---
title: Configuring Azure storage
related:
- https://docs.kentico.com/k12sp/configuring-kentico/managing-sites/configuring-settings-for-sites/settings-system/settings-performance.md
- https://docs.kentico.com/k12sp/deploying-websites/running-kentico-on-microsoft-azure/configuring-azure-cdn.md
---
> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).
In some situations, it may be beneficial to store files of an on‑premise website on a **Microsoft Azure Blob Storage** account rather than on a local disk.
- For example, if your server has a limited storage capacity and you need to save large amounts of file data. Using Microsoft Azure may be more convenient than upgrading your server, especially if the increased requirements are only temporary.
- The same applies when running Kentico in [Azure Web Apps](https://docs.kentico.com/k12sp/deploying-websites/running-kentico-on-microsoft-azure/running-kentico-in-azure-web-apps.md), where use of blob storage is optional (unlike with Cloud Services).
> **Info:** **Mapping media files or the file system or storage accounts enforcing HTTPS connections**
>
> Storage accounts can be configured to communicate exclusively over HTTPS via the [Security transfer required](https://docs.microsoft.com/en-us/azure/storage/common/storage-require-secure-transfer) setting available in the [Azure portal](https://portal.azure.com). In such cases, additional configuration of the environment is required. See [Mapping files to storage accounts enforcing HTTPS connections](#mapping-files-to-storage-accounts-enforcing-https-connections) for details.
> **Note:** **File name case**
>
> Unlike standard Windows file systems, the Microsoft Azure Blob storage is case-sensitive. To ensure consistent behavior, Kentico automatically converts all file and folder names to lower case when processing files on Azure storage.
Mapping files to Azure storage
To map [media library](https://docs.kentico.com/k12sp/managing-website-content/working-with-files/media-library-files.md) folders to Azure storage, use the API and the built-in Azure storage provider:
1. Add the following keys to the _appSettings_ section of your project's **web.config** file. Specify the storage account name and primary access key:
```html
```
To locate the values of these keys on Microsoft Azure:
1. Open the [Azure Management Portal](https://portal.azure.com) in a browser and sign in.
2. Open **Storage accounts**.
3. Select your storage.
4. Switch to the **Access keys** tab.
- Use the **Storage account name** and one of the provided access key values.
2. If you are using the [MVC development model](https://docs.kentico.com/k12sp/developing-websites/mvc-development-overview.md), configure the same keys in the _web.config_ of your MVC live site application.
3. Open the Kentico solution in Visual Studio (using the **WebSite.sln** or **WebApp.sln** file).
4. Create a [custom module class](https://docs.kentico.com/k12sp/custom-development/creating-custom-modules/initializing-modules-to-run-custom-code.md). Add the class into a custom _Class Library_ project within the solution.
- For basic execution of initialization code, you only need to register a "code-only" module through the API. You do NOT need to create a new module within the **Modules** application in the Kentico administration interface.
5. Override the module's **OnInit** method and perform the following:
- Create a new instance of the Azure storage provider.
- (Optional) Specify the target container using the **CustomRootPath** property of the provider.
- (Optional) You can specify whether you want the container to be publicly accessible using the **PublicExternalFolderObject** property of the provider. _True_ means the container is publicly accessible.
- Map a directory to the provider. This is the directory that you want to store in the container.
```csharp
using CMS;
using CMS.Base;
using CMS.DataEngine;
using CMS.IO;
// Registers the custom module into the system
[assembly: RegisterModule(typeof(CustomInitializationModule))]
public class CustomInitializationModule : Module
{
// Module class constructor, the system registers the module under the name "CustomInit"
public CustomInitializationModule()
: base("CustomInit")
{
}
// Contains initialization code that is executed when the application starts
protected override void OnInit()
{
base.OnInit();
// Creates a new StorageProvider instance for Azure
var mediaProvider = StorageProvider.CreateAzureStorageProvider();
// Specifies the target container
mediaProvider.CustomRootPath = "mymediacontainer";
// Makes the container publicly accessible
mediaProvider.PublicExternalFolderObject = true;
// Maps the local media library directory to the provider
StorageHelper.MapStoragePath("~/MySite/Media/", mediaProvider);
}
}
```
6. Save the file. If your project is installed in the web application format, rebuild the solution.
7. If you are utilizing the [MVC development model](https://docs.kentico.com/k12sp/developing-websites/mvc-development-overview.md), you also need to deploy the assembly containing the custom storage provider code to the separate MVC application (in addition to the Kentico administration project).
