Self-Hosted Q&A

Hi:I would like to to know if the RPO and RTO data shown in the reports (https://cloud.commvault.com/commandcenter/#/softwareStore/10370Command Center) from Command Center are generated based in real data (I mean, based on true recovery times from the customer) or are calculated using AI or other ways.  I will appreciate more details and if someone has experience with this report, and also if the report was useful.Thanks,Paul

Hello,I have an HSX storage increased a lot from June to JulyThe storage is a destination for:primary copies secondary copies from another HSX secondary copy for cloud copyWhat is the best way to determine what caused this growth?I tried multiple report but I didn’t find any cause.the capacity license is still the same between June and JulyThanks !

I have a interesting issue.  My AUX copy streams are capping out at 180 GB/h despite having multiple 10 GB WAN links.  I see this issue on a Storage Policy that has dedupe and compression disabled.(due to large unique data being backed up).   Does anyone by chance have a storage policy with no dedupe or compression?   I am really curious to know what speeds you are seeing on your AUX copy streams.   I feel like these should be able to go faster, but having a hard time convincing support that there is something in CV that is restricting it.We have set the nNumPipelineBuffers set to 900 already.  Our Dedupe AUX copies run amazing since there are so many streams for it to work with. 

Can someone confirm whether when staging the DB the Command Center isn’t usable by design? The Console works but I can’t seem to get the web UI to load (Please wait while our servers start up. This may take a few minutes.). curl returns the fact it’s running. I replaced the signed certs and all that but it seems it just doesn’t function so I’m wondering if that is expected behavior.thanks

We currently have a self-hosted Commvault environment running version 11.36.The CommServe and MediaAgent are installed on the same physical Windows server. The same server also hosts the existing MediaAgent components, including the DDB, Index Cache, Disk Libraries, Mount Paths, Data Paths.The customer’s main requirements are:Minimum operational risk Minimum downtime No unnecessary CommServe name or IP updates on the clients The existing physical server must remain in service as the MediaAgent after the separationOur planned approach is to first upgrade the existing combined CommServe/MediaAgent server from 11.36 to the latest approved 11.40 Maintenance Release.The upgrade and the separation will be performed as two separate changes, with a stabilization and validation period between them.Planned Final ArchitectureNew virtual server:CommServe only Receives the original CommServe hostname Receives the original CommServe IP addressExisting physical server:Remains as the MediaAgent Receiv

Hi together,In Veeam, there is a feature called "Secure Backup" which is a service for DRP audits (backups recoverability is tested). Does anyone know this feature and can tell me if there is a similar function in CommVault?I have not found one yet (Version 11.24.94).thanks in advance for your answers and best regards Pascal

Just wanted to validate this...I’ve been chatting with Arlie and trying to get a proper “list of steps” to add a new mount point (in an existing library) to media agent “A” and then to share that with Media agent “B”. All Media Agents are Windows. It seems the steps (not all from Arlie) are:Media Agent A: Add storage and mount drive (say L:\). Format Disk as GPT, and 64KB allocation. Media Agent A: “Share” L:\… using a service account as “browse/read/write”. The share is now like “\\A\sharename” Media agent B: Map that Share as UNC (“\\A\sharename”) as drive L:\, using the same service account. I presume also set it to “auto connect at sign-in” so the mount point does not go away on reboot. In Java console, choose storage library → Add Mount Path. Choose media agent A and drive L:\, Pick mount path and choose “Share” with Media Agent B and make it read/write. Looks like I need to input the service account/credentials here too. Additionally, I may need to select “Transport type: Regular

11.40 code - I have ran into an issue where the local break glass account is unable to be used when SAML is enabled. This apparently is due to the fact that the email associated with the local account is in fact in the IdP and once it detects that, there’s no way to “cancel” the redirect. Is there no way to disable SAML for specific accounts regardless of whether the email account exists in the external IdP?Since the email is a required field for all accounts and having a valid email for such an account makes sense BUT you have to have it syncing in order to actually authenticate and manage that mailbox, seems like a catch-22. Security prefers SSO. Plus if the external provider is unavailable for whatever reason, nobody, even the break glass account can login.I do have a case open with this but so far we haven’t found a solution.

Hello All;I found this topis: An I have similar problem in with Data Domain, in the logs I found taht StorageAcceleratorAutoDisabledUntiland i have a question:Where I can found exactly this keys on Linux and Windows systems? MediaAgent/StorageAcceleratorAutoDisabledUntilMediaAgent/StorageAcceleratorConsecutiveFailureCount I have installed on clients Media Agent and client can communicate with DD.

Hi All, what is the best way to backup windows server with dfs replication via windows file agent ? 

