Commvault User Unable to Register Encrypted VM During Restore

Products

• VMware vCenter Server

Issue/Introduction

The Commvault user is unable to register an encrypted virtual machine during the restore process, despite having the recommended permissions as per documentation : Commvault - VMware Encryption for Virtual Machines

Environment

A virtual environment with encrypted virtual machines where Commvault is used to backup and restore virtual machines. 

Cause

This may be due to insufficient cryptographic privileges that are specifically required for user to restore the encrypted virtual machines using Commvault.

Resolution

• Log in to the vCenter Server UI using a user account with administrator privileges.
  
  
• Navigate to 'Administration' and go to the "Roles" section under Access Control.
  
  
• Select the desired role and click Edit.
  
  
• In the 'Cryptographic Operations' section, ensure that 'Register VM' and any other necessary permissions are selected.

For more information on assigning privileges in the vSphere UI, refer to Using vCenter Server Roles to Assign Privileges