Self-Hosted Q&A

Hi all.We’ve been using our Commvault setup to take one off NDMP backups of critical research data from our central storage, then copying to two tapes, all that good stuff.  As these are a one-off backup, I’ve been disabling the client activity and removing the licence afterwards, as they’ll only be needed for a potential restore down the line (retention is a minimum of 5 years).I’ve noticed that this doesn’t count towards licence usage, which in essence means that we can do as many “archives” as we have storage for, as long as we have the sufficient licence headroom for the initial one off backup.My worry is this would be seen as circumventing licence costs, and against the fair usage idea, and if we were ever audited it would result in additional charges.  I should add we’re not a massive setup, 1000 VMs and ~250TB of capacity.  The archives in total would be 10s of TB, maybe ranging into 100s.Anybody got any relevant info or thoughts?TIAIan

Hi all, when registering an Office 365 Exchange app in the Commvault Command Center (version 11.32), we attempted to use the Office 365 Configuration Helper tool.However, after running the helper, the following error occurs: "Access blocked to AAD Graph API for this application." Although the provided link (https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview) describes the general API migration, it does not offer specific advice for resolving this within the Commvault tool. We have already tried installing the Microsoft Graph PowerShell SDK (https://learn.microsoft.com/en-us/powershell/microsoftgraph/installation), but the error persists and the configuration tool still fails. Have you had any similar experiences with the Office 365 Configuration Helper tool?Thanks in advance for sharing your insights!

Hi,I’m trying to test 1-touch restore for Windows. When I’m trying to connect to Commserve, there is a “failed to setup a communication (QSDK) session” error: You can observe that the initial connection was succesful (“connected to comserve”). But then there is this QSDK problem. I checked the logs and there is info that it could be no direct tunnel or couldn’t bring any automatic tunnels to commserve.I think it could be the problem with network routes / topologies on Commserve, but here is a question: How can I setup network route or topology to client which not exist yet? I mean when I start 1-touch wizard and configure network connection to Commserve, it is not a real client but just some host with random hostname so how Commserve could know what network settings apply to this client?I can setup some topology to some group but what client should be there? With this initial step of 1-touch I didn’t enter any client information yet. PS: I restarted the Commands Manager service and tri

Hi, is there an option to adjust the values for Average Q&I Time and Primary Records ?  Actually value in SP40  Good < 600 μs Or >= 600 μs and < 160 Million Warning 600-800 μs and >= 160 Million Or DDB needs an upgrade Critical >= 800 μs and >= 160 Million  I need to change this values a bit.  Arlie say: How to Adjust DDB Q&I Time Thresholds:Open the CommCell Console. Go to Control Panel > Media Management. Select the Deduplication tab. Locate and adjust the following parameters: DDB horizontal scaling threshold QI Time Warning Threshold for Average Q&I Time Critical Threshold for Average Q&I Time  But this options arent available in SP40

Hi all,I am currently running Commvault 11.32 and I’m looking for clarification regarding KB 84896 ("SharePoint Online Azure ACS Retirement in Microsoft 365").https://kb.commvault.com/article/?id=84896 Today is April 2nd, 2026, which according to the article is the final deadline for Azure ACS functionality. The KB specifically mentions that due to Microsoft's restrictions on DisableCustomAppAuthentication and the retirement of ACS, users must upgrade to Commvault Platform Release 11.36.28 or later.Is it more recommended to upgrade Commvault from version 11.32 rather than disabling authentication to allow Office 365 SharePoint backup and restore? Finally, could registration of the Sharepoint app and backup work somehow (when disabling authetication in sharepoint portal) in 11.32 as well?Your opinions would be much appreciated.

Hello,I have simpana 11.36.68 and we have a problem because one system schedules interfered with execution other schedule policy.For a specific client, I configured the schedule so that a Full backup runs on Fridays, while Incremental backups run on the other days. However, last night both a Full and an Incremental backup started at the same time, even though the Full backup should not have been triggered on Wednesday.This indicates that a system schedule may have overridden the configured backup schedule.The schedule policy for this client does not provide the option to include Wednesday or Saturday, which is causing scheduling issues.What might be causing the issue?Best regards,Elizabeta

Hi all, I’m setting up M365 backup using the Custom Configuration, which is now the recommended approach over the Express option.I have already registered the app in Azure and have my Application ID and Tenant ID ready. However, the documentation is a bit unclear regarding the certificate workflow—I can’t find the specific section explaining where and how to generate the certificate required for the Azure portal. Is the certificate generated directly within the Command Center wizard? Also, once it's generated, is the correct next step to upload it to the Azure app registration? Could someone please clarify these steps or point me to the exact documentation page covering this procedure?https://documentation.commvault.com/2023e/software/complete_microsoft_365_service_catalog_for_exchange_online_using_custom_configuration_option.html?_gl=1*hjd47t*_gcl_au*NjQ0NDk4ODY5LjE3Njk1OTU0OTI.  