Over the weekend, we started seeing errors in SharePoint online backups for all the tenants we backup with the error: “ Failed to validate any of the configured Azure Apps against the SharePoint Tenant Admin site. 1) Please verify the SharePoint Tenant Admin Url. 2) Please check the credentials and permissions for the configured apps. 3) Please ensure Custom App authentication is enabled on the SharePoint tenant.<br/>Source: xx, Process: SharePoint”From logs on the Access Node:CheckOffice365CredModern - Office365 app credentials incorrect : CheckOffice365CredModern - Error is: The remote server returned an error: (401) Unauthorized. What we have doneVerified the Azure App secrets are not expired Verified DisableCustomAppAuthentication on the tenant is set to false Verified Azure app API permissions: Microsoft Graph:  Application.ReadWrite.All, Application.ReadWrite.OwnedBy,  Directory.Read.All, Group.ReadWrite.All, Policy.Read.All, RoleManagement.ReadWrite.Directory, Sites.FullCo

Hi guys,If I want to achieve the best dedup efficiancy, I have to set the Max Open Files in the Commvault subclient(s) of an Oracle Instance to 1.Otherwise, RMAN will multiplex the number of files allowed into one channel / stream, which leads to poor dedupe ratio for the backups of this databases.Is there an option to influence the parameter of default subclient during instance creation when a new instance is discovered ?Setting the amount of streams and restricting the MaxOpenFiles might be beneficial when adding larger amount of Instances to the environment and where disk or cloud is the primary backup destination.rgdsKlaus

We are planning an upgrade from 11.32 to 11.36. With the deprecation of the web console, does this mean that the legacy Compliance Search (not the CommandCenter version), will disappear? We have users still using that, and don’t see many benefits to the CommandCenter version.

Hello Team,Support Portal is unavailable, again. It always seems to happen whenever I am in the middle of a Change that isn’t going to plan. I am beginning to take it personally :) 

How to produce a Restore report specifically source media is TAPE?  Please note that the SP has the Disk primary and Tape secondary.  Attempted to produce one but unfortunately 'source' media is always disk. 

Hi,what is the best way to allow a user, that created a credential vault, to add further user or groups to this new created vault ?the user is per default, not allowed to change the security settings of his own vault entry.the vault should be made available to other user after it has been created ba a restricted user.the only option I found to achieve this, is to grant the global → change security settings permission on the commcell level.But this will allow the user to change other objects permissions as well, what is not desired.(CommCell is running with CV11.40)rgdsKlaus 

Hi everyone,I am looking for advice in associating VM's on a shared vCenter to different companies. We have a big MSP vCenter where a lot of our customers have their VM environment that we protect with Commvault.We currently use server groups that are associated to VM folders on the vCenter. The server group is associated to a company so the VM's are automatically associated to a company. This feels a bit of a workaround but it is working at the moment.I also saw thread Assignment of VM's to Companies which explains this solution with VM tags which is almost the same solution.As the referenced thread is 3 years old, is there a better way to do this? We tried adding the same vCenter multiple times to create different selections for companies but this does not work.Kind regards,Paul G

Hello,Notes Database 9.0.x (IBM Domino 9.0.x Social Edition 64 bit) is not in list of supported versions for 11.36. and 11.40 agent versions (https://documentation.commvault.com/11.40/commcell-console/notes_database_system_requirements.html).Last it was mentioned as supported at least in 11.24. I need to upgrade agent from 11.24 to 11.36 or 11.40. Does anyone has practical experience, will it work?At same time  “IBM Domino 9.0.x Social Edition 64 bit” in not in Deprecation Notices list: https://documentation.commvault.com/11.40/software/deprecation_notices.htmlThank you! 

Hi,what is the best way to achieve, that a (restricted) user, who created a derived plan, gets the permission to change security settings of his new created plan ?I’d like/need to share the plan with all members of a specific user/secrity group.The plan should be accessible by all members of that groupthe system created Role: Plan Creator is automatically assigned, but this does not include the change security settings permissions and cannot be altered, since system created.(CommCell is running on CV11.40)rgdsKlaus

Hi All I have enabled the Multi person authorization - Restore request. The users I have in my environment only have very few permissions, only able to do backup and restores.Now that the above have been enabled, my users don’t see the request in the job controller in the Java Console even though I have placed them in the “User groups which can authorize the request”.If I look in the documentation under Multi person authorization - FAQ it states:3. Do users need special permissions to be an approver to authorize requests?No, users do not need any specific permissions to approve a request. Instead, they must belong to the user group configured as the approver group.FAQ for Multi-Person Authorization But still its not working, as the users cannot see the request. What am I missing, I guess some permissions anyway? Regards-Anders 

