Skip to main content
Solved

Commvault API Security

  • February 20, 2025
  • 1 reply
  • 61 views

Forum|alt.badge.img+5

Hello,

Current Infra CommCell 11.36.41 Linux on COmmserve & HSX

I'm going to get closer to Commvault to have an answer but in the meantime I want to share my questions here.


I am working on an interested project to :

  • add redundancy on the dedicated Command Center (HA) 
  • Allow access to end user teams to perform cross restore tests etc …

I have some requirements from SOC  :

  • the API endpoint must be protected by API Managet like TYK
  • the API calls must be secured by MFA

Does Commvault support the use of an API Gateway like TYK ?
Does anyone now if we can implement MFA over API ?

Thanks !

 

Best answer by Jacek Piechucki

“ Does anyone now if we can implement MFA over API ?”

Yes, you can. It is enough that the user you choose to send rest requests is using MFA.

With PIN it is simple.

User has to execute /Login first to receive the 2nd factor auth, then executes the /Login providing the password+PIN.

 

To answer the first question, we’ll need more context.

1 reply

“ Does anyone now if we can implement MFA over API ?”

Yes, you can. It is enough that the user you choose to send rest requests is using MFA.

With PIN it is simple.

User has to execute /Login first to receive the 2nd factor auth, then executes the /Login providing the password+PIN.

 

To answer the first question, we’ll need more context.