Data Domain: Resolve Azure Cloud Profile Authentication Error by Regenerating Storage Keys

Observed Issues

• Regenerate the keys on Azure portal for the blob storage account / URL.
• Authentication error during Azure Cloud profile creation on Data Domain: Server failed to authenticate the request. Ensure the Authorization header is correctly formed, including the signature.

Root Cause of Azure Cloud Profile Authentication Failure

The authentication issue originates from a malfunction within the Azure portal that affects the storage account keys used by Data Domain.

• Azure portal generated keys for the blob storage account become invalid or are marked as expired.
• The invalid/expired keys cause the Authorization header in the request to be formed incorrectly, leading to the error message:

  Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.

• This behavior is identified as a glitch in the Azure portal; the exact internal trigger is unknown.

Re‑authenticate Azure Cloud Profile on Data Domain

Prerequisites

• Administrative access to the Azure portal.
• Administrative access to the Data Domain system.
• Current Azure storage account name and URL.
• Maintenance window (optional) to avoid service disruption.

Resolution Steps

• Regenerate storage account keys in Azure
  1. Log in to the Azure portal .
  2. Navigate to Storage accounts and select the affected account.
  3. In the left‑hand menu, choose Access keys under Security + networking .
  4. Click Regenerate for key1 (or key2 if preferred).
  5. Copy the newly generated key to a secure location.
• Update the Cloud profile on Data Domain
  1. Log in to the Data Domain System Manager.
  2. Go to Cloud > Azure > Cloud Profiles .
  3. Select the profile that is failing authentication and click Edit .
  4. Replace the existing Access Key value with the new key copied from Azure.
  5. Confirm the Blob storage URL is correct (e.g.,

     https://.blob.core.windows.net/

     Save the changes.
• Validate the connection
  1. From the Data Domain UI, select the updated Azure profile and click Test Connection .
  2. Ensure the status returns Connected without authentication errors.

Verification

• Check the Cloud profile status page; it should display Connected and show the last successful sync timestamp.
• Review the Data Domain system logs for any remaining “Server failed to authenticate the request” messages.
• Confirm that data replication or backup jobs targeting Azure complete without errors.