Event ID 7077 is generated after successful backup of Enterprise Vault

Article:TECH74651  |  Created: 2009-01-18  |  Updated: 2014-08-06  |  Article URL http://www.symantec.com/docs/TECH74651
Article Type
Technical Solution


Issue



Event ID 7077: "Legacy registry values are in use. Enterprise Vault has a new method of backing up Vault Stores that cannot be used until you remove this registry value. See the Administrator's Guide for information about backing up Vault Stores" is generated after successful backup of Enterprise Vault


Error



Type:     Warning
Event:    7077
Source:   Enterprise Vault
Category: Storage Server
Description: Legacy registry values are in use. Enterprise Vault has a new method of backing up Vault Stores that cannot be used until you remove this registry value. See the Administrator's Guide for information about backing up Vault Stores.
The following legacy registry values were found:
EnableExpiry
EnableFileWatch
EnableArchive
EnableCrawler
EnableReplayIndex
EnablePSTMigrations
EnableRestore 
V-437-7077

Cause



Prior to release 8.0, Enterprise Vault needs to be placed into backup (read-only) mode prior to the backup commencement through a scripting action. Once the backup completes, Enterprise Vault would then be placed back to normal (read-write) mode through another scripted action. The read-only mode maintained the integrity of numerous files that may be system-locked during a file write process. You cannot properly backup a file that is system locked. The above referenced pre and post backup scripts that put Enterprise Vault into and out of backup-mode simply made changes to the values of specific keys in the registry. These registry keys are known as the 'Legacy' keys, since they are prior to release 8.0.
 
Note: For more information on performing a backup prior to release 8.0, please refer to the Enterprise Vault Administrator's Guide and refer to the following Tech Note:  http://www.symantec.com/docs/TECH48521 
 
For Enterprise Vault 8.0 and higher, a different method of initiating backup mode is used and is referenced at the following Tech Note:  http://www.symantec.com/docs/TECH64458 
 
If the above mentioned 'Legacy' registry keys are detected by Enterprise Vault 8.0 or higher, event 7077 will be generated. It is recommended that these registry keys are deleted.
 
If the keys are not present, and the 7077 event returns, it is most likely because the backup scripts mentioned above are attempting to merge in the legacy keys as part of the old pre and post backup process. As noted, Enterprise Vault no longer uses these registry keys to go into (and out of) backup mode. While the 7077 event itself does not indicate an issue with Enterprise Vault, it should not be ignored, as it is an indicator that the backup scripts that are being used have not been updated to reflect the way Enterprise Vault 8.0 and above behaves.
 
When Enterprise Vault 8.0 was released, architectural changes in Enterprise Vault 8.0 made the Backup Exec 12.5 Agent for Enterprise Vault enable to automatically protect all aspects of Enterprise Vault.
 
Note: For more information on Protecting Enterprise Vault 8.0 with Backup Exec for Windows Servers 12.5 Agent for Enterprise Vault refer the following Tech Note:  http://www.symantec.com/docs/TECH69116

Solution



  1. Check the registry for the presence of the registry keys listed in the event 7077.
     
  2. If you are running Enterprise Vault release 8.0 or higher, perform the following steps.
     
  3. Type SERVICES.MSC from 'Run' in the server Start menu.
     
  4. Take note of any service that begins with 'Enterprise Vault' and is 'Started'.
     
  5. Stop the Enterprise Vault Admin Service.
     
  6. Run Regedit.

    Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.
     
  7. Browse to HKEY_LOCAL_MACHINE\Software\KVS\Enterprise Vault\Storage
     
  8. Remove the entries that are listed in the error, this will most likely be following:

    EnableExpiry

    EnableFileWatch
    EnableArchive
    EnableCrawler
    EnableReplayIndex
    EnablePSTMigrations
    EnableRestore.
     
  9. Close the registry editor.
     
  10. Start the Enterprise Vault Admin Service.
     
  11. Start all remaining Enterprise Vault services that were noted above as 'Started'.
     
  12. Edit each of your pre and post backup scripts to verify that they are not trying to merge in the legacy keys. Look for CALL or MERGE commands, as well as any reference to any file with the '.reg' file extension.

Supplemental Materials

SourceEvent ID
ValueEvent: 7077
Description
Type: Warning
Event: 7077
Source: Enterprise Vault
Category: Storage Server
Description:
Legacy registry values are in use. Enterprise Vault has a new method of backing up Vault Stores that cannot be used until you remove this registry value. See the Administrator's Guide for information about backing up Vault Stores.
 
The following legacy registry values were found:
EnableExpiry
EnableFileWatch
EnableArchive
EnableCrawler
EnableReplayIndex
EnablePSTMigrations
EnableRestore
 

SourceUMI
ValueV-437-7077
Description

Legacy registry values are in use. Enterprise Vault has a new method of backing up Vault Stores that cannot be used until you remove this registry value. See the Administrator's Guide for information about backing up Vault Stores.
The following legacy registry values were found:

EnableExpiry
EnableFileWatch
EnableArchive
EnableCrawler
EnableReplayIndex
EnablePSTMigrations
EnableRestore




Article URL http://www.symantec.com/docs/TECH74651


Terms of use for this information are found in Legal Notices