Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deduplication Guide
  3. MSDP cloud support
  4. About MSDP cloud immutable (WORM) storage support
  5. About immutable storage support for Azure blob storage
  6. Managing an Azure cloud immutable volume using msdpcldutil tool
NetBackup™ Deduplication Guide

Managing an Azure cloud immutable volume using msdpcldutil tool

MSDP cloud admin tool /usr/openv/pdde/pdcr/bin/msdpcldutil is used to manage cloud immutable volume.

You can create an Azure cloud immutable volume in the following scenarios:

  • Azure storage account has enabled version-level immutability support.

  • The container is created through Azure portal and has enabled version-level immutability support.

  • You use Azure service principal.

For information about immutability policies configurations in Azure, see Configure immutability policies for blob versions

To create a cloud volume when version-level immutability support is enabled:

  1. Set the following environment variables:
    # export MSDPC_REGION=<your region>
    # export MSDPC_PROVIDER=azure
    # export MSDPC_ACCESS_KEY=<your storage account>
    # export MSDPC_SECRET_KEY=<your access key>
    # export MSDPC_ENDPOINT=https://<your storage acount>.blob.core.windows.net/
  2. Create a cloud immutable volume.

    # msdpcldutil create -b bucketname -v volumename --mode GOVERNANCE --min 1D --max 30D --live 2022-12-31

    GOVERNANCE is unlocked policy and COMPLIANCE is locked policy in Azure.

  3. List the cloud volumes.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil list

  4. Update the cloud immutable volume min and max retention period.
    • #/usr/openv/pdde/pdcr/bin/msdpcldutil update range -b bucketname -v volumename --min 1D --max 90D

    • # /usr/openv/netbackup/bin/admincmd/nbdevconfig -updatedv - stype PureDisk -dp disk_pool_name -dv volumename

  5. Update the cloud immutable volume live duration.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil update live -b bucketname -v volumename -l 2023-01-31

  6. List cloud immutable storage cloud providers.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil platform list

To create a cloud volume when the container is created through Azure portal and has enabled version-level immutability support:

  1. Set the following environment variables:
    # export MSDPC_REGION=<your region>
    # export MSDPC_PROVIDER=azure
    # export MSDPC_ACCESS_KEY=<your storage account>
    # export MSDPC_SECRET_KEY=<your access key>
    # export MSDPC_ENDPOINT=https://<your storage acount>.blob.core.windows.net/  
    
  2. Create a cloud immutable volume.

    # msdpcldutil create -b bucketname -v volumename --mode GOVERNANCE --min 1D --max 30D --live 2022-12-31

    GOVERNANCE is unlocked policy and COMPLIANCE is locked policy in Azure.

  3. List the cloud volumes.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil list

  4. Update the cloud immutable volume min and max retention period.
    • #/usr/openv/pdde/pdcr/bin/msdpcldutil update range -b bucketname -v volumename --min 1D --max 90D

    • # /usr/openv/netbackup/bin/admincmd/nbdevconfig -updatedv - stype PureDisk -dp disk_pool_name -dv volumename

  5. Update the cloud immutable volume live duration.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil update live -b bucketname -v volumename -l 2023-01-31

  6. List cloud immutable storage cloud providers.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil platform list

To create a cloud volume using Azure service principal:

  1. Set the following environment variables:
    # export MSDPC_REGION=<your region>
    # export MSDPC_PROVIDER=azure
    # export MSDPC_ACCESS_KEY=<your storage account>
    # export MSDPC_SECRET_KEY=<your access key>
    # export MSDPC_ENDPOINT=https://<your storage acount>.blob.core.windows.net/
    # export MSDPC_SUBSCRIPTION_ID=<your subscription id >
    # export MSDPC_RESOURCE_GROUP=<resource group storage acct is in>
    # export AZURE_TENANT_ID=<azure tenant id>
    # export AZURE_CLIENT_ID=<azure client id>
    # export AZURE_CLIENT_SECRET=<azure client secret>
    
  2. Create a cloud immutable volume.

    # msdpcldutil create -b bucketname -v volumename --mode GOVERNANCE --min 1D --max 30D --live 2022-12-31

    GOVERNANCE is unlocked policy and COMPLIANCE is locked policy in Azure.

  3. List the cloud volumes.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil list

  4. Update the cloud immutable volume min and max retention period.
    • #/usr/openv/pdde/pdcr/bin/msdpcldutil update range -b bucketname -v volumename --min 1D --max 90D

    • # /usr/openv/netbackup/bin/admincmd/nbdevconfig -updatedv - stype PureDisk -dp disk_pool_name -dv volumename

  5. Update the cloud immutable volume live duration.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil update live -b bucketname -v volumename -l 2023-01-31

  6. List cloud immutable storage cloud providers.

    #/usr/openv/pdde/pdcr/bin/msdpcldutil platform list

Feedback

Was this page helpful?
Previous

Creating an Azure cloud immutable storage unit using the Web UI

Next

About using the cloud immutable storage in a cluster environment

Feedback

Was this page helpful?