Skip to main content
Answer

VMWare VSA backups and ESXi Lockdown mode

  • January 2, 2024
  • 1 reply
  • 126 views

Hi there,

 

Does anyone have experience enabling VMWare ESXi Lockdown Mode (Normal or strict) and how it interacts with CommVault VSA backups for VMWare? Customer has a mix of SAN direct, NBD, and HotAdd (via proxy) backups.

 

Thanks!

Best answer by Albert Williams

Hello @cmoss 

Thanks for the great question!

The following goes over what VMware states about the different lockdown modes and who it will impact

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-F8F105F7-CF93-46DF-9319-F8991839D265.html
 


In Commvault when creating the User account we recommend the following: 
https://documentation.commvault.com/2023e/expert/configuration_of_vsphere_user_accounts.html

I recommend making sure that the account that is created in the above is included in the exception user list and backups should not be impacted. 

Kind regards

Albert Williams

1 reply

Forum|alt.badge.img+14

Hello @cmoss 

Thanks for the great question!

The following goes over what VMware states about the different lockdown modes and who it will impact

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-F8F105F7-CF93-46DF-9319-F8991839D265.html
 


In Commvault when creating the User account we recommend the following: 
https://documentation.commvault.com/2023e/expert/configuration_of_vsphere_user_accounts.html

I recommend making sure that the account that is created in the above is included in the exception user list and backups should not be impacted. 

Kind regards

Albert Williams