Overview
This article discusses installing Enterprise 7.4.2/7.5.0/7.5.1/7.5.2. For FTK & LAB 7.4.2, see this article. For assistance with licensing or installing Forensic Tools, please contact sales@accessdata.com.
Spec Guide
Attached
Prerequisites
- Install all current Windows updates.
- Disable any antivirus/malware scanning software.
- A physical or virtual dongle with an FTK or, LAB license
Note: Refer to this article for help activating a virtual dongle. - If you wish to use the new Off-Network and Cloud Data connectors, Enterprise must be connected to an MSSQL database.
Notes
- If any part of the installation prompts to reboot the computer, you must reboot and start over from step 1 to ensure all components are installed.
Forensic Tools Installation
- Insert or mount the Forensic Tools 7.4.2 installation media and launch the autorun.
- At the autorun menu, click Install Forensic Tools 64 Bit.
- At the AccessData Forensic Tools Suite installer Welcome dialog, click Next.
- At the License Agreement dialog, accept the license agreement and click Next.
- At the Setup Type dialog, select Enterprise from the dropdown menu. For FTK & LAB 7.4.2, see this article.
- (Optional) If you have another Enterprise 7.4.2 machine with a locally installed Quin-C server Site Server that you'd like this installation to connect to, check Use remote Quin-C Server and enter its computer name/IP.
- Select whether you would like to perform a Default or Advanced installation.
Note: Default installations should only be done in single-box, single-drive environments.
“Default” Installation
- At the PostgreSQL License Agreement dialog, accept the license agreement and click Install.
Note: PostgreSQL will only be installed if it is not already on your system from a previous installation. - Wait for the installers to complete.
- At the final dialog, click Finish and continue to the Database Configuration section below.
“Advanced” Installation
- At the Custom Setup dialog, you must check all components and click Install.
Note: Even if Enterprise is or will be connected to MSSQL, Site Server itself (used for Off Network Collections) needs to connect to PostgreSQL. - Do the following during the AccessData PostgreSQL Setup:
- At the Destination Folder dialog, select the desired installation folder.
- At the Data Folder dialog, select the desired database storage folder. It's recommended to put the database Data Folder on its own drive, if possible.
- At the PostgreSQL Port dialog, choose the port that PostgreSQL should use.
- At the PostgreSQL User Create dialog, create a password for the PostgreSQL database administrator account.
- At the Destination Folder dialog, select the desired installation folder.
- Do the following during the AccessData Evidence Processing Engine setup:
- At the Destination Folder dialog, select the desired installation folder.
- At the Processing Temp Folder and State Folder dialog, choose the folders where you’d like the temporary file stored. It's recommended to put the Processing Temporary Folder on its own drive, if possible.
- At the Destination Folder dialog, select the desired installation folder.
- Do the following during the AccessData Forensic Toolssetup:
- At the Configuration dialog, select the desired installation folder, database host, and Quin-C host.
- At the User Credentials dialog, enter the credentials for an account to run the Quin-C service (This account should be a member of the local administrators group, and be a domain-level account in a multi-box environment. The "Local System" account should only be used if all components, as well as case and evidence storage, will be on one single machine.)
- At the Configuration dialog, select the desired installation folder, database host, and Quin-C host.
- If you chose to enable Quin-C UI, do the following during the AccessData Collabsetup:
- At the User Credentials dialog, enter the credentials for an account to run the Collab viewer service (This account should be a member of the local administrators group, and be a domain-level account in a multi-box environment. The "Local System" account should only be used if all components, as well as case and evidence storage, will be on one single machine.)
- At the User Credentials dialog, enter the credentials for an account to run the Collab viewer service (This account should be a member of the local administrators group, and be a domain-level account in a multi-box environment. The "Local System" account should only be used if all components, as well as case and evidence storage, will be on one single machine.)
- At the final dialog, click Finish, then reboot if prompted.
- Proceed to the correct Database Configuration section below.
Database Configuration
If this is the first Forensic Tools installation on this machine, or there's no existing database or cases, please follow the New Install section.
Very Important! Very Important! If you are upgrading from a previous version and have an existing database or cases, DO NOT follow the "New Install" steps below. Instead, scroll down further to the Upgrade section and follow those steps. |
New Install
- If the AccessData Database Configuration Tool window isn't already open, open DBConfig.exe as Administrator (typically located in "[drive]:\Program Files\AccessData\Forensic Tools\[version]\bin").
