Skip to main content
Question

M365 Custom Config: Certificate creation & Azure upload workflow

  • March 25, 2026
  • 2 replies
  • 43 views

Forum|alt.badge.img+18

Hi all,
 

I’m setting up M365 backup using the Custom Configuration, which is now the recommended approach over the Express option.

I have already registered the app in Azure and have my Application ID and Tenant ID ready. However, the documentation is a bit unclear regarding the certificate workflow—I can’t find the specific section explaining where and how to generate the certificate required for the Azure portal.
 

Is the certificate generated directly within the Command Center wizard? Also, once it's generated, is the correct next step to upload it to the Azure app registration?
 

Could someone please clarify these steps or point me to the exact documentation page covering this procedure?


https://documentation.commvault.com/2023e/software/complete_microsoft_365_service_catalog_for_exchange_online_using_custom_configuration_option.html?_gl=1*hjd47t*_gcl_au*NjQ0NDk4ODY5LjE3Njk1OTU0OTI.

 

 

2 replies

Paul G
Apprentice
Forum|alt.badge.img
  • Apprentice
  • March 26, 2026

Hi ​@drPhil,

You are referencing 11.32 BOL. Is the environment still on 11.32 or is it a newer FR? 

11.36 documentation refers to the configuration helper tool which is great to guide you through the steps. I believe this tool also exists in the 11.32 environment but I no longer have a 11.32 environment to verify.

Register the Azure App for SharePoint Online with the Configuration Helper Tool

I believe only SharePoint online needs a certificate but you did not specify for which application you are creating the azure app. You can find documentation about the certificate here: Generate an Azure Certificate for Existing Azure Apps in SharePoint Online

I hope this helps.

 

edit: the configuration helper tool exists for every application type.


Forum|alt.badge.img+18
  • Author
  • Challenger
  • April 2, 2026

Hi ​@Paul G thank you so much for your response!

Indeed, there are likely some issues with earlier versions. Since we have 11.32, the Configuration Helper tool hasn't been working. We receive the following error message when running the helper tool: "Access blocked to AAD Graph API for this application" (https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview - the link helped not at all…
 

Moreover, although we set up the registration using the custom configuration option, the "Verify Connection" status does not show a successful binding, even though we are able to browse mailbox items. It’s very strange...
 

Since other related issues have arisen, I will keep this thread open. Once everything is resolved, I will share the solution for this case.