Deploying LiveArchive with Microsoft M365 / Office365 | ExchangeDefender [ Skip to content ](#main) [ ![ExchangeDefender](/assets/images/xd_logo_blue.png) ](/) Email Security ![Platform Overview](/assets/images/m-xd-pro.png)### ExchangeDefender PRO Enterprise-grade email security made simple for every business. [Sign Up](/sign-up) [Live Demo](/demo) [Email Security Stops spam, malware & phishing in real time. ](/email-security) [Encryption Secure your emails, attachments & sensitive data. ](/corporate-email-encryption) [Web File Sharing Easy, safe cloud file sharing with access control. ](/web-file-server) [Live Archive Locked-in email backup & continuity during outages. ](/livearchive-backup) [Emergency Inbox Keep email flowing without interruption if your provider fails. ](/inbox) [Spearphish Train your team with phishing simulations & risk tracking. ](/spearphishing) Managed Email ### Enterprise-Grade Managed Email Reliable, secure, and fully managed email operations for modern organizations. ![ExchangeDefender](/assets/images/managed_email_menu.png) [Microsoft365/Google Email Management Expert management and security for Microsoft 365 and Google Workspace email. ](/managed-email-operations) [AI Advisory Secure, practical AI consulting & implementation for SMBs. ](/management-ai) Company ### ExchangeDefender: 29+ Years of Trust We are a cybersecurity company focused on business email protection, with 29+ years of experience keeping organizations secure, connected, and resilient. ![ExchangeDefender](/assets/images/careers_1.png) [ About Us Learn our purpose, values, and the mission behind every decision. ](/about-us) [ Blog News, product updates and email security insights. ](/blog) [ Capabilities Discover the tech and expertise that keep your email secure around the clock ](/capabilities) [ Careers Be part of a team using modern tech to solve real threats and ship great work. ](/careers) [Partners](/partners) [Docs](/docs) [Contact Us](/contact) Talk to a Human Open menu Menu ---- Email Security [Email Security](/email-security) [Encryption](/corporate-email-encryption) [Web File Sharing](/web-file-server) [Live Archive](/livearchive-backup) [Inbox](/inbox) [Spearphish](/spearphishing) Managed Email [Microsoft365/Google Email Management](/managed-email-operations) [AI Advisory](/management-ai) Company [About Us](/about-us) [Blog](/blog) [Capabilities](/capabilities) [Careers](/careers) [Partners](/partners) [Docs](/docs) [Contact Us](/contact) Talk to a Human Search documentation On this page On this page ------------ - [Deployment best practices](#deployment-best-practices) - [Journal Mailbox Setup for M365](#journal-mailbox-setup) - [Checklist troubleshooting](#checklist-troubleshooting) - [Error messages from admin.exchangedefender.com](#error-messages-from-admin) - [s3](#error-message-s3) - [RDS](#error-message-rds) - [Checklist for cost saving](#checklist-for-cost-saving) - [RDS](#checklist-for-cost-saving-RDS) - [S3](#checklist-for-cost-saving-S3) - [FAQ](#faq) [ Documentation ](https://www-preview.exchangedefender.com/docs) [Documentation](https://www-preview.exchangedefender.com/docs)Deploying LiveArchive with Microsoft M365 / Office365 ===================================================== Deploying LiveArchive with Microsoft M365 / Office365 [¶](#/) --------------------------------------------------------------- Deploying LiveArchive with Microsoft M365 is simple and straight forward because it relies on the proven Microsoft Exchange journaling & forwarding technology that has been in use for over a decade. This article will walk you through the process of configuring LiveArchive with M365 and some of the best practices that will ensure smooth operation. Deployment best practices [¶](#deployment-best-practices) ----------------------------------------------------------- ExchangeDefender LiveArchive requires very little in terms of computing power in order to provide a low cost, long term archival solution for emails. **AWS Notes:** If you follow our instructions for deployment of LiveArchive in Amazon Web Services the object storage S3 in AWS can be upgraded with very little to no downtime or data loss as your organization's archive grows. However, RDS instance will require some advanced planning or adjustments as your archive grows. While RDS is able to be upgraded to a larger instance, it is not automated and does not include copying data over. With this limitation in mind organizations with up to 10 employees should be able to store all of their messages within the free tier of AWS and likely will only need to upgrade the storage capacity to service up to 20 employees. Organizations between 20-50 employees may need to upgrade to a \_db.t3.medium\_ where organizations between 50-100 employees may need to upgrade to a \_db.t3.large\_. If you exceed the capacity at any point you will need to connect to the RDS instance, export the MariaDB/MySQL database, create a new database, restore the data, and reconfigure LiveArchive to point to the new RDS instance. Journal Mailbox Setup for M365 [¶](#journal-mailbox-setup) ------------------------------------------------------------ **Office 365** 1. Navigate to \_LiveArchive\_ on admin.exchangedefender.com 2. Setup the livearchive mailbox with the S3 bucket and optional RDS info 3. Change the message type from \_Regular\_ to \_Attached\_ 4. Copy the forwarding address for the livearchive mailbox from admin.exchangedefender.com 5. Navigate to your \_Exchange Admin Center\_ 6. Create a new \_Mail Contact\_ in the \_Exchange\_ > \_Recipients\_ > \_Contacts\_ exchange admin center 1. Fill in any values for the name and alias 2. Paste the journal address from admin.exchangedefender.com into the External email address field ![](/images-documentation/office-365-create-contact.png) 7. Navigate to Mail flow > Rules within the exchange admin center 8. Click Add a rule and then 1. Set the