Configuring Backups for Azure Virtual Machines

To configure backups for Azure virtual machines, you can use either the express configuration wizard or the custom configuration wizard.

Configuring Backups Using the Express Configuration Wizard

The express configuration wizard for configuring Azure VM backups performs the necessary steps in the Azure portal for you, so you don't have to switch back and forth between Commvault and the Azure portal. The configuration wizard guides you through the configuration process, which includes creating any new entities that are needed, such as a plan, a hypervisor, and a VM group.

Disable MFA

In the configuration wizard, you will use an Azure user account that has the Owner role for the tenant subscription. However, to use the express configuration wizard, you must temporarily disable multi-factor authentication (MFA) for that user account. After you complete the wizard, enable MFA again.

Start the Configuration Wizard

1. From the navigation pane, go to Protect > Virtualization.

   The Virtual machines page appears.

2. In the upper-right area of the page, click Add hypervisor.

   The Configure Hypervisor page appears.

3. Select Azure VM.

4. Click Next.

   The Configure Microsoft Azure Hypervisor page of the configuration wizard appears.

5. Select Express configuration.

   Requirements for the express configuration wizard appear.

6. Review the requirements.

7. Click Next.

   The Add Azure App Requirements page of the configuration wizard appears.

8. Enter the credentials of a user that has the Owner role for the tenant subscription.

9. Confirm that MFA is disabled on the Azure app by selecting the Multi-Factor Authentication (MFA) is turned off check box.

10. Click Next.

    The Configure Azure App page of the configuration wizard appears, stating that the Azure app is created and validated successfully.

Configure Azure App

• Click Next.

  The Authorize Azure App page of the configuration wizard appears.

Authorize Azure App

1. Click Sign In with Microsoft.

   A browser tab opens with the Microsoft Pick an account dialog box.

2. Enter the credentials for the tenant.

   The Microsoft Permissions requested dialog box appears.

3. Click Accept.

   The browser tab closes, and the Authorize Azure App page of the configuration wizard appears, stating that the Azure app is authorized successfully.

4. Click Next.

   The Create Credentials page of the configuration wizard appears.

Create Credentials

1. To specify a name and description for the credential entity that will be created, enter those values.

   If you do not enter values, the credential entity is created with the timestamp as the name.

2. Click Next.

   The Select Subscription page of the configuration wizard appears.

Select Subscription

1. From the Subscription ID list, select a subscription that the user has the Owner role for.

2. Confirm ownership of the subscription by selecting the User has Owner role for the selected subscription check box.

   The Assign Role page of the configuration wizard appears, stating that a custom Commvault role will be created in the tenant environment.

Assign Role

1. Click Next.

   The Add Hypervisor page of the configuration wizard appears.

Add Hypervisor

1. In Hypervisor name, enter a descriptive name for the hypervisor.

2. From the Access node list, select the access node to use.

   The Add VM Group page of the configuration wizard appears.

Add VM Group

A VM group is a set of VMs that you want to back up with the same settings.

You can add content to the VM group by using rules that auto-discover content, by selecting specific clusters, and by other ways. When you first create the VM group, you can add a cluster that is relatively small, and then later you can update the VM group by adding more content.

1. In Name, enter a descriptive name for the VM group.

2. To create rules that auto-discover and select clusters to back up, do the following:

   1. Click Add, and then select Rules.

      The Add rule dialog box appears.

   2. From the list, select the type of rule to create:

   3. Browse: Select specific clusters. (Selecting this option changes the Add rule dialog box to the Add content dialog box.)

   4. Power state: Select clusters based on whether they are powered on or off.

   5. Region: Select clusters based on the region that they reside in.

   6. Resource group: Select VMs based on the Azure resource group they are in.

   7. Storage account: Select VMs based on the Azure storage account they are in.

   8. Tag name: Select clusters based on the names of tags that are assigned to them. For example, to select clusters that have a tag name of "Department", enter Tag name | Equals | Department.

   9. Tag value: Select clusters based on the values of tags that are assigned to them. For example, to select VMs that have a tag value of "Finance", enter Tag value | Equals | Finance.

   10. Virtual machine name or pattern: Select VMs based on their names. For example, to select VMs that have a name that includes "east", enter Virtual machine name or pattern | Contains | east.

   11. Click Save.

3. To select clusters in other ways, do the following:

   1. Click Add, and then select Content.

      The Add content dialog box appears.

