# Configure Azure Blob Storage

Create an Azure Blob Storage container that will contain the blobs and data you want to manage and back up.

## Before You Begin

- If you are an MSP and you want your tenant administrators to configure Azure Blob Storage, see Managed Service Provider Configuration.

- Configure access to Azure resources.

## Navigate to Service Catalog

1. From the Command Center navigation pane, go to Explore > Service catalog.

## Choose Azure Blob Storage

1. On the Object Storage tile, click Configure.

   The File & Object Trial message appears.

2. Click Continue.

3. Select Azure Blob.

4. Click Next.

## Configure Permissions

1. You can choose to use either the hosted infrastructure provided by Commvault or your own configured access nodes for backups.

   - Use hosted infrastructure: Select this option to use the hosted infrastructure provided by Commvault for backups. Then, select the region where the Azure Blob Storage data is hosted, and then click Next.

   - Use your access nodes for backups: Select this option to use an existing access node or create your own access nodes for performing backups, and then click Next.

     When using your own access nodes, ensure that the Cloud Apps package is installed for object storage operations.

     Note

     - If the MSP has configured a workload resource pool in a single region and no access node is configured by the tenant, this step will not appear. Access nodes configured in the workload resource pool are selected automatically.
     - If the Azure storage account has Enabled from selected virtual networks and IP addresses selected in Security + networking > Networking settings and also has a private endpoint enabled, add the access node's VNet/Subnet to the storage account's allowed virtual networks list.

2. From the Credential list, select an existing credential or create a new credential.

   - If you have an existing Azure app, add a new credential.

     Steps to add a new credential

     1. Beside Credential, click the add button .

        The Add credential dialog box appears.

     2. From the Account type list, verify that Cloud Account is selected.

     3. From the Vendor type list, verify that Microsoft Azure is selected.

     4. In Credential name, enter a descriptive name for the credentials.

     5. In Directory (tenant) ID, enter the tenant ID for the Azure account.

     6. In Application (client) ID, enter application ID for the tenant.

     7. In Application secret, enter the secret key value that is generated for the application.

     8. From the Environment list, verify that AzureCloud is selected.

     9. To view and modify Azure endpoint URLs that Commvault will use to connect to Azure during Azure Blob Storage onboarding, enable the Show endpoints toggle key. If your environment requires custom endpoints (for example, Azure Government or other sovereign cloud environments), you can modify the following endpoints:

        - Authentication endpoint: Used to verify identity and obtain access tokens from Azure.

        - Storage endpoint: Used to access Azure storage resources.

        - Management endpoint: Used to communicate with Azure Resource Manager (ARM) for managing object storage data.

     10. In Description, enter a description of the credentials.

     11. From the Key Rotation Reminder Interval list, select a suitable interval to receive reminder to rotate the credential.

     12. Click Save.

   - If you want to add a new Azure application and a credential, follow the steps below.

     Steps to add a new Azure application

     1. Beside Credential, click the add button .

        The Add credential dialog box appears.

     2. From the Account type list, verify that Cloud Account is selected.

     3. From the Vendor type list, verify that Microsoft Azure is selected.

     4. In Credential name, enter a descriptive name for the credentials.

     5. Under Application ID, expand How to get your Application ID, on the Create a new application tab, do the following:

        1. Under step 3, click the link to open Azure Cloud Shell.

        2. Follow the instructions that appear and select Bash or PowerShell.

        3. Return to the Command Center window, in the Application name box, enter a name for the Azure application.

        4. In the Subscription ID box, enter your Azure subscription ID. Click Get Subscription ID if you need to get the ID using the command.

        5. Copy the PowerShell or Bash commands to deploy the application in the selected subscription and get the application details.

           If you have the application ID, tenant ID, and secret key, enter them. Otherwise, run the commands to get these details.

        6. At the Azure Cloud Shell command prompt, paste the commands.

        The commands run to create a new Azure application, and then the Tenant ID, Application ID, and Application secret for the application are displayed.

        1. Copy Tenant ID, Application ID, and Application Secret from the shell.

     6. Switch to Add credentials dialog box, and then paste the Tenant ID, Application ID, and Application secret to create the credential.

     7. From the Environment list, verify that AzureCloud is selected.

     8. To view and modify Azure endpoint URLs that Commvault will use to connect to Azure during VM onboarding, enable the Show endpoints toggle key. If your environment requires custom endpoints (for example, Azure Government or other sovereign cloud environments), you can modify the following endpoints:

        - Authentication endpoint: Used to verify identity and obtain access tokens from Azure.

        - Storage endpoint: Used to access Azure storage resources.

        - Management endpoint: Used to communicate with Azure Resource Manager (ARM) for managing object storage data.

     9. In Description, enter a description of the credentials.

     10. From the Key Rotation Reminder Interval list, select a suitable interval to receive reminder to rotate the credential.

     11. Click Save.

3. If you want to assign required roles to your Azure application, follow the steps below.

   Steps to assign a role to the Azure application

   1. Click Assign Role.

   2. In the Assign role dialog box, do the following:

      1. Copy the PowerShell or Bash commands into a text editor.

      2. Replace ROLE_NAME with the name of your role.

      3. Click the link to open Azure Cloud Shell.

   3. Follow the instructions that appear and select Bash or PowerShell.

   4. At the Azure Cloud Shell command prompt, paste the commands.

      The commands runs to assign the required role.

   5. Switch to Assign role dialog box, and then click Close.

4. To define a custom role, follow the steps below.

   Steps to define a custom role

   1. Log on to the public Azure portal with service administrator credentials.

   2. Use CommvaultAzureBlobAndADLS.json and assign it to back up Azure Blob Storage.

      For more information about creating a custom role, go to Custom roles for Azure resources on the Microsoft Azure documentation website.

   3. On the Access Control (IAM) tab, click Add, and then select Add role assignment.

      The Add role assignment pane appears.

   4. Specify the following:

      1. From the Role list, select the custom role that you created.

      2. From the Assign access to list, select User, group, or service principal.

      3. In the Select box, enter the application name, and then select the application.

   5. Click Save.

5. Click Next.

## Access Node

1. Do any of the following:

   - For Commvault hosted infrastructure, select the region where the backup data is available.

   - For backups using your own access nodes, select the existing access node or create your own access nodes.

2. Click Next.

## Plan

1. Select an existing backup plan or create a new one:

   Commvault SaaS

   Select an existing backup plan or create a new backup plan to associate with Azure Blob Storage.

   If the region for hosted infrastructure is selected, only backup plans associated with that region are displayed.

   Commvault software

   Select an existing backup plan or create a new backup plan to associate with Azure Blob Storage.

2. Click Next.

## Cloud Account

1. Select an existing cloud account or create a new one:

   Commvault SaaS

   Select an existing cloud account or create a new one by selecting one of the following options:

   - Custom configuration:
     If you prefer to create an Azure application manually or if you already have an Azure application that you use for Commvault, use the custom configuration wizard.

   - Express configuration using OAuth:
     If you want Commvault to create an Azure application for you, use the express configuration wizard.

   Commvault software

   Select an existing cloud account or create a new cloud account for object storage.

2. Click Next.

## Backup Content

1. Select the backup content you want to protect, such as file shares and files.

2. To automatically disable backups for instances that do not match rules, select the Automatically disable backup for instances no longer matching the rules check box.

## Summary

1. Review your selections, and then click Finish to complete the configuration.

×

Loading...