Hello,We are creating multiple reports in command center using the backup summary report, but seem to have an issue where only the user who created the report can see the report with the filters. How can we configure these to allow other admins to be able to see, adjust and edit these?

Hello,I have installed cloned machine (remain same IP address and same name) instead original. On the Commvault backup server there were no changes. After the server was cloned, the backup from Commvault stopped working.Description: Failed to start phase [Backup] on [mailserver] due to network error [Remote machine [mailserver]. The socket connect failed. Error returned [-1=Connection to mailserver:cvd(8400/8400) failed on bck: Can't unambiguously route connection to mailserver because there are multiple tunnels from different instances of CVFWD pretending to be mailserver]. Check Network Connectivity.]. Will attempt to restart. Please check if this product's services are running on the remote host.Is there any procedure that needs to be performed on the Commvault backup server for a cloned machine?Best regards,Elizabeta

Hey Commvault Community, I just deleted an Exchange Online mailbox backup from Command Center, kicking off Job ID: 1032081. Screenshot shows "Index Delete" phase done at 100%. For Exchange Online (and other O365 services like Teams/SharePoint), does deleting the backup actually remove backend data from cloud storage, or just kill the index (no more browse/restore) while emails/files stay forever?From what I know, Commvault uses only forever / infinite retention for O365 services (retention rules only apply to deleted data backups). So, that's why I'm asking in case of deleting an Exchange Online mailbox backup, does the backend backup data also get deleted from cloud storage, or just the index? Please for your feedback.Best regardsNikos

Hi All, we have an very Big Sharepoint Farm on Prem. Actually we are using the Sharepoint Agent for documents and also for database.  No we are faceing 2 Problems: The logs on the sql server are not getting truncated the performance is very very bad What is the risk when we only backup the Documents via the sharepoint agent and backup teh databse via sql server agent ? 

Hi Team,I Have facing one issue in our commvault ,While running the SQL database backup we have getting below error ,please provide any solution for the below issue.Error Code: [30:324]Description: "Error encountered when closing the virtual device, Please see SQL server vdi.log for more details" 

helloWe are experiencing an issue with the WebConsole on our Commvault environment following a failover. Failover windows cs to linux cs  EnvironmentCommvault version: 11.40.26 CommServe OS: Linux WebConsole / Command Center hosted on: linuxIssue DescriptionThe WebConsole is not functioning correctly. Scheduled reports and SLA reports are failing. jobs are working without any issue.Observed BehaviorAccess to Command Center (/commandcenter) is working (HTTP 200). Access to WebConsole (/webconsole) returns HTTP 404 (Application Not Found). Reports fail with the following error: "Failed to get the list of command centers" "There is no WebConsole available to proceed further" Logs (relevant excerpts)scheduleReport.log: GetWebConsoleURLList() - There is no WebConsole available to proceed further JobManager.log: Failed to get the list of command centers for web server id [0] Apache logs: /commandcenter → 200 /webconsole → 404 Actions Already PerformedVerified that WebConsole and Command

Hi CommVault Community,I deployed the Azure Applications for M365 Services with the Express Setup.The Azure Applications have some permissions that are somewhat concerning from a security perspective.Therefore the question, are the following permissions really necessary?Why do the Azure Apps need "Application.ReadWrite.All" permissions?Why does the Azure Application for SharePoint Online need "RoleManagement.ReadWrite.Directory" permissions?They are not listed in the official documentation!https://documentation.commvault.com/2023/essential/142507_request_and_grant_permissions_to_azure_apis_for_azure_app_for_sharepoint_online.htmlCVSPBackupAppCVTeamsBackupAppCVODBackupAppCVExBackupApp best regards,Andreas

Hello All,Our customers are increasingly requesting to update their NetApp storage to Ontap 9.17.1. In addition, new systems are increasingly being delivered with 9.17, and we need to perform a downgrade. (if still supported by the hardware)Are there any plans to release Ontap 9.17.1 or even 9.18.1? Grateful for any help! 

