty
This article refers to a Resellerpreview

3.1 v3.0.5 v2.5.10


Requirement

To be able to use the setup wizard, the Network connection must have been carried out correctly.



Introduction

The UMA setup wizard is intended to assist in the setup process and ensure that each step necessary to set up the UMA is completed successfully.
Of course, this can also be simply closed and the UMA configured manually, but it is recommended to set up the UMA via the wizard.


Login after network connection

After the Network Connection is set up, the Admin Interface of the UMA can be accessed (IP address with port 11115)



UMA 3 Lizenzupload-en.png

Fundamental settings

Depending on whether the UMA is being installed for the first time or whether a backup is to be restored after a new installation, various steps are required:

New installation with existing backup

As type configuration file is selected. This must have been exported before on the old UMA under Adminsitration Tab Backup or from UMA NG v3 under Maintenance Tab Backup in the section Configuration Import/Export.
With the button Complete among other things the data from step 1 of the setup wizard are taken over:

  • Network configuration
    • UMA IP address
    • Gateway, DNS
    • Host name, domain
  • Admin password and email address
  • Remote Smarthost settings

After the reboot, step two of the setup wizard is called directly.

Initial installation

As type is selected license. The license mandatory for operation can be downloaded reseller portal

Setup Wizard

Step Description UMA v3 Einrichtungsassistent Schritt1-ausgefüllt.png
Step 1
  • Network Connection Data:
    • UMA IP address: Permanent IP address of the UMA
      The address set via CLI is temporary and will be replaced by the default IP or by the address specified here at the next boot.
    • default gateway, hostname, domain, DNS, NTP server
  • admin data:
    • password
    • Email address: Important system emails (status or error messages) are sent to this address.
  • Remote Smarthost Settings
    • Access data to a mail server for sending system mails.
      Continue with button Next
Sending test mail.
Confirm sending with OK.
If no mail arrives, please check the access data for the smarthost and the network connection
UMA v3 Einrichtungsassistent Schritt1-Testmail.png
Step 2 Initialize storage hard drive

The hard drives for the archive must be initialized. This is done automatically with the archive hard drives recognized by the UMA.

  • If a hardware RAID controller has been installed in the UMA, only one drive is displayed in this view.
  • During this process, all data on the specified hard drives will be irretrievably deleted.
  • Continue with button Next
    Restart after the initialization of the storage
    Initialize storage
    UMA v3 Einrichtungsassistent Schritt2.png
    Step 3 Set up accounts:
    Depending on the type of authentication (Repository Type:)
    • Windows Active Directory
    • Other LDAP Server
    • Local Users
    • Azure AD
    UMA v3.2 Einrichtungsassistent Schritt3 AD-en.png
    Windows Active Directory
    Windows domain: The corresponding domain in which the Active Directory resides.

    workgroup: Must match the NetBIOS name of the domain
    IP or hostname of the DC:
    username: / password: A user with permission to perform an LDAP search.

    UMA20 AI KtoAusw.png
    Account selection
    Account selection

    When using an authentication service such as Active Directory, care should be taken to determine which email accounts really need to be archived.
    In the section "Selection of individual accounts" there is the possibility to select the accounts to be archived exactly and thus to work much more "license-friendly". This is done by activating the field "Activate manual selection".

    LDAP

    For the use of another LDAP server, the following is entered in the fields:

    • base: The domain in the form dc=localdomain dc=local
    • IP or hostname of DC:
    • username: User name for the LDAP server in the form cn=admin
    • password: Password to the previously specified username
    • User Container: The organizational unit in the form ou=users
    • LDAP User Filter: In the form (objectClass=inetOrgPerson)
    • User Attribute(s) e.g. uid
    • Mail Attribute(s)
    • LDAP communication security To enable this, you must first create a CA Import
    UMA v3 Einrichtungsassistent Schritt3 Konten LDAP.png
    Local users
    If no authentication server is operated, the users can also be stored locally in a list.

    For this purpose, there is the possibility to import a list in CSV format via the Import button.

    The content of the *.csv file must have the following format:

    userid,password,firstname,lastname,email,optionalemail 
    
    UMA v3 Einrichtungsassistent Schritt3 Lokale Benutzer importiert.png
    Azure AD
    Client: ••••••• Directory ID (tenant) from the app registry in Azure AD.UMA v3.1 Azure AD App-IDs.png
    Client-ID: ••••••• Application ID (Client) from the app registry in Azure AD.
    Client-Secret: ••••• Value of the client secret key from the Certificates & Secrets section of Azure AD.
    Azure Cloud: Azure Cloud Global

    Azure Cloud USA

    Azure Cloud Deutschlandnotempty
    Is no longer available as of UMA version 3.3.4.
    Microsoft has closed Azure Cloud Germany.
      

