Google Cloud Platform: System Requirements

The following requirements are for the Virtual Server Agent package with Google Cloud Platform (GCP).


For a new Commvault deployment with Service Pack 18 or a more recent feature release, Indexing Version 2 is enabled by default, and new GCP virtualization clients automatically use Indexing Version 2 for VM-centric operations. You can continue to use a GCP virtualization client that was configured before Service Pack 18. The client will continue to use Indexing Version 1. However, beginning with Feature Release 19, backups of any GCP virtualization client that was configured before Service Pack 18 are disabled. To avoid gaps in coverage, you must create new GCP virtualization clients in a recent feature release. These new clients will automatically use Indexing Version 2 for VM-centric operations. Before creating your new GCP clients, if you are running an environment that was configured before Service Pack 18, upgrade your CommServe server and VSA proxy directly to Feature Release 20.

For more information, see VM-Centric Operations in Command Center.

Access Nodes

The VSA package can be installed on GCP instances running the following operating systems:

  • Windows

    • Windows Server 2019

    • Windows Server 2016

    • Windows Server 2012 R2

  • Linux

    • CentOS Linux 7 or 8

    • Red Hat Enterprise Linux (RHEL) 7.6 or 8

The VSA proxy must reside in the Google Cloud and must be connected to a GCP project. You can designate one VSA proxy to back up instances from multiple projects (to which access rights are provided in your GCP service account). For faster backups and restores, designate at least one VSA proxy for every GCP region.


You must enable the Cloud Resource Manager API. If you do not enable the API, all backup jobs will fail (including backup jobs for clients that were created in a previous release).


You can define discovery rules by a project parameter, in addition to region and zone parameters.

If an environment has discovery rules that are defined using zone or region parameters, then the following are true:

  • Multiple projects can fall within a region or a zone.

  • All instances in those multiple projects are backed up.

In this situation, backups might include instances that do not need to be backed up, and so incur unnecessary costs. Review all rules to ensure that only instances that need to be backed up are backed up.

Firewall Requirements

Tunnel ports (for example, 8400 and 8403) must be opened in the security group for the instance to enable installation of the VSA package to GCP instances and communication with the CommServe system.

If you deploy a CommServe host in an environment with firewalls, create a persistent route from the CommServe host to the access node, as documented in Setting Up a Network Gateway Connection Using a Predefined Network Topology.

If a firewall access node is installed, configure Internet options for the firewall access node machine. On the HTTP Proxy tab of the Internet Options dialog box, enter the user name and password for the firewall access node machine, using only the user name and not including the domain name with the user name.

To access GCP backup and restore services, incorporate the following URLs in your firewall or access node settings:







Configuring a Firewall to Install the VSA Package on a Cloud VM or Instance

To deploy the access node or MediaAgent on a cloud VM or instance when other components (such as the CommServe host) are on premises <Category>, configure a firewall for an access node in the cloud between the on premises components and the cloud VM or instance.


Certain third-party software and service releases (together, “Releases”) may not be supported by Commvault. You are solely responsible for ensuring Commvault’s products and services are compatible with any such Releases.