> Documentation > Activate > eDiscovery and Compliance > Search for Content in Files and Emails by Using Content Indexing > Administrators > Security > Securing Access to the Search Engine

Applying Security Configurations to the Search Engine Software

In addition to configuring the firewall settings on each Search Engine node (see Configuring the Windows Firewall on Search Engine Nodes), the Search Engine software on each Search Engine node must also be secured to prevent unauthorized access to your content indexing data.

Search Engine Automatically Configures Secure Access

The software automatically denies access to the data in the Search Engine from any unauthorized access. If you install or remove components that need to communicate with the Search Engine, such as a Web Server or MediaAgent, the software will also handle the security changes automatically.

Permitting Access to the Search Engine from a Different Client

If you need to access the Search Engine from a client that is not one of the authorized components (Search Engine, CommServe, MediaAgents, or Web Servers), then you must create the sAllowIPCvAccessControl registry key on all of your Search Engine nodes with the IP address of the client you want to use to access the Search Engine.

Perform the following procedure for each Search Engine node in your CommCell environment.

  1. Log in to the Search Engine node.

  2. Open the Registry Editor:

    1. From the Start Menu, type Run.

    2. In the Run dialog box, type regedit and click OK.

    3. If prompted, click Yes at the User Account Control prompt.

  3. Navigate to the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\CommVaultSystems\Galaxy\InstanceNumber\Machines\MachineName\SearchServer

    Where InstanceNumber is the instance number of the Search Engine installation and MachineName is the name of the Search Engine node.

  4. Right-click the SearchServer key, point to New, and then click String Value.

  5. For the new REG_SZ value name, enter sAllowIPCvAccessControl.

  6. Double-click the sAllowIPCvAccessControl value and in the Value data box, enter the IP address of the machine that you want to allow to access the Search Engine. You may enter multiple IP addresses, separated by a comma.

  7. Click OK.

  8. Restart services on the Search Engine node. See Restarting a Service.

  9. Repeat this procedure for all other Search Engine nodes in your CommCell environment.

Loading...