Skip to main content
Solved

VMWare VSA backups and ESXi Lockdown mode

  • Jan 2, 2024 9:17 PM UTC
  • 1 reply
  • 146 views

Hi there,

 

Does anyone have experience enabling VMWare ESXi Lockdown Mode (Normal or strict) and how it interacts with CommVault VSA backups for VMWare? Customer has a mix of SAN direct, NBD, and HotAdd (via proxy) backups.

 

Thanks!

Best answer by Albert Williams

Hello @cmoss 

Thanks for the great question!

The following goes over what VMware states about the different lockdown modes and who it will impact

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-F8F105F7-CF93-46DF-9319-F8991839D265.html
 


In Commvault when creating the User account we recommend the following: 
https://documentation.commvault.com/2023e/expert/configuration_of_vsphere_user_accounts.html

I recommend making sure that the account that is created in the above is included in the exception user list and backups should not be impacted. 

Kind regards

Albert Williams

View original

1 reply

Forum|alt.badge.img+19

Hello @cmoss 

Thanks for the great question!

The following goes over what VMware states about the different lockdown modes and who it will impact

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-F8F105F7-CF93-46DF-9319-F8991839D265.html
 


In Commvault when creating the User account we recommend the following: 
https://documentation.commvault.com/2023e/expert/configuration_of_vsphere_user_accounts.html

I recommend making sure that the account that is created in the above is included in the exception user list and backups should not be impacted. 

Kind regards

Albert Williams