Create a network share for private data storage
Storage zones for ShareFile Data requires a network share for your private data. When multiple storage zones controllers are configured for high availability and load balancing within a zone, all controllers access the same shared location for private data.
Even if you store ShareFile files in a supported third-party storage system, storage zones controller requires a network share for encryption keys, queued files, other temporary items, and a storage cache for file uploads to or downloads from that storage system. For more information about the storage cache, see Customize storage cache operations.
Storage zone controllers access a network share using the IIS Account Pool user. By default, application pools operate under the Network Service user account, which has low-level user rights. Storage zones controller uses the Network Service account by default. You can use a named user account instead of the Network Service account to access the share. Use the Network Service account to run the IIS application pool and ShareFile Services.
-
If you want to use a named user account instead of the Network Service account to access the share, create a named user account in Active Directory. We will refer to that named user account as the ShareFile Service account. Note: When you configure storage zones controller, you will specify the Network Share User Name and Network Share Password, which are the credentials for the account you will use to access the share, either the ShareFile Service account or the Network Service account.
To improve security, the admin will need to deny permissions to all other users to the particular folder containing the ShareFile storage repository and give access only to the storage location user that is being configured.
-
Connect to the server that will host the network share and create a folder for your ShareFile private data.
-
Right-click the folder and choose Share with specific people….
-
Add the account you will use to access the share (Network Service account or ShareFile Service account) and change the Permission Level to Read/Write.
-
Click Share and then click Done.
-
Right-click the folder and choose Properties.
-
On the Security tab, verify that the account you will use to access the share (Network Service account or ShareFile Service account) has Full Access permissions.
Increase the number of files per zone
By default, a storage zones controller is configured to use a CIFS share to store files in a hierarchy of folders instead of a single folder.
You can configure storage zones controller to divide the persistent storage layout. This increases the maximum number of files per zone for some types of storage arrays from less than a half million to ten million or more. If you need additional capacity, you can change the default.
To enable storage zones controller to store files in multiple folders
Open C:\ProgramData\ShareFile\StorageCenter\configs\storage-center.settings.json. Please check if value of the storagecenter: PathSelection property is set to 1. If it is set to 0, update it to
1.
Restart IIS on the storage zones controllers when you are finished editing the registry.
To increase the maximum number of folders
By default, divided storage layout has 256 top-level folders, each of which contains 256 folders. That configuration is represented in the primary storage zones controller settings C:\ProgramData\ShareFile\StorageCenter\configs\storage-center
settings.json: storage-center:PathSelectionParams with default value “2,2”.
The first value constrains the number of top-level folders to “16 to the power of 2” or 256. The second value also constrains the number of child folders of the top-level folders to 256.
Using that same formula (16 to the power of N) you can determine the appropriate values for your site. For example, PathSelectionParams=”3,4,4,4” constrains the number of top-level folders to 4096 (16 to the power of 3). The second value constrains the number of child folders of the top-level folders to 65536 (16 to the power of 4). The third value constrains the number of child folders of the secondlevel folders to 65536, and so on.
To remove empty folders
Verify that delete-queue-processor-task:DeleteEmptyFolders property in C:\ProgramData\ShareFile\StorageCenter\configs\file-deleteservice.settings.json is set to true.
Restart the File Delete Service when you are finished