Hi,I’m using Microsoft CSVs for quite some time now, to setup shared libraries on block storage.My current setup on Windows 2025 (24H2) is now reporting an incompatible filter driver in the filesystem stack.Up to Windows 2022, I do not see this behaviour.The incompatible driver, leads to indirect I/Os against the Filesystems, which leads to a degradation in throughput and increase in CPU and network utilization on the MediaAgents.Is there an update available, fixing this in CV11.40 ?I’m currently using MR56 in the environment and deactivated the Ransomware Protection on the MediaAgents to avoid this.Once activated, the CVDLP filter driver gets active again and the ClusterVolumeState changes from direct to indirect due to incompatible filter driver.I faced a similar issue some 10 years ago with Version 11.6 of Commvault and Microsoft 2012R2, where this has been solved by Commvault with a patch/FixBRKlaus

Good morning,I'm trying to optimize the RAM usage on the Commserver. The Commserver is currently running on OS 2022 with SP 11.36 and has 80 GB of memory.At the moment, I consistently see memory usage of around 85%. SQL Server is using approximately 31 GB, while datacube.exe is using about 21 GB.The Commserver is also running indexing, which has 20 GB reserved, and SQL Server has 31 GB allocated.What would be the best way to reduce the overall RAM usage? Is 31 GB allocated to SQL Server too much?I understand that it's generally recommended to reserve about 50% of the total RAM for SQL Server, but I'd appreciate your advice on the optimal configuration in this case. What would happen if I reduced the amount of RAM allocated to indexing or to SQL Server? Are there any potential performance impacts or risks that I should be aware of?

We trying to configure webhook in commvault but it not able to configure, getting errror message “Invalid URL specified” Commvault is not accepting HTTP using HTPS but still failing. Please helpLogsMachine : CommserverFile    : WebServer.log 5172  102   07/01 15:05:33 ### admin API - Tid:c69a82a76864123c3e345a268fdd6bcb STARTED  POST [/Webhook] Console[AdminConsole] IP[10.xxx.xx.xxx]5172  102   07/01 15:05:33 ### admin CreateWebhook - Tid:c69a82a76864123c3e345a268fdd6bcb Error while encrypting string:5172  102   07/01 15:05:33 ### admin IsIPValid - Tid:c69a82a76864123c3e345a268fdd6bcb Sitelocalurl/LinkLocalUrl is provided5172  102   07/01 15:05:33 ### admin IsValidUrl - Tid:c69a82a76864123c3e345a268fdd6bcb Invalid ip 10.xxx.xx.xxx5172  102   07/01 15:05:33 ### admin CreateWebhook - Tid:c69a82a76864123c3e345a268fdd6bcb Invalid url specified: https://10.xxx.xx.xxx:9000/receive5172  102   07/01 15:05:33 ### admin CreateWebhook - Tid:c69a82a76864123c3e345a268fdd6bcb request handling interr

Hello,I have been reviewing the Commvault Risk Analysis and Data Classification capabilities, and I have also performed some lab testing to better understand how the feature works.Based on the documentation and my testing, I understand that data can be classified using:Predefined Commvault classifiers Microsoft sensitivity labels/classifications Custom classifiers by providing a set of representative sample files (at least 50 files) for the document typeHowever, I have a question regarding a specific use case.What if an organization does not know what types of data it currently has and wants to discover and classify unknown data across its environment?The current classification methods seem to require either predefined categories or prior knowledge of the document types. In this scenario, how can Risk Analysis help identify and classify data that is not already known or defined?Am I missing a capability within Risk Analysis that addresses data discovery for unknown content. 

Hello everyone,I’m facing an issue while backing up production virtual machines hosted on Nutanix AHV using Commvault version 11.40.47, and I would appreciate your guidance.EnvironmentCommvault Version: 11.40.47 Hypervisor: Nutanix AHV Prism Element IP: 10.10.100.120 Commvault Access Node / Media Agent: Hostname: srv-CV-backup IP: 10.10.100.24 Issue DescriptionWhen starting a backup job:Commvault successfully discovers and lists all the VMs The backup job starts but fails before backing up any disks The issue occurs for all VMsError MessageError opening the disks for virtual machine [Win-SRV1].Access node [srv-CV-backup] is unable to mount NFS share [10.10.100.120:/PROD].Source: srv-backup, Process: JobManagerNotesThe latest Commvault version available to us is installed (11.40.47) VM discovery works correctly The failure seems related to mounting the NFS datastore from NutanixHas anyone encountered a similar issue with Commvault and Nutanix AHV?Are there any specific NFS permissions,