When configuring the server document for each of the target Domino mail servers, you will need to do the following:
The server document for each target Domino mail server must have Enterprise Vault Domino Gateways added as trusted servers.
The signing ID that will be used to sign the Enterprise Vault client templates also needs to be given the following permissions:
The Domino archiving user needs to be given access to target user mail files.
Optionally, you may want to enable Single Sign-On for DWA users.
The main requirement for Single Sign-On is to enable users to use the Enterprise Vault search feature. However, if Single Sign-On is not configured, DWA users will need to re-enter authentication details when opening archived items. To avoid this, you may want to configure Single Sign-On on DWA servers, even if you do not plan to give users access to the Enterprise Vault search feature.
To configure the server document for each target Domino mail server
In the Programmability restrictions Who can section, ensure that the user who will sign the mail templates is displayed in the field Sign agents to run on behalf of the invoker of the agent.
Scroll down to Server Access, and add all the Enterprise Vault Domino Gateways in the domain as trusted servers.
Add the user who will create the Enterprise Vault mail template to Create master templates.
Repeat the above steps for each Enterprise Vault target Domino mail server.
More Information
Configuring Single Sign-On on the Enterprise Vault Domino Gateway