name to LiveArchive Journal ![](/images-documentation/office-365-set-rule-condition.png) 2. Change Apply this rule if to Apply to all messages 3. Change Do the following to Add recipients to the Bcc box 1. Select the newly created Mail Contact from the previous step 4. Click Next 5. Leave the defaults for Set rule settings and click Next ![](/images-documentation/office-365-set-rule-settings.png) 6. After the rule is created, make sure to Enable the rule Checklist troubleshooting [¶](#checklist-troubleshooting) ----------------------------------------------------------- **RDS** - Public access is enabled - Database authentication is set to Password authentication - Disk capacity is not exceeded - Username and password is correct - Endpoint and port is correct **S3** - Bucket name is correct - Bucket region is correct - Bucket access key and secret access key are correct - Bucket ACL is disabled - Bucket capacity is not exceeded Error messages from admin.exchangedefender.com [¶](#error-messages-from-admin) -------------------------------------------------------------------------------- ### S3 [¶](#error-message-s3) Failed with error SignatureDoesNotMatch:The request signature we calculated does not match the signature you provided. Check your key and signing method - Invalid secret access key ![](/images-documentation/error-msg-signature-does-not-match.png) Failed with error InvalidAccessKeyId:The AWS Access Key Id you provided does not exist in our records - Invalid access key ID ![](/images-documentation/error-msg-invalid-access-key-id.png) AuthorizationHeaderMalformed:The authorization header is malformed; the region 'us-east-2' is wrong; expecting 'us-east-1' - Incorrect region selected ![](/images-documentation/error-msg-authorization-header-malformed.png) ### RDS [¶](#error-message-rds) Failed to connect to mysql: Connection timed out - Incorrect port, host or firewall rule Checklist for cost saving [¶](#checklist-for-cost-saving) ----------------------------------------------------------- ### RDS [¶](#checklist-for-cost-saving-RDS) - Ensure public access is available - Disable any multi-zone replication ### S3 [¶](#checklist-for-cost-saving-S3) - **Block** all public access to S3 - Disable bucket versioning - Enable server side encryption SSE-S3 - Ensure object lock is dsiabled FAQ [¶](#faq) --------------- **Messages for alias domains are not being stored** - Make sure all domains that should be archived are enabled on admin.exchangedefender.com **New messages are not appearing in the archive** - Make sure the journal rule is still active on the source mail server - Make sure S3 and RDS have not exceeded their quotas - Make sure the Archive Type is correct under the LiveArchive Details on admin.exchangedefender.com. If your journaling rule/mail server embeds the original message as an attachment (like Office 365) to a new message then you should choose the Attached Archive Type. **Messages are not able to load in the UI** - Make sure the database backup and maintenance window is set to a time outside of active hours - Make sure the S3 bucket has content in it. Solutions --------- - [Stop Spam & Malware](/email-security) - [Hands-Free Email Backup](/livearchive-backup) - [Instant Email Recovery](/inbox) - [Send Private Emails](/corporate-email-encryption) - [Train Against Email Threats](/spearphishing) - [Share Files Safely](/web-file-server) Company ------- - [About ExchangeDefender](/about-us) - [Compliance & Legal](/our-compliance) - [Become a Partner](/partners) - [Support Portal Login](https://support.exchangedefender.com/) - [Microsoft 365 Email Management](/managed-email-operations) - [AI Advisory Service](/management-ai) ![ExchangeDefender](/assets/images/dark-xd-logo.png)USA: +1 (407) 465-6800 United Kingdom: 0800 8620149 Australia: +61 0390010641 Fax: +1 (954) 839-8737 [ ](https://www.facebook.com/ExchangeDefender) [ ](https://www.twitter.com/XD_Defender) [ ](https://www.linkedin.com/company/exchangdefender) [ ](/blog) © 2026 Own Web Now Corp - All rights reserved </> with ❤️ in Orlando [SLA](/sla) [TOS](/tos) [PRIVACY](/privacy-end-users) [AUP](/aup) We're Here to Help 👋 -------------------- Tired of AI 🤖 and hold music? Request a call or text (sms/telco charges may apply) and someone with a brain and a pulse will get in touch with you promptly. Close modal Website Name Email Address Company Phone Preferred Contact Method Text me Call me Call Date Call Time Time Zone Eastern Central Mountain Pacific London Paris Madrid Berlin Tokyo Dubai Sydney Request Human Contact Submitting... Close Start Your Free Year -------------------- Enter your details and we will set up your free year of email protection. Close modal Website Full Name Email Continue Submitting... Close Try ExchangeDefender for Free 💰 ------------------------------- We look forward to helping you secure your email. We offer a free 30-day no-risk trial, just fill out the form below and one of our onboarding techs will get you started. If you'd just like to take a look at the demo, click here for a [live demo site](/demo). Close modal Website Name Email Address Company Phone Preferred Contact Method Text me Call me Call Date Call Time Time Zone Eastern Central Mountain Pacific London Paris Madrid Berlin Tokyo Dubai Sydney 💰 Get your free month Submitting... 🏃 Explore a Live Demo Submitting... Close Train Your Team Before the Hackers Do 👋 --------------------------------------- ExchangeDefender Spearphish is our new phishing simulation and training tool, designed to help your team spot scams before they click. Want to be first in line? Request early access or get a personal demo — just drop your name and email below. Close modal Website Name Email Address Company Phone Preferred Contact Method Text me Call me Call Date Call Time Time Zone Eastern Central Mountain Pacific London Paris Madrid Berlin Tokyo Dubai Sydney Request Early Access Submitting... Close