Write once read many (WORM) describes a data storage media in which information, once written, cannot be modified. It ensures the highest level of integrity and data security by eliminating the risk of important data from being deleted or modified. Commvault provides the WORM feature that prevents the accidental deletion of data that is not qualified for aging.
Note
Once applied, the WORM functionality is irreversible.
Commvault offers two types of WORM functionality: Storage lock and Compliance lock.
Storage Lock
You can use the Storage lock option for both deduplicated and non-deduplicated data in cloud environments. Object lock is supported for Commvault supported vendors.
Storage lock provides data security at the physical (hardware) level.
Notes
-
Do not enable Storage lock at the backend systems or applications, other than those specified in Configuring WORM Storage Lock.
-
If you enable the Storage lock, the Compliance lock is automatically enabled. Also, you can enable only the Compliance lock.
-
To improve storage reclamation efficiency, WORM storage optimization is enabled by default. This feature uses micro-pruning to reclaim eligible data at the job level while maintaining WORM immutability protections.
-
Extended retention isn't supported for deduplicated WORM storage pools. You can't configure different extended retention periods for dependent copies. The retention configured for the Global Storage Pool applies to the dependent copies.
Extended retention is supported for non-deduplicated WORM storage pools, including configurations that use different retention periods.
If you require different retention periods with deduplicated WORM storage, create separate storage pools and copies for each retention period. For more information, see Extended Retention Rules.
Compliance Lock
Compliance lock is a security control that provides protection from destructive tasks such as deleting backups, storage, apps, servers, and backup destination copies, and reducing retention for cloud storage vendors within the CommCell Console interface. You can enable the Compliance lock at the storage level, and all associated backup destination copies will be locked and protected.
Compliance lock provides data security only at the software level (within the Commvault user interface) by protecting data against rogue users that use compromised credentials.
The combination of Storage lock and Compliance lock features results in immutable backups that neither the storage administrator nor the Commvault administrator can delete.