Note: If you did a New Default install, and there's already an existing "Default" entry listed in DBConfig, you should be able to skip to step 5. Your Application Administrator Username should be Administrator and the password should be abc123. - Click Add Configuration.
- Complete the following, then click Create:
Database Type: MSSQL or Postgres (This must be connected to an MSSQL database if you wish to use the new Off-Network and Cloud Data connectors.)
Server Name : Port: Database location in the format host:port (Port is only needed when using a non-default port).
Create Database: True
Authentication Mode: Mode to authenticate to your database.
System User: When using Database Authentication, this is the database user to use when authenticating.
System Password: When using Database Authentication, this is the database password to use when authenticating. (This should be AD@Password for PostgreSQL if you did a Default installation.)
Application Admin: The desired username for your first Enterprise administrator.
Admin Password: The desired password for your first Enterprise administrator. - After the database is created, confirm the Default box is checked next to the entry for your new database.
- Close the AccessData Database Configuration Tool window and reboot your computer.
Upgrade
- If the AccessData Database Configuration Tool window isn't already open, open DBConfig.exe as Administrator (typically located in "[drive]:\Program Files\AccessData\Forensic Tools\[version]\bin").
- If your desired database is not already listed, click Add Configuration.
- Complete the following, then click Connect:
Database Type: MSSQL or Postgres
Server Name : Port: Database location in the format host:port (Port is only needed when using a non-default port.) - Highlight your desired database, and click Update Database.
- Select a backup path, set your authentication mode, and click Update.
- After the update completes, confirm the Default box is checked next to the entry for your desired database.
- Close the AccessData Database Configuration Tool window and reboot your computer.
Off-Network and Cloud Data Connectors
The following must be installed to use the new Off-Network and Cloud Data connectors.
AppDBs
- Navigate to the Enterprise installation folder (typically located in "[drive]:\Program Files\AccessData\Forensic Tools\[version]\bin").
- Launch AccessData_eDiscovery_Database_Setup.exe.
- If prompted, install any prerequisites.
- At the AccessData eDiscovery Database Setup installer Welcome dialog, click Next.
- At the License Agreement dialog, accept the license agreement and click Next.
- At the Database Server dialog, enter the connect string and credentials for your MSSQL database used with Enterprise, and click Next.
- At the Ready to Install dialog, click Install.
- If MSSQL is using a named instance and/or on a different machine than Enterprise, do the following:
- Navigate to the the Forensic Tools BIN folder.
- Open ADG.WeblabSelfHost.exe.Config in a text editor.
- Under the connectionStrings section, modify the "Infrastructure" and "eDiscovery" keys, replacing the word "localhost" with your MSSQL connection string. For example, if my MSSQL server connect string was "SQL02", I'd change the key as shown below:
SQL02;Initial Catalog=Infrastructure;Integrated Security=SSPI;MultipleActiveResultSets=True;App=EntityFramework" providerName="System.Data.SqlClient" /> SQL02;initial catalog=eDiscovery;Integrated Security=SSPI;MultipleActiveResultSets=True;App=EntityFramework" providerName="System.Data.SqlClient" />
- Save the file.
- Restart the AccessData Quin-C Self Host Service service.
Site Server
- Download and mount Site Server 7.5.1.10.zip from here.
- Launch \Site_Server\AccessData_Site_Server.exe.
- If prompted, install any prerequisites.
- At the AccessData Site Server installer Welcome dialog, click Next.
- At the License Agreement dialog, accept the license agreement and click Next.
- At the Destination Folder dialog, select the desired installation folder, and click Next.
- At the User Credentials dialog, enter the credentials for an account to run the Site Server service, and click Next.
Note: This account should be a member of the local administrators group, and be a domain-level account in a multi-box environment. The "Local System" account should only be used if all components, as well as case and evidence storage, will be on one single machine. - At the Ready to Install dialog, click Install.
- At the InstallShield Wizard Completed dialog, check Launch Site Server Configuration and click Finish.
- In the Site Server Configuration, do the following:
Type: Root
Friendly Name: Desired name to identify the Site Server
Private Certificate: Your Agent Private Certificate
Public Certificate: Your Agent Public Certificate
System Password: Your PostgreSQL password (This should be AD@Password if you did a Default installation)
Database Port: Your PostgreSQL port (Default: 5432)
Internet Protocol Version: IPv4
Results Directory: Desired Site Server temporary storage path
Children Instances: Blank
Managed Subnet Address(es): CIDR range(s) that you would like Site Server to be able to collect from - Click Apply for the Site Server service to restart.
- Click OK and Close.