I have an implementation where the customer is writing backup jobs directly to tape.They are LTO-9 so have 18TB in capacity.Total Full backups are 6TB. I have created multiple plans for VM’s and SQL backups. They run at different times and have different retentions for daily backups.What I’ve noticed is that each Plan (Storage Policy) writes to its own tape which is far from ideal for tape usage.  The only thing I could think of is to not use plans, create 2 Storage Policies (to satisfy the different retentions) and then create schedules in the Commvault Java Console as we did many years ago.Is this still the best method?Thanks in advance.Mauro

Hello everyone,I have fileserver WS2016 with data archiving configured, plan to upgrade it to W2025. Could you please recommend best way to do OS upgrade without stub recall.1) Is windows in-place upgrade supported?2) Is it supported to move virtual disks with stubs to new cleanly installed VM with same name an redeployment of agent on new VM? If yes how to perform it correctly?Br,Andrejs

Hello Team,We are facing an issue during LiveSync failover in our Commvault Linux installation.commvault version - 11.40.34When we attempt to perform the failover, the CvFailoverLogShipping job gets triggered but fails with the following error:Error code: [30:436]Description: Instance validation failed: Insufficient SQL Server role. To configure the instance, the user [sqladmin_cv] must be a member of the SYSADMIN SQL server role.Source: rhel1Process: JobManagerTroubleshooting performed: Verified the SQL login configured in Commvault. Assigned required permissions, including SYSADMIN role, to the SQL user. Revalidated credentials after updating permissions. Verified permissions from the standby node as well; permissions appear consistent on both sides. Despite this, the instance validation continues to fail with the same error. create new user and assigned all required permissionRequesting assistance to identify why SYSADMIN role validation is failing during LiveSync failover.P

Hi guys, we ran into an issue deploying an RPM created from the 11.40.42 base which I’m wondering if anyone else has. If you run “rpm -qip ournewcvlt.rpm” it returns the following:Name        : ournewcvlt.11.40.42.Instance001Version     : 11.4000.1372.42Release     : 1.el8Architecture: x86_64Install Date: (not installed)Group       : Applications/ArchivingThe last field there “Group” is not a Unix Group in the traditional sense but appears to conflict with other aspects of our repos environment. The question is - there doesn’t seem to be any control over this and we wonder if it is possible to modify this.I found howto: repack RPM for nicer name or add extra files | Community but that doesn’t exactly speak to it. Does anyone know if we snag the blah.src.rpm file before it gets cleaned up if we can modify the Group. Essentially it affects dependencies for a couple other packages.thanks

Hi everyone,after upgrading a customer environment from Commvault 11.32 to 11.40 (LTS), we ran into an issue with the SharePoint Online Classic agent.Environment & situation:Commvault upgraded from 11.32 → 11.40 The customer is still using the SharePoint Online (Classic) agent, configured via the Java / CommCell Console SharePoint Online is not yet configured in Command CenterAfter the upgrade, the Classic agent can no longer be used for new protection jobs, so we are planning to configure SharePoint Online in Command Center going forward.Before doing so, I would like to clarify the impact on existing (legacy) SharePoint Online backups created with the Classic agent:Are those legacy backups still restorable as is using the Classic client / Java Console after new protection is moved to Command Center?Or is there any migration or conversion step required to make the legacy data restorable or visible in Command Center? thanks and best regards,Andreas

Hi,In the CommServe LiveSync (11.40) environment on the active server, the “Auto-start services when OS starts” option is grayed out.Only after entering the following commands can the checkbox be selected:gxadmin.exe -consoleMode -enableautostartoption truegxadmin.exe -consoleMode -setsvcstartmode Automatic ...but after some time the checkbox becomes inactive again. The following article contains that this option is managed by failover.https://documentation.commvault.com/11.40/software/enabling_or_disabling_commserve_livesync.html“After you enable the CommServe LiveSync feature, the Auto-start services when OS starts option in process manager is disabled and controlled by the CSLiveSync feature.” During failover, it disables all services on one Commserve and enables them on the other, then does the opposite during failback. It also reverses live sync replications and a few other things.However, shouldn't this checkbox be checked in such a normal scenario? Shouldn't it be checked and gr

Hello,I am in a situation that I need to move a mount path to another mount path. I would like to just have backup jobs from the move path in the destination.Is there a way to prevent new backup jobs being written to the new mount path while the move is running?Something like the bullet points below.BR Henke Set "Disable mount path for new data" on the destination before initiating the move Leave the setting untouched while the job runs Manually clear the flag after the move completes (since the job only auto-clears it on the source, not the destination)

Hi everyone, When restoring a Domain Controller’s System State backup (taken with the Windows File System agent), the Active Directory component appears empty and shows the message “Not allowed to browse system state components.”I’m aware that these days granular AD object recovery requires the licensed Active Directory Agent, so this is not about licensing. My question is more technical and focusing to System State:Why does the System State AD component show empty — is this purely by design, or does Commvault handle AD data differently During a full System State restore, is the AD database automatically restored even though it’s not visible in the browse view? Has this behavior always been like this, or did older Commvault versions allow limited browsing of AD components within System State? Trying to understand if this is an intentional design constraint or something that regressed over time.Thank you in advance,Nikos

Hi, Could you possibly assist me with this?Commvault 11.32.119Is there a way to promote a Synchronous Copy to the Primary Copy using Command Center?  

Hi, Can you help me with this real quick?Commvault 11.32.119.How can I change the Backup Destination of Plans using Command Center?