6. Click **Save**.
7. Close the Admin Console browser tab.
3. Enable 2-step verification for unrecognized logins:
1. Open the [Account Settings](https://app.box.com/account) page. (You can reach this page from the drop-down menu under your initials.)
2. On the **Account** tab, under **Authentication**, select **Require 2-step verification for unrecognized logins**.
3. Choose your **Country** and enter a **Mobile Phone Number**, and then click **Continue**.
4. Enter the verification code you receive, and then click **Continue**.
5. If you are using a new mobile device, Box will send you a second code. Enter it, and then click **Submit**.
6. Click **Save Changes**.
### Step 3: Create a Box App that Fusion Can Use to Crawl the Box files
Create a Box app that uses OAuth 2.0 with JWT server authentication.
If you already have an app, proceed to Step 4: Configure Your App to Use a Box Service Account.
1. Open the [Box Developers Console](https://app.box.com/developers/console).
2. Click **Create New App**.
3. Select **Custom App**, and then click **Next**.
4. Click **OAuth 2.0 with JWT (Server Authentication)**, and then click **Next**.
5. Name your app, and then click **Create App**. The name must be globally unique across all apps created by all Box users.
6. Click **View Your App**.
### Step 4: Configure Your App to Use a Box Service Account
1. Use OpenSSL to create a private/public key pair:
1. Install OpenSSL if you need to. Windows instructions are [here](http://gnuwin32.sourceforge.net/packages/openssl.htm).
2. Open a Command Prompt window and run these commands to generate a private/public key pair:
```
openssl genrsa -aes128 -out private_key.pem 2048
```
Enter a password for the private key when prompted.
```
openssl rsa -pubout -in private_key.pem -out public_key.pem
```
In the current directory of the Command Prompt, you now have private and public key files, `private_key.pem` and `public_key.pem` respectively.
2. Open the [Box Developers Console](https://app.box.com/developers/console), log in as Admin if you are asked to log in, and click your app.
3. In the left navigation menu, click **Configuration**.
4. Configure scopes and advanced features:
1. Under **Application Access**, select **Enterprise**.
2. Under **Application Scopes**, deselect **Manage groups**.
3. Under **Advanced Features**, enable **Generate User Access Tokens** and **Perform Actions as Users**.
4. Click **Save Changes**.
5. In the **Add and Manage Public Keys** area, click **Add a Public Key** and paste the contents of the `public_key.pem` file (generated from
Step 4: Configure Your App to Use a Box Service Account) into the text box.
1. Make a note of the new **Public Key ID** that you just created.
6. Under **OAuth 2.0 Credentials**, click **COPY** for the Client ID.
7. Authorize your app:
1. Open the [Box Admin Console](https://app.box.com/master).
2. In the left navigation menu, click **Settings** > **Enterprise Settings** (or **Business Settings**) > **Apps**.
3. Under **Custom Applications**, click **Authorize New App**.
4. In the **API Key** box, paste the Client ID credential you copied in Step 6, and then click **Next**.
5. Read the App Authorization dialog and click **Authorize**.
6. Close the Admin Console browser tab.
Enter the start link `34192617287`. File ID: 
Enter the start link `204871656422`: |
| API Key | In the [Box Developers Console](https://app.box.com/developers/console), select the app. On the **Configuration** tab under **OAuth 2.0 Credentials**, use the **Client ID**. |
| API Secret | In the [Box Developers Console](https://app.box.com/developers/console), select the app. On the **Configuration** tab under **OAuth 2.0 Credentials**, use the **Client Secret**. |
| JWT App User ID | Email address that you use to sign in to your Box co-admin account. Use the Co-admin account you created in Step 4. |
| JWT Public Key Id | In the [Box Developers Console](https://app.box.com/developers/console), select the app. On the **Configuration** tab, under **Add and Manage Public Keys**, use the **ID** for a public key. |
| JWT Private Key | Base64-encoded contents of the private-key file that matches your JWT Public Key Id. Base64 encode the *entire* contents of the file, including the first and last lines. *(Fusion 5.0+ only.)* |
| JWT Private Key File | Full path to the private-key file you created that matches your JWT Public Key Id. *(Prior to Fusion 5.0 only.)* |
| JWT Private Key Password | Passphrase for the private key (from the private-key file you created in Step 4). |
| Distributed crawl collection name | Collection that contains the pre-fetch index. |
| Box.com children responses per page | Use the default value of 1000. |
| Nested folder depth limit | Generally, you want a number that will crawl all documents, so keep the default value. For testing, you could reduce the number substantially to speed up the crawl. |
| Number of partition buckets | Divide the number of files by 5000. Use that number or 10000, whichever is smaller. |
| Number distributed crawl datasources | Use 1 to 27. |
| Number of pre-fetch index creator threads | A number between 2 and 5. Use 2 for small datasources and 5 for huge datasources (over 10 million files). |
5. Click **Save**.
## Crawl a Box Data Repository
Crawl a Box data repository.
### Step 7: Crawl the Fusion Datasources
Crawl the datasources, which use Fusion’s Box connector to access the Box data repository. Fusion’s Box connector uses the pre-fetch index to fetch the contents of each file from Box.com, get metadata from both the distributed index and Box.com, and index the documents through Fusion’s index pipeline.
You can:
* **Run the crawl now.**
1. From the Fusion launcher, click **Search** > **Home** > **Datasources**.
2. Click the datasource.
3. Click **Start Crawl**.
* **Schedule the crawl** (For Fusion 4.2 through 5.5):
1. From the Fusion launcher, click **Devops** > **Home** > **Scheduler**.
2. Click the row for the job that corresponds to the datasource.
3. Specify schedule information, and then click **Save**.
API Name | Description | | JWT App User ID
`f.fs.appUserId` | The Developer Edition API App User ID that you want to crawl as. | | JWT Public Key ID
`f.fs.publicKeyId` | The public key prefix registered in Box Auth that you want to use to authenticate with. | | JWT Private Key
`f.fs.privateKeyBase64` | Base64-encoded JWT private key for the app user you want to authenticate as. *(Fusion 5.0+ only.)* | | JWT Private Key File Path
`f.fs.privateKeyFile` | Path to the JWT private key file for the app user you want to authenticate as. *(Prior to Fusion 5.0 only.)* | | JWT Private Key File Password
`f.fs.privateKeyPassword` | The password that secures the public key. |