To add a cloud storage group, complete the following steps

1. In the navigation menu, click Cloud Storage to expand the menu, then click Cloud Tier.
2. In the Cloud pane, click Configure to add a cloud tier.
3. In the Cloud Provider drop-down, select Backblaze S3 .
4. Provide the S3 Bucket name in your cloud platform to which cloud replicated data to be written.
5. Enter your Connection String using one of the two methods below:
   • Default - This option will compile your connection string into the correct format using the inputs below.
     • Access key - Enter the "Application Key ID" created in the Backblaze Console. The access key is typically 20 upper-case English characters.

       NOTE: Please refer to the Backblaze Cloud provider documentation for creating Application Key ID and Application Key for your account at https://help.backblaze.com/hc/en-us/articles/360047425453-Getting-Started-with-the-S3-Compatible-API.

     • Secret key - Enter the 'Application Key' which is Backblaze Cloud provider equivalent of the Secret Key. It is typically 40 characters, including mixed upper and lower-case and special symbols.
     • Endpoint -. Provide the S3 endpoint URL for the region for which the S3 bucket is to be created.
   • Custom - This option allows you to enter your connection string with additional parameters.
     • The BackBlaze connection string uses the following syntax:

       "accesskey=<ABDCEWERS>;secretkey=< >; loglevel=warn;endpoint= https://s3.<region>.backblazeb2.com;"

       Please note the following:

       1. The access key: Enter the "Application Key ID" created in the Backblaze Console. The access key is typically 20 upper-case English characters
       2. The secret key: Enter the 'Application Key' which is Backblaze Cloud provider equivalent of the Secret Key. The secret key is generated automatically by the cloud provider. It is typically 40 characters, including mixed upper and lower-case and special symbols.
       3. The Endpoint - Provide the S3 endpoint URLfor the region for which the S3 bucket is to be created.

     An example of a connection string with this syntax follows. Logically, each connection string is unique.

     accesskey=AKIASAMPLEJUCWK;secretkey=p+SAMPLE1QbuPazHX1IdWbwgFplxuVlO8J;loglevel=warn;endpoint=https://s3.us-west-004.backblazeb2.com

6. Enable Cloud Locking: Select this option to achieve immutability of data tiered to the cloud.
   
   NOTE:Cloud Locking works with RDA and Object containers only. Data that is set as immutable on the local storage is also set as immutable when tiered to the cloud.
   
   

   Enabling locking at the Cloud Tier is required so the containers that are tiering data to this Cloud Tier can choose to enable locking as part of their cloud tiering policy.

7. To apply encryption, select Encryption and enter the following:
   • Passphrase — The passphrase is user-defined and is used to generate a passphrase key that encrypts the file in which the content encryption keys are kept. The passphrase is a human readable key, which can be up to 255 bytes in length.

     IMPORTANT: It is mandatory to define a passphrase to enable encryption. If the passphrase is compromised or lost, the administrator should change it immediately so that the content encryption keys do not become vulnerable. If this passphrase is lost or forgotten, data in the cloud will be unrecoverable.

   • Confirm Passphrase — Re-enter the passphrase used above.
8. Click Configure. A Cloud Storage Group will be created.
9. To enable replication to the cloud, you must link a local container to the cloud using the procedures in Adding a cloud tiering policy.