Overview

This article explains how to configure a customer-managed Azure Storage Account to store binary files generated by Wiiisdom Cloud Platform.

Warnings & Prerequisites

• You need permissions to create and configure an Azure Storage Account.
• Wiiisdom Cloud Platform connects to the storage account using access keys.
• Network configuration depends on whether your storage account region is the same as (or paired with) the Wiiisdom Cloud Platform region.
• If your storage account is in the same region as Wiiisdom Cloud Platform, classic IP allowlisting does not apply; virtual network configuration is required.

Environment

• Microsoft Azure Portal
• Azure CLI (for virtual network rule configuration)
• Wiiisdom Cloud Platform configuration form for external storage

Procedure

Step 1 - Create the Azure Storage Account

1. In Azure Portal, open the Azure Storage Accounts service.

   

2. Select Create.

   

3. Configure Basic settings.

   

   Notes:

   • 1 : Region selection impacts network configuration. The application region is displayed in the Wiiisdom Cloud Platform external storage form. If you choose a region that is the same as your Wiiisdom Cloud Platform region, classic IP restriction will not work and you will need to follow the virtual network configuration.
   • 2 : Locally redundant storage (LRS) is sufficient for most use cases.
     • You can choose another redundancy option based on your IT policy.
     • Backup Vault with point-in-time recovery in another region/zone is recommended.

4. Configure Advanced settings.

   

   Note:

   • 1: Wiiisdom Cloud Platform connects to the Azure Storage Account using Access keys.

5. Configure Networking settings.

   

   Note:

   • 1: Depending on the Azure Storage Accounts, the network configuration is not the same. See the next section.

6. Configure Data protection settings.

   

   Note:

   • 1: You can also configure a Backup Vault.

7. Configure Encryption settings.

   

Step 2 - Configure Azure Storage Account Network rules (choose one option)

Option 1 - Storage account in a different region than Wiiisdom Cloud Platform

1. Open the storage account Networking configuration.
2. Add the Wiiisdom Cloud Platform outbound IP to the allow list.

Option 2 - Storage account in the same region or secondary region

1. Open the storage account Networking configuration.
2. Launch Azure CLI.

3. Run the following command:

az storage account network-rule add --resource-group <ressource group name> --account-name <storage account name> --subnet <full-subnet-id-of-Wiiisdom-Cloud-Platform>

4. Verify that the virtual network rule was added.

Step 3 - Configure Wiiisdom Cloud Platform

1. Retrieve the storage account access key from Azure.

   

2. Fill in and test the Wiiisdom Cloud Platform external storage form.
   

Validation & Verification

• The storage account is reachable from Wiiisdom Cloud Platform.
• The network rule (IP allow list or VNET rule) is present and active.
• The access key is valid in Wiiisdom Cloud Platform.
• Test upload/write from Wiiisdom Cloud Platform succeeds.

Troubleshooting

• Connection blocked: verify region-based network method (IP allow list vs VNET rule).
• CLI command fails: verify resource group name, storage account name, and subnet ID.
• Authentication fails: regenerate/re-enter storage account access key.
• Write test fails: verify storage account firewall and permission settings.

See Also

• Official Wiiisdom documentation for external customer storage configuration
• Azure Storage Account Keys management documentation