Registering the Microsoft 365 tenant with IBM Spectrum Protect Plus

To ensure that the IBM Spectrum® Protect Plus agent can connect to the Microsoft 365 tenant, you must register the Microsoft 365 tenant credentials, and the Linux® server that acts as the proxy host server with IBM Spectrum Protect Plus. This procedure is necessary to ensure that Microsoft 365 data can be backed up to IBM Spectrum Protect Plus.

1. In the navigation panel, expand Manage Protection > Cloud Management > Microsoft 365.
   
2. On the Microsoft 365 page, click Manage application servers, and then click Add application server.
3. On the Organization Properties page, complete the following fields:
   1. In the Organization Name field, enter the name of the organization that you set up in the Azure Active Directory admin center.
      Note: Specify the Organization name in this format: tenantname.onmicrosoft.com, The names are not visible when you register the Azure application.
   2. In the Tenant ID field, enter the string from the Directory (tenant) ID field in the Azure Active Directory application registration.
   3. In the Application ID field, enter the string from the Application (client) ID field in the Azure Active Directory application registration.
   4. In the Application Secret field, enter the password string that was generated during the Azure Active Directory application registration.
4. On the Proxy Properties page, complete the following fields:
   1. In the Host Address field, enter the hostname or IP of the Linux server that is being used as the proxy host.
   2. Obtain the server key and verify that the key type and key fingerprint match the host. Click Get server key.

      Get server key

      The SSH server key for the Linux-based host. You must complete this step when adding servers for the first time or if the key on the server changes.

      When upgrading to the IBM Spectrum Protect Plus latest version, systems that are already registered in the previous version are set to trust on first use (TOFU) and the SSH key fingerprint will automatically be added to the registration information in the catalog.

   3. Key type

      The type of key for the Linux-based host is displayed. The following key types are supported:

      • RSA with a minimum key size of 2048 bits
      • ECDSA
      • DSA

   4. Key fingerprint

      The MD5 hash of the SSH key fingerprint is displayed. Confirm that they key fingerprint matches the key fingerprint of the host that you are adding.

   5. For host server authentication, select one of the following options:

   • User: Select an existing user, or enter a user ID and the associated password.
   • SSH Key: Select a Secure Shell (SSH) key from the drop-down list.
5. Click Save.