Creating an access node for an Azure hypervisor

If you plan to use your own access node for configuring Azure VM backups, you must first create an access node by following the steps below. To create additional access nodes, use the Azure hypervisor configuration wizard, which guides you through the process.

Considerations

• Before deploying the Azure CustomTemplate, verify that you have the contributor role in the selected subscription.

  For more information about custom roles, see Role and Permission Requirements for Protecting Azure Resources.

• Keep the following details ready:

  • For Commvault software, obtain the Commserve hostname and Commserve name from the MSP.

  • For Commvault SaaS, obtain the Commvault Gateway URL and Auth code.

Procedure

1. From the Command Center navigation pane, go to Manage > Environment > Infrastructure.

2. Click the Access nodes tile.

3. Click Add.

4. From the Vendor list, select Microsoft Azure.

5. From the Deployment type list, verify that the Vendor Native Deployment is selected.

6. From the Platform list, select the operation system of the access node.

7. For Deploy Custom Template, click Deploy the Custom Template or, click Copy Link and paste the URL in a browser.

8. Log on to the Microsoft Azure portal.

9. Under Project details, enter the following details:

   1. From the Subscription list, select the subscription.

   2. From the Resource group list, select the resource group in the selected subscription.

10. Under Instance details, enter the following details:

    1. From the Resource group region list, verify the correct region of the resource group is selected. By default, this field is auto-filled when the resource group is selected.

    2. In the Virtual Machine name, enter a name for the virtual machine (access node).

    3. From the VM Region list, select the region where your VM is present.

    4. For Virtual machine size, specify the VM size that you want to provision.

    5. In the Username box, enter a user name with administrator role that can access the VM.

    6. In the Password and Confirm password boxes, set the password to access the VM.

    7. Click Next.

11. On the Virtual Machine Settings tab, do the following:

    1. From the Virtual Network list, select a virtual network that provides connectivity to the Azure resources that you want to protect.

    2. From the Subnet list, select a subnet.

    3. If an external connectivity is required, select the Assign Public IP check box.

       If you use private networking (recommended), ensure that routing and firewall rules allow required outbound connectivity.

    4. For Network Security Group (NSG), select or assign a network security group that:

       • Allows outbound connectivity to Commvault SaaS endpoints.

       • Allows required Azure service communication.

       • Restricts unnecessary inbound access.

       Important

       Ensure that the selected NSG allows communication with the Commvault Gateway URL.

    5. If you want associated resources to be removed automatically when the VM is deleted, select the Delete resources when VM is deleted check box.

    6. Choose the authentication method for the access node:

       • Azure Managed Identity: If you want to authenticate the access node with Azure services, follow the steps below:

         1. Add a user assigned managed identity to the access node.

         2. Ensure that the identity has the required Azure role permissions.

         3. Grant permissions at the appropriate scope (subscription or resource group level).

         Note

         You can assign or modify managed identities for the virtual machine later if needed.

       • Azure Application and Secret: If you plan to use an Azure application and secret for authentication, you can skip this step.

    7. Click Next.

12. On the Commvault Configuration tab, do the following:

    • If you are creating an access node using Commvault software, enter the following:

      • CommServe Hostname

      • CommServe Name

      • Commvault AuthCode

    • If you are creating an access node using Commvault SaaS, enter the following:

      • Commvault AuthCode

      • Commvault Gateway URL

      Note

      Leave remaining fields blank on the Commvault Configuration tab.

    • Click Next.

13. On the Review + create tab, review the information, and then click Create.

    Wait for the access node to be created and do not switch to another application or browser until the access node is created.