Share Best Practices

Hello communityI am having an issue with getting the compliance lock unlocked on all secondary copies of my storage policies.  i have completed the following Filled in the form under resources on the website to get compliance lock lifted, using Commcell ID, Primary Copy name and ID, secondary copy name and ID and also passphrase which is correct. killed all logins using Qlogout.exe -all Logged back in using an account in the Masters Group ran the following the xml file provided by Commvault only has the IDs for the primary copy and the secondary copy.  It has no mention at all of the names of both the primary and the secondary 

Hi everyone,I asked Arlie about encryption handling when doing auxiliary copy (tape-out) from an encrypted HPE StoreOnce Catalyst Store https://support.hpe.com/hpesc/public/docDisplay?docId=sd00003761en_us&page=GUID-6D031310-DD0A-46AC-96E5-3B3F843EEA63.html.According to Arlie, if the tape storage policy copy is set to "Preserve encryption mode as in source" (the default), the encrypted backup data from StoreOnce should remain encrypted when written to tape—no decryption/re-encryption needed.However, I'm opening this thread for real-world confirmation from folks running this in production. Does the encryption truly persist end-to-end from StoreOnce to tape in a real scenario? For the HPE MSL G3 tape library (which supports hardware encryption vi

Hi,The maximum certificate lifetime is going down:From today until March 15, 2026, the maximum lifetime for a TLS certificate is 398 days. As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days. As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days. As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days.Certificates for the Command Center (Tomcat web server) must be manually renewed and updated.Does CV have a recommended procedure to tackle this in future or should everyone find their own solution?/Piippu

Hello Fello Commvaulters I hav the task of moving our current Index Cache and DDB database dat from their current drives I & D respectively to two new drives on the SAME media agent?  I can see a workflow which Ive used many times to move the data between the old media agent and the new one.  This is movement from within the same box. I dont see a WF in how to do this.  Anyone any ideas?  Also worth pointing out the “Index Server” tab on my media agent is greyed out.  

Hello Team,How can we enable Journaling on o365?Note: On on -prem it was enabled but it will be decommissioned soon as we moved to Exch Online.

what we keep the directory space if we want to install commvault commserve in redhat linux 

For Oracle database backups on Commvault, what is the recommended approach to use retention rules? The recommended approach is to use retention rules based on number of cycles or days? 

Good morning, We are new to postgres databases and are implementing our first production cluster soon.  What are you all using for your log backups in terms of scheduling?  We are running in continuous archive mode and currently have backups every 15 minutes.  Even 2G  backups are taking under a minute. What are the considerations for setting this? If our RPO is 5 minutes, would it make sense to backup every 5 minutes, or is that trying to fit Commvault into a high availability box that it is not designed for?If using FSBasedBackups, are you also using regularly scheduled dump based backups?  In what scenario? Thank you very much, this forum has been fantastic!-Chris

Hello everyone,I'm looking to optimize storage for my SQL Server backups in Commvault using Application-Aware mode (VM backup with application consistency, without agent installed on VMs).Context:SQL backups via Application-Aware only (no Commvault agent installed) Need to apply different retention policies to optimize storage: Transaction logs: short retention (e.g., 7 days) Full backups: long retention (e.g., 30 days) Issue: I know this granularity is available with the Commvault SQL agent installed (via separate subclients), but in Application-Aware mode, I cannot find these options. It seems we're limited to a single retention policy for the entire VM.Questions:Is it possible to configure differentiated retention policies in native Application-Aware mode? Is there a solution through the Commvault REST API to m

hello,i m planning a CommServe + Media Agent  all in one migration with hardware refresh, OS change (Windows → Linux), and version upgrade (11.28 → 11.40 LTS)I m want to migrate on linux because the windows version is depreciate.Can you advise me on the steps to take during the migration ?I would like to use the bare-metal version of Commvault 11.40 LTS, or would you advise me to reinstall using Rocky Linux and then install CommServe + Media Agent ?Thank you for your help

Guys, I m not 100% sure to find the good AMI for a CommServe on AWS or AZURE Market place, I found  On AWS : Looks ok, but FR40 : https://aws.amazon.com/marketplace/pp/prodview-6eiyfdyrlf2u6?sr=0-5&ref_=beagle&applicationId=AWSMPContessa On Azure : https://marketplace.microsoft.com/en-us/product/virtual-machines/commvault.commvault?tab=PlansAndPriceAny advice ?

I got a scenario description.New PC (win 2025 or win 11), new openJDK (OpenJDK25U-jre_x64_windows_hotspot_25.0.1_8) in connection with netx.jar does not work. Test with OpenJDK21U-jre_x64_windows_hotspot_21.0.9_10 works as expected. Tested against a 11.40 commserveI tested it with with a windows 2019 box.OpenJDK25Ucommand java –jar netx.jartarget is a 11.36.72 machineconnection Ok, but browser on the left site does not work.! (classic view)Cannot start jobmanager!Same test with OpenJDK21U shows no issues.Checked dokuOpening the CommCell Console Using the Command Line InterfaceThe minimum JRE version on the computer must be the same major version that Commvault deploys (or a newer minor/patch level).It should work

