Collaboration Services 3.8 - Deployment Guide

About this document About Collaboration Services Architecture and functionality Before you begin Platform considerations Pre-Installation planning Prepare for use Collaboration Services upgrade Installation checklists Re-Installing Collaboration Services Troubleshooting

Security

Collaboration Services provides a high level of security. A special dedicated Exchange mailbox in each forest is used for communication with other synchronization partners. All interactions between the services are encrypted.

Each synchronization partner has a password-protected public key file. The public key file (*.akf) contains the email address of the Collaboration Services mailbox used by the partner and the public key for data decryption.

The public key file of the HQ forest is generated during the installation of Collaboration Services in the HQ forest. When you install Collaboration Services in a branch forest, Collaboration Services prompts you for the HQ public key file. Installation of a new branch is impossible without the HQ public key file.

After a branch is installed, the branch administrator needs to export and securely transfer the branch’s public key file to the HQ forest administrator, who can then register the branch in the collaboration structure.

Mail forwarding

For each published object, Collaboration Services creates a stub object (disabled user account) in the forests that subscribe to the published object’s collection. For mail-enabled users and contacts included in the collection, the redirectors are already established, and therefore, Collaboration Services simply sets and populates the proxy addresses and the target address of the original object to the corresponding attributes of the stub object.

For mailbox-enabled users, Collaboration Services assigns the following addresses to each stub object:

Figure 4. Mail forwarding

A user who wants to send a message to a user from another forest just selects the recipient (Collaboration Services stub) from the Global Address List (GAL) and sends the message. As soon as a message is sent, Exchange server verifies the targetAddress attribute value and redirects the message to the other forest.

External mail always comes directly to the original object and does not use the Collaboration Services stubs.

Administrative interface

All Collaboration Services administration is performed through a web interface. Extensive statistics provided by the web interface help you track the synchronization activities and provide all the information needed for effective administration.

Figure 5. Web interface

 

 

Before you begin

This section describes what you need to do before installing Collaboration Services. The pre-installation checklist will also help with these preparations.

Documentos relacionados