Creating a Microsoft Azure Client

An Azure virtualization client manages data protection operations for an Azure subscription. You must create Azure clients on client computers installed with the Virtual Server Agent.

If you have multiple Azure subscriptions, create a virtualization client for each subscription.

An Azure virtualization client is also required to support conversion of virtual machines to Azure.

Before You Begin

Azure Resource Manager Deployments

There are two methods for Azure Resource Manager deployment:

• Traditional method of deployment with Azure Active Directory where you must set up the application and tenant. With this option during client configuration, you must provide the following information:

  • Subscription ID

  • Tenant ID

  • Application ID and password

  Refer to Configure Access to Azure Resources to complete this type of deployment.

• Managed Identity authentication with Azure Active Directory. This is a more secure method of deployment. Using this method ensures that your Azure subscription is accessed only from authorized Managed Identity-enabled virtual machines. In addition, the process of creating an Azure client is more simplified; you will only need the Subscription ID, you will not need the Tenant ID, Application ID and Application Password to create a client.

  Refer to Setting Up Managed Identity Authentication for Azure Resource Manager to complete this type of deployment.

Azure Endpoints

To support backups and restores that are not available through the Azure global endpoint, create the AzureRegion additional setting on the VSA access node and specify the additional endpoints as values.

For instructions on adding additional settings from the CommCell Console, see Add or Modify an Additional Setting.

Procedure

1. From the CommCell Browser, right-click Client Computers and select New Client > Virtualization > Azure.

2. On the Create Azure Client dialog, add the following:

   • Client Name: Enter a descriptive name for the virtualization client.

   • Subscription ID: Enter the subscription ID for your Azure account.

   • For traditional deployment with Azure Active Directory, add the following:

     • Tenant ID: Enter the tenant ID associated with the virtualization client.

     • Application ID: Enter the application ID associated with the tenant.

     • Application Password: Enter the password for the application in this box and in the Application Confirm Password box.

   • For Managed Identity authentication deployment with Azure Active Directory, add the following:

     • Connect using Managed Identity: Enable this option.

3. From the Storage Policy list, select a storage policy to associate with the virtualization client.

   The storage policy you select is also associated with the default subclient that is created automatically for the virtualization client.

4. Add VSA proxies to be used for Azure operations:

   1. Next to Proxies, click Add.

   2. In the Select Clients/Client Groups dialog box, select one or more VSA proxies.

      Note

      For Managed Identity Authentication deployment, you must select Managed Identity-enabled proxies to ensure that backup and restore operations are successful.

   3. Click OK.

5. Click OK to create the virtualization client.

6. Refresh Azure information:

   1. Go to Client Computers > Azure Client > Virtual Server, right-click Azure Resource Manager, and then click All Tasks > Refresh Datacenters.

   2. In the Refresh Datacenters dialog box, refresh or discover virtual machines:

      • To refresh the status of Azure virtual machines, select Refresh VM Status.

      • To discover all virtual machines and add them to the CommCell Console as clients, select Discover VMs.

7. Click OK.

   Depending on your selections, this operation might take some time.