Deploy an access node for Azure Virtual Machines

To use self-managed infrastructure for Azure Virtual Machines protection, deploy an access node. The access node performs backup and restore operations for Azure resources and communicates with Azure services and Commvault.

You don't need to deploy an access node if you use Commvault-hosted infrastructure.

For access node sizing, capacity planning, operating system requirements, and general access node guidance, see Understand and create access nodes.

Prerequisites

You must have the following:

• Contributor permissions for the Azure subscription where you will deploy the access node.

• A virtual network and subnet that provide connectivity to the Azure resources that you want to protect.

• The authorization code and connection information that are required to register the access node. You receive this information from Commvault or your Commvault service provider.

Procedure

Create the VM

1. From the Command Center navigation pane, go to Manage > Infrastructure.

2. Click the Access nodes tile.

3. Click Add.

4. From the Vendor list, select Microsoft Azure.

5. Verify that Vendor Native Deployment is selected.

6. Select the operating system for the access node.

7. Click Deploy the Custom Template.

   You can also click Copy Link and open the deployment URL in a browser.

8. In Azure, select the subscription and resource group where you want to deploy the access node.

Configure the VM

1. Enter a name for the access node VM.

2. Select the Azure region where the VM will run.

3. Select the VM size.

4. Enter the administrator user name and password.

5. Click Next.

Configure networking

Select networking settings that provide connectivity to the Azure resources that you want to protect.

1. Select the virtual network and subnet.

2. If external connectivity is required, enable Assign Public IP.

   If you use private networking, verify that routing and firewall rules allow communication with Azure services and Commvault.

3. Select the network security group that will be associated with the access node.

   The network security group must allow communication with Azure services and Commvault.

   Important

   Verify that the network security group allows communication with the Commvault gateway URL.

4. Optional: Enable Delete resources when VM is deleted.

5. Click Next.

Configure authentication

If you plan to use managed identity authentication for Azure Virtual Machines protection, assign the managed identity.

1. Select the authentication method to use:

   • Azure managed identity:

     1. Assign a user-assigned managed identity to the VM.

     2. Grant the required Azure roles to the managed identity.

     3. Assign permissions at the appropriate scope.

   • Azure application and secret: Continue to the next section.

2. Click Next.

Configure connectivity

1. Enter the required connection information.

   Commvault SaaS

   • Commvault gateway URL

   • Authorization code

   Commvault software

   • Control plane hostname

   • Control plane name

   • Authorization code

2. Review the configuration and create the VM.

Verify the deployment

Confirm that the access node:

• Appears in the access node list

• Has a healthy status

• Can communicate with Azure services

• Can communicate with Commvault