   2. From the Browse and select VMs list, select one of the following:

   3. VMs: Select specific VMs.

   4. Resource groups: Backs up the VMs that are in the resource groups you select.

   5. Regions: Backs up the VMs that are in the regions you select.

   6. Storage account: Backs up the VMs that are in the storage accounts you select.

   7. Tags: Backs up the VMs that contain the tags you select.

   8. Click Save.

4. To see the clusters that are selected for the VM group, click the Preview button.

5. To use IntelliSnap to back up the VM group, move the IntelliSnap toggle key to the right.

6. From the Plan list, select the plan for the VM group.

7. Click Next.

   The Summary page of the configuration wizard appears.

Summary

1. Review the summary.

2. Click Finish.

Enable MFA

• Enable MFA for the Azure user account.

Configuring Backups Using the Custom Configuration Wizard

Use the custom configuration wizard for configuring Azure VM backups if you don't want to temporarily disable multi-factor authentication (MFA). The configuration wizard guides you through the configuration process, which includes creating any new entities that are needed, such as a plan, a hypervisor, and a VM group.

Start the Configuration Wizard

1. From the navigation pane, go to Protect > Virtualization.

   The Virtual machines page appears.

2. In the upper-right area of the page, click Add hypervisor.

   The Configure Hypervisor page appears.

3. Select Azure VM.

4. Click Next.

   The Configure Microsoft Azure Hypervisor page of the configuration wizard appears.

5. Select Custom configuration.

6. Click Next.

   The Add Hypervisor page of the configuration wizard appears.

Add Hypervisor

1. In Hypervisor name, enter a descriptive name for the hypervisor.

2. To use managed identity authentication, which is more secure than authentication with Azure Active Directory, move the Connect using managed identities for Azure resources toggle key to the right.

3. In Subscription ID, enter the subscription ID for the Azure account.

4. For Credentials, select existing credentials or create new credentials.

   Steps to create credentials

   1. Click the add button .

      The Add credential dialog box appears.

   2. In Credential name, enter a descriptive name for the credentials.

   3. In Tenant ID, enter the tenant ID for the Azure account.

   4. In Application ID, enter the application ID for the tenant.

   5. In Application secret, enter the secret key for the application.

   6. From the Environment list, select the Azure environment to use the credential for.

   7. To modify the endpoint URLs, move the Show endpoints toggle key to the right, and then modify the URLs.

   8. In Description, enter a description for the credential.

5. From the Access node list, select the access node to use.

6. Click Next.

   The Add VM Group page of the configuration wizard appears.

Add VM Group

A VM group is a set of VMs that you want to back up with the same settings.

You can add content to the VM group by using rules that auto-discover content, by selecting specific clusters, and by other ways. When you first create the VM group, you can add a cluster that is relatively small, and then later you can update the VM group by adding more content.

1. In Name, enter a descriptive name for the VM group.

2. To create rules that auto-discover and select clusters to back up, do the following:

   1. Click Add, and then select Rules.

      The Add rule dialog box appears.

   2. From the list, select the type of rule to create:

   3. Browse: Select specific clusters. (Selecting this option changes the Add rule dialog box to the Add content dialog box.)

   4. Power state: Select clusters based on whether they are powered on or off.

   5. Region: Select clusters based on the region that they reside in.

   6. Resource group: Select VMs based on the Azure resource group they are in.

   7. Storage account: Select VMs based on the Azure storage account they are in.

   8. Tag name: Select clusters based on the names of tags that are assigned to them. For example, to select clusters that have a tag name of "Department", enter Tag name | Equals | Department.

   9. Tag value: Select clusters based on the values of tags that are assigned to them. For example, to select VMs that have a tag value of "Finance", enter Tag value | Equals | Finance.

   10. Virtual machine name or pattern: Select VMs based on their names. For example, to select VMs that have a name that includes "east", enter Virtual machine name or pattern | Contains | east.

   11. Click Save.

3. To select clusters in other ways, do the following:

   1. Click Add, and then select Content.

      The Add content dialog box appears.

   2. From the Browse and select VMs list, select one of the following:

   3. VMs: Select specific VMs.

   4. Resource groups: Backs up the VMs that are in the resource groups you select.

   5. Regions: Backs up the VMs that are in the regions you select.

   6. Storage account: Backs up the VMs that are in the storage accounts you select.

   7. Tags: Backs up the VMs that contain the tags you select.

   8. Click Save.

4. To see the clusters that are selected for the VM group, click the Preview button.

5. To use IntelliSnap to back up the VM group, move the IntelliSnap toggle key to the right.

6. Click Next.

   The Summary page of the configuration wizard appears.

Summary

1. Review the summary.

2. Click Finish.