Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deduplication Guide
  3. MSDP cloud support
  4. Configuring FortKnox for NetBackup Azure and Azure Government
NetBackup™ Deduplication Guide

Configuring FortKnox for NetBackup Azure and Azure Government

Use the following procedure to configure FortKnox for NetBackup for Azure and Azure Government.

Note:

FortKnox supports multiple options. For FortKnox Azure and Azure Government options in the web UI, you must contact your Cohesity NetBackup account manager for credentials or with any questions.

Table: Steps for configuring FortKnox for Azure and Azure Government

Steps

Task

Instructions

Step 1

Retrieve credentials.

Retrieve the FortKnox credentials from your Cohesity NetBackup account manager.

Step 2

(Optional) Create an MSDP storage server if one does not exist.

See Configuring media server deduplication in NetBackup.

Step 3

Add a disk pool.

In the NetBackup web UI, create a disk pool. Follow the procedure in Create a disk pool in the NetBackup Web UI Administrator's Guide.

  • In the Volumes step:

    • Select the option of FortKnox Azure or FortKnox Azure Government from the Cloud storage provider drop-down.

    • Select the appropriate region.

    • In the Associate credentials section, select Add a New Credential and enter the Storage account and a Refresh token provided by the provisioning team. Or, you can use Select existing credentials if credentials exist for Azure.

      The Credential name must use alphanumeric characters with hyphens or underscores and cannot contain spaces or illegal characters.

FortKnox Azure provides the following two storage classes:

  • FortKnox Azure Warm Vault

  • FortKnox Azure Cold Vault

Select the appropriate storage tier depending on the storage deployment. The actual storage tier is determined by the NetBackup during the configuration.

Note:

You may see a container named fortknox-azure-29cb2539-39ce-427e-8e72-48bf62177bc3 that is created for NetBackup use. Ensure that you do not create a bucket with the same name. If you create a bucket with the same name, the disk pool configuration fails.

Step 4

Add a storage unit.

In the NetBackup web UI, create a storage unit. Follow the procedure in Create a storage unit in the NetBackup Web UI Administrator's Guide.

When you create the storage unit, select the Media Server Deduplication Pool (MSDP) option. In the Disk pool step, select the disk pool that was created in Step 3.

Note:

If an update to the refresh token for an existing storage account is needed, you must edit the credentials that are associated with the storage account. Use the web UI and update the refresh token within Credential management.

You cannot have multiple credentials for the same storage account. Credentials must be unique to the storage account. If you do not have unique credentials, you can encounter issues such as the disk volume going down or backup and restore failures to that disk volume.

Note:

Use the original storage account to update the FortKnox CMS credentials.

Feedback

Was this page helpful?
Previous

About FortKnox for NetBackup

Next

Configuring FortKnox for NetBackup Azure and Azure Government using the CLI

Feedback

Was this page helpful?