Verify that your environment meets the requirements for protecting Azure Stack Hub VMs with Commvault.
Access to Azure Stack Hub Resources
You must configure access to the Azure Stack Hub resources that you want Commvault to protect. For information, see Configuring Access to Azure Resources.
Access Nodes
You must have at least 1 access node for Azure Stack Hub. An access node is a server that has the Virtual Server Agent (VSA) package installed, to enable backup and restore operations. For instructions to add a hypervisor and deploy an access node, see Configuring Backups for Azure Stack Hub.
For best results, deploy access nodes on virtual machines in the Azure Stack Hub cloud. For faster backups, deploy access nodes on an Azure Stack Hub VM that is compute-optimized.
If you have existing access nodes that are used to support Azure Resource Manager, use different access nodes for Azure Stack Hub.
- 
Azure Stack Hub access nodes must meet the following requirements: - 
Must run one of the following operating systems: - 
Microsoft Windows Server 2025 x64 
- 
Microsoft Windows Server 2022 x64 
- 
Microsoft Windows Server 2019 x64 
- 
Microsoft Windows Server 2016 x64 
 
- 
- 
Must have a minimum of 100 GB disk space. 
- 
Must have a minimum of 4 GB RAM, beyond the requirements of the operating system and any other running applications. For more information, see Sizes for virtual machines in Azure Stack Hub in the Microsoft documentation. 
- 
Must have Azure PowerShell installed and Azure Stack Hub tools downloaded. 
- 
If deployed on a virtual machine in Azure Stack Hub, must have a public IP address. 
 
- 
Azure Stack Hub Version
Azure Stack Hub 2002 and more recent versions are supported.
Guest Operating Systems
Virtual machines being backed up can have any of the guest operating systems that are supported by the Azure Stack Hub platform.
Network Gateway Requirements
If you deploy a CommServe host in an environment with firewalls, create a persistent route from the CommServe host to the VSA proxy, as documented in Setting Up the Commvault Network Gateway. Specify the RESTRICTED setting for connections from the CommServe host to the VSA proxy (step 3 under If you chose not to use predefined network topologies) and the BLOCKED setting in the CommServe node settings for the proxy (step 9).
HTTP/HTTPS Proxy Requirements
You can access the internet by configuring the HTTP/HTTPS proxy to access Azure Stack Hub service endpoints. See, Configuring an HTTP Proxy for a Server.
Configuring a Firewall to Install the VSA
To deploy Commvault software to an access node, when other components (such as the CommServer) are on premises, configure a firewall for an access node in the cloud between the on-premises components and the cloud VM or instance.
Storage Requirements
Commvault requires that Azure Stack Hub access nodes meet the following minimum specification:
| Components | Extra Small | Small | Medium | 
|---|---|---|---|
| CPU/RAM | 2 vCPUs/16 GiB | 4 vCPUs/24 GB | 8 vCPUs/32 GB | 
| Front End Terabytes (FET) | 110 TiB | 25 TiB | 50 TB | 
If multiple proxies are deployed in the Azure Stack Hub cloud, a two-way firewall configuration needs to be set up to enable proxies to communicate with each other. This can be achieved by creating two client groups, adding all Azure Stack Hub VSA proxies under both client groups, and creating a two-way network topology that includes the two client groups.