Planning

Use this section to plan your installation and set up the service accounts used by the application. You must prepare this information before installing the application.

Administrative access for installation

Nuix Discover installation requires Administrator access on all servers. Roles that include the appropriate access are either a local administrator account or a domain account added to a local administrator group. Additionally, installation requires SYSADMIN server role privileges for the SQL Server databases.

Service account

To install the application, you must:

Create service accounts.

Review password character restrictions.

Add permissions required on Nuix Discover servers.

Set up Active Directory groups for File Repository access control

Review the following sections to learn how to plan for service accounts.

Create service accounts

To install the application, create several accounts in Active Directory and SQL Server, as described in the following table.

*Passwords can only contain certain special characters and must begin with an alpha character. The special characters that can be used in passwords are described in the following table.

Permissions required on Nuix Discover servers

Certain permissions are required on Nuix Discover servers. Certain permissions are also required for installation and ongoing application operation, as described in the following table.

Set up AD Groups for File Repository Access Controls

Nuix Discover will use one or more SMB (CIFS) network share as “File Repositories” for the application to store and process data.

Note: The Server Message Block (SMB) protocol is a network file sharing protocol. The Common Internet File System (CIFS) protocol is a dialect of SMB.

As a best practice, we recommend using an Active Directory group to secure the File Repository share. We recommend using two groups to provide direct access to shares, as described in the following table.

Document server host names and application role

In the following table, record the host names of the Nuix Discover servers by their server role. Be sure to include all servers, including each node if your SQL Server is clustered. Confirm you have Administrator access, which can be either a local administrator account or a domain account added to a local administrator group, and System Administrator access to SQL Server.

Document URLs

Before installing the application, determine the virtual directories that will host the Nuix Discover application(s), and then record the URL information in the following table. You must have this information to install the application.

Always use the same URL format and note if the URL is http or https. The URLs must be in one of the following formats:

http://servername/ OR https://servername/

http://IPAddress/ OR https:/IPAddress

http://DNS alias OR https://DNS alias

This document will reference URLs as http(s)://<address>/ You must replace this with a proper URL, using one of the above formats.

If you are using Domain Name System (DNS) redirection, before installing the application, configure and provide DNS details for the application to use during the installation. You must specify the URLs shown in the following table during the installation.

Define File Repositories

A File Repository is a network store location or location(s) used to store data that is accessed by Nuix Discover. The File Repositories contain case files, images, indexes, archives, ESI source data, load files to import, and exports. Nuix Discover accesses a File Repository via a UNC path and uses the Nuix Discover Service Account to access the files.

Nuix Discover supports four types of File Repositories, as described in the following table.

Nuix Discover can be configured to use a single file share to host images, index, file transfer, and archive File Repositories.

Nuix Discover supports more than one image, index, file transfer, and archive file shares. Each of these File Repository types can be hosted on unique file shares. This is beneficial for performance, segregating data that requires logical or physical separation, configuring different retention requirements, or scaling out.

File shares should be configured in advance of installation. The File Repository is configured in Nuix Discover after the application is installed.

File shares and permissions should have the following configuration:

The share name should be as short as possible such as NDDATA or NDDATA$.

The share permissions are configured to allow FULL CONTROL to EVERYONE.

NTFS permissions are restricted to MODIFY access to only the Nuix Discover System/Portal Administrators Group. This share should be expandable as case volumes grow. 

There are multiple file types, as described in the following table.

 

Define User Authentication Method

Nuix Discover can be configured to use two different components for user authentication. Only one type can be configured per environment at a time. The below sections describe the two components.

RingtailSTS 

Historically, Ringtail used the RingtailSTS (Secure Token Service) web application to authenticate users. This was part of the standard Ringtail Web components. At the time of installation of a Ringtail Website, you can choose if RingtailSTS will authenticate against Active Directory or against Ringtail authentication. 

Discover Login Service 

With the introduction of the separate login service, each administrator can define multiple Identity Providers and assign users to them. Each user can be assigned to a single identity provider. Using the Login Service, Discover can support multiple authentication methods and multifactor authentication. 

Configuration

Only one technique can be used. If you enable the Discover Login Service, all authentications must happen via the Login Service. 

Authentication Method Matrix

The authentication method for RingtailSTS and the Discover Login Service varies per authentication source or identity provider, as described in the following table.

‎