Create a recovery target for an Azure cleanroom site

To recover to an Azure cleanroom site, you need an Azure recovery target that specifies details about the cleanroom site.

Start the recovery target wizard

1. From the Command Center navigation pane, go to Cleanroom > Targets.

2. In the upper-right area of the page, click Add.

3. Select Microsoft Azure.

4. Click Next.

General page

1. Enter a descriptive name for the recovery target.

2. For Destination, click the add button to create a hypervisor for the recovery target.

3. Enter a descriptive name for the hypervisor.

   Important

   Don't enable the Connect using managed identities for Azure resources toggle key. Cleanroom doesn't support managed identity authentication.

4. In Subscription ID, enter the subscription ID for your Azure account.

5. Click Deploy a new application.

6. In Application name, enter a name for the Azure application.

7. Under Deploy the application in the selected subscription and get the application details, copy the commands, and then paste them into a text editor.

8. In the text editor, do the following:

   1. To use a custom role, for --role "Contributor", replace Contributor with the name of your custom role.

      The Storage Blob Data Contributor role is required. Don't remove this role from the commands unless you are certain that your custom role includes Storage Blob Data Contributor.

   2. Copy the commands.

9. Click Open Azure Cloud Shell.

10. At the Azure Cloud Shell command prompt, paste the commands, and then run them.

    The commands create the Azure application, and then the Tenant ID, Application ID, and Application secret for the application are displayed.

11. Return to Commvault.

12. Close the Deploy a new application dialog box.

13. For Credential, click the add button.

14. Enter a descriptive name for the credentials.

15. In Tenant ID, Application ID, and Application secret, paste the values from Azure Cloud Shell.

16. Click Save.

17. For Access nodes, select the access nodes to use for the recovery target.

18. Click Next.

19. For Security, you can enter users and/or user groups to give them access to the recovery target.

20. For Entity display name, you can specify whether to use the names of the source VMs/instances for the recovered VMs/instances or to add a string to the beginning or end of the names of the source VMs/instances for the recovered VMs/instances.

21. Click Next.

Recovery Options page

1. From the Resource group list, select a resource group for the recovered VMs/instances.

2. From the Region list, select a region for the recovered VMs/instances.

   The region must align with the region containing Air Gap Protect storage. Otherwise, recovery fails.

3. From the Storage account list, select the storage account for the recovered VMs/instances.

   Only storage accounts that are associated with the region you selected for the recovered VMs/instances are available to select.

4. From the Availability zone list, for Azure managed disks, select an AZ for the recovered VMs/instances.

   Only AZs that are in the region you selected for the recovered VMs/instances are available to select.

   If you select the Auto option and if the feature is supported for the specified region and VM size, the Commvault software attempts to recover the entity to the same availability zone as the source. Otherwise, the entity is recovered without a zone (No Zone).

5. For Storage type, to manage storage and costs, you can select the disk type for the recovered VMs/instances.

   This setting applies only to Azure managed disks.

   The Original option uses the same storage type as the source VM.

6. For Virtual network, select the network connection for the recovered VMs/instances, or leave the default value of Auto select.

   Static IP addresses from source VMs/instances are not recovered.

7. From the VM size box, select a VM size for the recovered VMs/instances.

   Only VM sizes that are available for the resource group you selected for the recovered VMs/instances are available to select.

8. For Security group, specify the network security group for the recovered VMs/instances or leave the default value of Auto select.

9. If you want Azure to assign a public IP address to the recovered VMs/instances, enable the Create public IP toggle key.

10. Click Submit.