    Azure Cloud China
    Selection of the Azure Cloud that hosts the AD.
    User authentification method
    Username and Password Anmeldung im DMS erfolgt ausschließlich mit den Daten aus den oben konfigurierten Benutzer Konten
    Single Sign-on
    Authentifizierung im DMS über Microsoft Azure.
    Der Login Dialog bietet hierzu eine Schaltfläche, die zum Microsoft Login führt.
    Dies ermöglicht z.B. eine Zwei-Faktor-Authentifizierung (2FA)
    Single Sign-on or username and Password
    Authentifizierung im DMS mit den Daten aus den oben konfigurierten Benutzer Konten oder über Microsoft Azure.
    Der Login Dialog bietet die Möglichkeit zur Anmeldung mit Benutzername und Passwort und alternativ eine zusätzliche Schaltfläche, die zum Microsoft Azure Login führt.
    Continue Verify the credentials and go to the next step.
    UMA v3.3 Einrichtungsassistent Schritt3 Azure AD-en.png
    Azure AD credentials in step 3 of the setup wizard.
    Step 4 Archive rules define the duration of archiving.
    The global rule applies if no other rule takes effect.
    The default is 6 years
    Continue with button Next
  • E-mails that have a header but no body (i.e. "empty e-mails") are retrieved by the UMA and stored in the user mailbox. However, these are not indexed and therefore do not appear in the DMS!
  • UMA v3 Einrichtungsassistent Schritt4.png
    Step 5






























    Remote email accounts receive all journal emails from a mail server.
    This usually includes several individual user email accounts.
    The remote email accounts must be created in the Mail Server as journal accounts, so that all associated mails (outgoing and incoming mails of the mail server) can be received here.

    Archiving only takes place if the following settings have been made under System settings / Email accounts users with a corresponding email address can be created.

    Protocol: POP3 / IMAP

    Caption Value Description
    Name: Journal Account Freely selectable name
    Protocol: IMAP used protocol
    Servername: imap.mailsever.anyideas.de Mail server that hosts the journal address.
    Username: tttpointcloud User name for the Journal-emai account
    Password: ••••• Password for the journal email account
    Keep Mails: Usually, emails are deleted after they have been picked up. Activating Keepmails prevents this deletion.
    Connection Security:
    New as of UMA v3.3.1
    STARTTLS STARTTLS is used for connection encryption. Default
    SSL SSL is used for connection encryption
    None (insecure) The connection is not encrypted. Should only be used temporarily if the remote station does not support encrypted communication!
    An update of the remote station is urgently required!
    E-mails and Passwords are sent in plain text.
    Use is not recommended.
    Use of this option is a security risk
    Max. email size disabled A size can be defined up to which the email is archived
    Email header evaluation: Enable MS Journal-Envelope autodetection
    default
    The recognition of the header entries "MS journal envelope" enables the UMA BCC recipient to recognize in the Exchange-own header and assign it to a user account.
    BCC recipients are not in the original mail header
      
    Disable MS Journal-Envelope autodetection Uses the original header of the email to assign it to a user account
    X-Envelope-To Uses only the X-Envelope-To entry from the original header of the email to assign it to a user account
    X-Original-To Uses only the X-Original-To entry from the original header of the email to assign it to a user account
    Delivered-To Uses only the Delivered-To entry from the original header of the email to assign it to a user account
    Custom Recipient Header A custom defined header part to be evaluated.
    Example: envelope-from
    UMA v3.3.1 Einrichtungsassistent Schritt5-en.png

    Protocol: OAuth (IMAP)

    New as of UMA NG v3.3

    Requirement: Configured apps in Azure with OAuth (→Wiki)

    Caption Value Description
    Name: Journal Account Freely selectable name
    Protocol: OAuth 2 (IMAP) used protocol
    Servername: outlook.office365.com
    Tenant ID: aaaabbbb-1111-2222-3333-… In Microsoft Azure in the menu Azure Active Directory / Overview under Tenant ID
    Client ID: 11111111-aaaa-bbbb-2222-… In Microsoft Azure, in the menu Enterprise Applications / All Applications / Application Name / Overview under Application ID
    Username: ttt-point@anyideas.onmicrosoft.com Username for the journal email account in Azure
    Client Secret: 33334444-dddd-eeee-ffff-… In Microsoft Azure in the menu Certificates & secrets in the tab Client secrets under Value
    Fetch emails every: 1 minute Specifies how often the external mail server is checked for new emails
    Keep Mails: Usually, emails are deleted after they have been picked up. Activating Keepmails prevents this deletion.
  • When activated, external mailboxes can fill up!
    Keepmails should only be used temporarily for test purposes, or if it is otherwise ensured that the external mailbox does not reach its capacity limit.
  • Connection Security:
    New as of UMA v3.3.1
    STARTTLS STARTTLS is used for connection encryption.
    SSL SSL is used for connection encryption. Default
    None (insecure) The connection is not encrypted. Should only be used temporarily if the remote station does not support encrypted communication!
    An update of the remote station is urgently required!
    E-mails and Passwords are sent in plain text.
    Use is not recommended.
    Use of this option is a security risk
    Max. email size disabled A size can be defined up to which the email is archived
    Email header evaluation: Enable MS Journal-Envelope autodetection
    default
    The recognition of the header entries "MS journal envelope" enables the UMA BCC recipient to recognize in the Exchange-own header and assign it to a user account.
    BCC recipients are not in the original mail header
      
    Disable MS Journal-Envelope autodetection Uses the original header of the email to assign it to a user account
    X-Envelope-To Uses only the X-Envelope-To entry from the original header of the email to assign it to a user account
    X-Original-To Uses only the X-Original-To entry from the original header of the email to assign it to a user account
    Delivered-To Uses only the Delivered-To entry from the original header of the email to assign it to a user account
    Custom Recipient Header A custom defined header part to be evaluated.
    Example: envelope-from
    UMA v3.3.1 Einrichtungsassistent Schritt5 Remote E-Mail-Konten-en.png


    Setup Wizard Exit