I know I can’t be the only one that faces this problem and I’d like to know how other folks handle it.Requests for application backups can be fairly simple.  Backup this server, <drives, paths, server> using <agent type>.  Following <RPO/RTO policy>….Etc, Etc.But some backups can get a little to a lot more complicated, especially in high security environments.Some applications have very specific documentation about how to back them up, and more specifically, how vendors will support restoration issues if their procedures aren’t followed.  This can be especially problematic in clustered or multi server environments.  For example, I have an application I back up that runs a main application server and 4 back-end servers that run various functions.I asked the application owner if they should be backed up as a consistency group?  He had no idea what I was was talking about, but worse thought it was my responsibility to fi

Hello all,Hope you can help me with this quick question:Will CIS Hardened scripts on Commvault store work for Windows 2019 and/or 2022?I am referring to this: https://cloud.commvault.com/webconsole/softwarestore/store.do#!/96/635/20763 Thanks in advance for the answer!Sergio.

Just curious.  What is the policy where you work when it comes to applying hotfixes? Do you treat hotfixes differently than release version upgrades?I’m asking because my predecessors would apply hotfixes (if they addressed a specific issue) without really telling anyone other than maybe an immediate supervisor and an email to the engineering team (and maybe the NOC I’m not sure on that one).  They'd take a DR backup, SNAP the Commserver VM and let it fly and roll it back if there was a problem.I’m more of a formal process kinda guy.  I assume most of you will tell me, “what’s the problem?  Just follow a formal process.”, but I there will be people in my organization that will push back because of the successes of the past.  I lack the real experiences that come with issues related to applying hotfixes (if any).  Anyone have any experiences they can share?How do you folks treat hotfixes?  

Hi,Is it possible to use linux for intellisnap proxy server or should I use only windows for the proxy as the document said? Thanks 

Hi, We have setup a third isolated copy on CloudLib. On this copy we are also enabling Commvault Compliance Lock. We have Oracle backups running to our Primary Copies where we have RMAN managing the retention. As per the documented instructions we have the CV retention set to Infinite on out Oracle Plan and this works perfect as we can see the jobs aging off per the RMAN retention. The question/concern is what happens on the third copy if we set the retention to Infinite and enable Compliance Lock? We cannot risk locking the data with Infinit retention for obvious reasons.Anyone out there that have experience of this? What is best practice? Regards,Patrik 

Hi there, We are looking at possibly using a Rocky Linux based media agent, I was just wondering if there were any “Hardened Linux Commvault Media agent images for Bare Metal at all? We are currently running version 11.32, moving to 11.36 within the next couple of weeks. Have people used a linux media agents widely? and which flavours have you seen at all? TIADan Everitt

Hi, Are there any scripts available following best practice for hardening of Linux OS for Media Agents?I found this in the store: Storebut seems to be more like a report and not a proper script. Kind regards,Daniel

When creating a new cloud storage, I am asked to enter the media agent. However since I am in a tenant(company) account, I do not have access to the infra server like commserve and media agents. How can I give minimum access to the tenant so that the tenant can add the storage?

Hello. community, While I am installing CommServe, I noticed the “selection Windows packages” appears Content Extractor. I would to know more about content extractor, I have 3 questios:What is “Content Extractor”? When do I use “Content Extractor”? When i have to install it? Can you share with me links for more information?I have attached a image for your reference: Thanks.

Hello,I have a storage policy with an AuxCopy ( synchronous )  configured with the bewlo retention rules:7 days 1 CycleWeekly full - 30 DaysMonthly full - 90 Days I’m planning to create a another copy that will point to another data path to hold only the short-term retention ( 7 days 1cycle ), and to reconfigure the existing one to hold only the Weekly + Monthly full keeping the same retention days for those.How should I re-configure the exsiting copy?  Just remove the short retention rules ( 0 days 0 cycles ) and leave the extended retention rules for the weekly + monthly fulls as is ? Leave it as synchronous copy  or change it to selective ?Thanks

Hello community,we are using IntelliSnap to achieve smooth and fast backups for our Oracle clients.The integration is configured as follows: RMAN connection string points to the RMAN catalog Backup interface is set to RMAN Data restore from Commvault works perfectly “The issue”: We are unable to retrieve a list of backups from the RMAN catalog for backups performed using Commvault/IntelliSnap. This limits our DBAs, as they cannot query backup information directly without accessing the Commvault console. If we perform a regular backup copy (not a snapshot) of the database and archive logs, the RMAN catalog updates correctly and lists the backups. Question: Is this expected behavior (by design) with IntelliSnap? Are there

Hello,Commvault 11.32.x is running on a Windows 2019 server.We noticed that when we need to shutdown or reboot our CommServe in case of Windows Updates for example, the whole process takes at least 10 minutes, more often 15 to 20 minutes… One could understand that it is difficult to afford with such amount of time for each reboots.The shutdown process stays “ stuck “ for several minutes on the step : “ Shutting down of service: Group Policy client “.   A case has been opened at Microsoft support, investigations pointed out that this huge amount of time needed is due to the execution of Commvault D:\Commvault\ContentStore\Base\StopProc.vbs.If I am not wrong, this file is supposed to allow current jobs enough time to complete smoothly.MS support asked if it would be possible to “ disable “ temporarily the execution of this file, in order to test if that solves the issue.-→ Does somebody else is facing the same Commvault behav