After you set up your Google Workspace account and TLS certificate, make sure that your source account is set up correctly.
Steps to set up
-
Sign in to your Google Admin console.
Sign in using an account with super administrator privileges (does not end in @gmail.com).
-
In the Admin console, go to Menu DataData import & exportData migration.
- Click Set Data Migration Up.
- Under Migration Source, select Microsoft Office 365.
- Select your data type and click Authorize.
- Enter or select your Microsoft admin account.
The account must have the Global Administrator role.
- Enter your password and click Sign in. Then, click Accept after reviewing the permissions.
- Click Start.
Applies to Microsoft Exchange Server 2007, 2010, 2013, and 2016.
You need to
- Open EWS ports on your source account server.
- Set up the role account.
You need to grant impersonation rights (not delegation permission) to your role account. For details on impersonation rights, refer to your Microsoft documentation.
Recommendations
- Test your Exchange server connectivity with the Microsoft Remote Connectivity Analyzer.
- If you're an Exchange user, verify the EWS setup and point a browser to the EWS URL. If the EWS setup is correct, your browser displays a sign-in page.
- Ensure your server gets connections from Google IP address ranges.
- Verify your UPN. You might need to modify the UPN if you see an authentication error.
Applies to Exchange 2003 or earlier, webmail providers, such as Yahoo!, and other IMAP servers.
You need to
- Choose a role account—When migrating from an IMAP webmail server, the Google Admin console prompts you to enter the username and password of the role account. This is an account on your source mail server. The data migration service uses it to test connectivity to your mail server. See Role account.
- Google IP address ranges—Ensure your server connects to Google IP address ranges.
If required, see the additional setup steps for migrations from HCL Domino or Gmail.
If you're migrating email from Google Workspace, check out our new data migration service. It's a more recent version of the data migration service and offers an easier set up process for Google Workspace migrations. For details, go to Data migration (New).
These instructions apply to an existing Google Workspace account. If you selected the Gmail migration option, see Personal Gmail account instead.
You need to
- Make sure that your old Google Workspace account is active. The data migration service can't migrate data from a suspended account.
- Turn IMAP on for users. For details, go to Turn POP & IMAP on and off for users.
- If you have 2-Step Verification or single sign-on (SSO) turned on, generate an App Password for the data migration service. You'll use it later in the Google Admin console when you're migrating mail. For details, go to Sign in with App Passwords.
Your users need to
- In their old Google Workspace account, sign in to Gmail.
- In the top corner, click Settings See all settings.
- Click Forwarding and POP/IMAP.
- Under IMAP access, select Enable IMAP.
- Under Folder size limits, select Do not limit the number of messages in an IMAP folder (default).
- Click Save changes.
Note: If you saved any changes, you need to repeat step 2 to return to Settings.
- Click Labels.
- Make sure that any label that needs to be migrated has the Show in IMAP box checked.
Applies to personal Gmail accounts (ending with @gmail.com or @googlemail.com).
Note: You can use this option when migrating from an existing Google Workspace account, but you have to authorize each source user separately. Therefore, it isn't recommended.
Your users need to
- In their old Gmail account, sign in to Gmail.
- In the top corner, click Settings See all settings.
- Click Forwarding and POP/IMAP.
- Under IMAP access, select Enable IMAP.
- Under Folder size limits, select Do not limit the number of messages in an IMAP folder (default).
- Click Save changes.
Note: If you saved any changes, you need to repeat step 2 to return to Settings.
- Click Labels.
- Make sure that any label that needs to be migrated has the Show in IMAP box checked.
Gmail users must also allow the data migration service access to their account. You'll complete this step later when you Migrate email to Google Workspace.
Applies to HCL Domino IMAP server (Domino version 8.5.2 and later).
Step 1: Prepare your mail files and users for IMAP access
- In the Person document for each user whose mail you want to migrate:
- Set the Format preference for incoming mail to Prefers MIME.
- Ensure that all users you want to migrate have an Internet password set in their Person document.
The data migration service and Domino IMAP service use these passwords for authentication.
- Enable HCL Notes views for IMAP and folder synchronization.
- Run the Domino Compact and Fixup tasks against your mail databases.
Doing so ensures that the On Disk Structure is correct for each database. It also verifies the integrity of the mail prior to the conversion process.
- Run the mail conversion utility (the Convert task) to enable IMAP-specific features in each mail database.
The conversion utility sets an option bit in the database indicating that the database is IMAP-enabled.
-
Run the conversion utility a second time using the -h option.
This step adds IMAP attributes to messages that are already in the mail database at the time of the initial conversion.
- When the conversion process has completed, verify the "Database is IMAP enabled" message appears in the database properties.
Step 2: Obtain and install a third-party TLS certificate
Set up TLS using a third-party certificate authority on your Domino server. Refer to your HCL documentation for instructions.
Step 3: Enable and start the Domino IMAP server
- Open the mail server's configuration document in the Domino directory:
- Click MIMEConversion Options.
- Select Outbound.
- In the Message content field, select from Notes to HTML.
- To open your server document in the Domino directory, click PortsInternet PortsMail.
- On both the TCP/IP and TLS ports, enable the IMAP service.
- Ensure your firewall allows traffic to flow on ports 143 and 993.
- If the IMAP service doesn't automatically load when you start your Domino server, open your server console and enter: load imap.
Next step
Follow the steps in Migrate email to Google Workspace.
Recommendations
- Run a test migration before migrating data.
- Ensure your server gets connections from Google IP address ranges.
- For details on setting up your Domino server, consult your Domino documentation.
Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.