Adding Azure Blob Storage Account for Images

This Document provides a step by step guide to create a Blob Storage Account and add it in eShare Admin portal. This Storage account will store all In-Line Images/screenshots that are sent through the Secure Conversations or Emails secured by eShare SCG. The following steps will be reviewed:

• Creating a Storage Account

• Adding the Storage Account to eShare Admin Console

Create a Storage Account

1. Login to the Microsoft Azure Portal (For Commerical Customers: https://portal.azure.com | For Government Customers: https://portal.azure.us).

2. Select ‘All Services’ > the ‘Storage’ category > ‘Storage Accounts’.

3. In the Storage Accounts menu, select the ‘+ Create’ button to create a new storage account.

4. Fill in the necessary details such as:

   1. Subscription

   2. Resource Group

   3. Storage account name (The name must be unique across Azure, 3-24 characters long, and include only numbers and lowercase letters)

   4. Region (eShare service is hosted in EastUS)

   5. Performance (Premium is preferred but Standard is supported)

   6. Premium account type (only Block blobs are supported) *Will only appear if premium is selected

   7. Redundancy (up to the Organization)

5. No changes need to be made to the ‘Advanced’, ‘Data Protection’, or ‘Encryption’ sections.

6. For Network Connectivity, it is recommended to utilize the ‘Enable public access from selected IP addresses’ or ‘Disable public access and use private access’ options. Whichever is chosen, please inform your eShare Customer Service Manager and they will initiate the private link or provide the eShare service IP addresses.

7. After settings are selected, proceed to ‘Review + Create’ to provision the storage account, it will take a few minutes for it to be created.

8. Once the storage account is provisioned, find the ‘Security + networking’ menu and select ‘Access Keys’. Copy the Storage Account Name and Account key, these will be added to the eShare portal.

13. Once creation has completed, navigate to the Storage Account resource, go to the ‘Overview’ page, select ‘JSON View’, and send the Resource ID to your eShare Customer Success Manager so they can initiate the Private Endpoint Connection.

    

Approve Private Endpoint Connection

14. In the created newly database navigate to the ‘Security’ section and select ‘Networking’

15. Select the ‘Private Access’ tab, then under ‘Private endpoint connections” there will be a pending request, review the request and approve it.

Adding the Storage Account to eShare Admin Console

9. As an eShare Administrator, login to your organizations cloud web portal and select the Admin Console tab. In the Admin menu find ‘Azure blob settings’ and select ‘+ Add Blob storage’.

Note:

If the created blob is hosted in AzureGov, for step 10c) please ensure you append ;EndpointSuffix=core.usgovcloudapi.net to the end of the account key string

10. Fill in the following fields and select ‘Save account’:

    1. Name (Create a name or use the Storage account name)

    2. Account Name (The Storage account name copied in step 7)

    3. Authentication Key (The Account key coped in step 7)

    4. Authentication key type (Select Account Key)

    5. Enable HTTPS

11. Once saved, select the checkbox next to your newly added Blob Storage Account, then select ‘Enable SMG use’.

12. Your blob will now have ‘Email files/images’ under the ‘Configured Use’ column, if In-Line images are present in Secure emails or added to secure conversations, the images will now be stored in this Blob Storage Account.