System Requirements for Protecting Google Cloud Platform Instances

Verify that your environment meets the system requirements for protecting Google Cloud Platform (GCP) instances with Commvault.

Commvault Packages

Access nodes for GCP instances must have the Virtual Server Agent package installed.

Deployment and Other Requirements

Access nodes for GCP instances must be present on Google Cloud. You can designate one access node to back up instances from multiple projects (to which access rights are provided in your GCP service account). For faster backups and restores, designate at least one access node for every GCP region.


You must enable the Cloud Resource Manager API. If you do not enable the API, all backup jobs will fail (including backup jobs for clients that were created in a previous release).


You can define discovery rules by a project parameter, in addition to region and zone parameters.

If an environment has discovery rules that are defined using zone or region parameters, then the following are true:

  • Multiple projects can fall within a region or a zone.

  • All instances in those multiple projects are backed up.

In this situation, backups might include instances that do not need to be backed up, and so incur unnecessary costs. Review all rules to ensure that only instances that need to be backed up are backed up.

Operating System Requirements

Access nodes for GCP instances must run one of the following operating systems.


Operating system

Processor architecture

CentOS Linux 8 or 7


Red Hat Enterprise Linux (RHEL) 8 or 7.6

  • x64

  • Arm


Operating system

Processor architecture

Microsoft Windows Server 2019 Editions


Microsoft Windows Server 2016 Editions



Microsoft ended mainstream support for all versions of Windows Server 2012 and Windows Server 2012 R2—including Hyper-V Server 2012 and Hyper-V Server 2012 R2, and Core Editions—on October 10, 2023.

Firewall Requirements

Tunnel ports (for example, 8400 and 8403) must be opened in the security group for the instance to enable installation of the VSA package to GCP instances and communication with the CommServe system.

If you deploy a CommServe host in an environment with firewalls, create a persistent route from the CommServe host to the access node, as documented in Setting Up a Network Gateway Connection Using a Predefined Network Topology.

If a firewall access node is installed, configure Internet options for the firewall access node machine. On the HTTP Proxy tab of the Internet Options dialog box, enter the user name and password for the firewall access node machine, using only the user name and not including the domain name with the user name.

To access GCP backup and restore services, incorporate the following URLs in your firewall or access node settings:







Configuring a Firewall to Install the VSA Package on a Cloud VM or Instance

To deploy the access node or MediaAgent on a cloud VM or instance when other components (such as the CommServe host) are on premises <Category>, configure a firewall for an access node in the cloud between the on premises components and the cloud VM or instance.

Hardware Specifications

For information about hardware requirements for the Virtual Server Agent, see Hardware Specifications for Virtual Server Agent.


Certain third-party software and service releases (together, "Releases") may not be supported by Commvault. You are solely responsible for ensuring Commvault’s products and services are compatible with any such Releases.