The system now stores files from the _\~/MySite/Media/_ folder in the _mymediacontainer_ on the Azure storage. See the [Media library notes](#media-library-notes) section on this page for additional information about media libraries when using Azure storage.
> **Tip:** **Mapping media folders on instances with multiple sites**
>
> By default, each site has its own separate media folder in the project's file system: _\~//media_
>
> To map all media folders to Azure storage on Kentico instances with multiple sites, we recommend using a shared root folder for media libraries:
>
> 1. Open the **Settings** application in Kentico.
> 2. Navigate to the **Content -> Media** settings category.
> 3. Set the **Media libraries folder** to a custom folder (globally), for example: \~/SharedMedia
> 4. Enable the **Use site-specific subfolders for custom media libraries folder** setting to ensure that individual library folders are separated by site.
> 5. Click **Save**.
> 6. Move any existing media library files to the new location.
>
> You can then map the shared media folder to your Azure storage (using the API described above).
>
> If you wish to use the default media folder locations, you need to map each site's media folder in the code – for each site, create and configure a separate _StorageProvider_ instance and call the _StorageHelper.MapStoragePath_ method for the corresponding media folder.
> **Info:** **Using Azure storage for multiple projects**
>
> We do not recommend using a single shared storage for multiple projects (for example production and testing instances), because the projects would overwrite each others' files.
>
> However, you can use the **mediaProvider.CustomRootPath** property (as described on this page) to map each project to a different container. This way, each project has its own section of the Azure storage and overwriting of files does not occur.
## Mapping files to storage accounts enforcing HTTPS connections
Some external storage accounts may enforce HTTPS communication via the [Security transfer required](https://docs.microsoft.com/en-us/azure/storage/common/storage-require-secure-transfer) setting configurable in the [Azure portal](https://portal.azure.com). When mapping the file system or media library files to such accounts, you must include the [CMSAzureBlobEndPoint ](#optional-web.config-settings-for-azure-storage) configuration key in the application's **web.config** file. The key's value needs to contain the full endpoint URL of the external storage account and explicitly use the _https_ protocol:
```csharp
...
```
## Media library notes
Using the Azure Blob storage as an external storage for your project has some specific effects on media libraries.
### Storing too many files in one media library folder
Note that storing a large number of media files in a single folder can significantly affect the performance of user interface when editing files in the Media library application. The performance of the website, however, is not affected. See [Media library limitations when storing files in an external storage](https://docs.kentico.com/k12sp/configuring-kentico/configuring-the-environment-for-content-editors/configuring-media-libraries.md#media-library-limitations-when-storing-files-in-an-external-storage) for details.
### Using permanent links when CMSAzurePublicContainer key is set to true
If all following conditions are true:
- you use the Azure Blob storage as an external storage
- and you set the CMSAzurePublicContainer key to _true_
- and you want to use [content staging](https://docs.kentico.com/k12sp/deploying-websites/content-staging.md)
then **use Permanent links** when linking to media files in media libraries.
The reason is that when using the CMSAzurePublicContainer key, direct file links contain the name of the storage in the URL. These links are not updated when staging files to another server, which is typically connected to a different storage. As a result, staged links incorrectly target files from the source server's storage, or may become broken if the files are not exactly mirrored on the staging servers. Permanent links do not contain the name of the storage, and automatically target the correct storage for each server.
## Optional web.config settings for Azure storage
| Key | Description | Sample value |
| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------- |
| CMSAzureTempPath | The system uses the specified folder to store temporary files on a local disk, for example when transferring large files to or from the storage account. | `
` |
| CMSAzureCachePath | Specifies a folder on a local disk where files requested from the storage account are cached. This helps minimize the amount of blob storage operations, which saves time and resources. | `
` |
| CMSAzureBlobEndPoint | Sets the endpoint used for the connection to the blob service of the specified storage account. If you wish to use the default endpoint, remove the setting completely from the appropriate files. | `
` |
| CMSAzurePublicContainer | Indicates if the blob container used to store the application's file system is public. If true, it will be possible to access files directly through the URL of the appropriate blob service, for example:
_**http://.blob.core.windows.net/cmsroot/corporatesite/media/imagelibrary/logo.png**_
When you set this key to true, please see the [Media library notes](#media-library-notes) section\*.\* | `
` |
| CMSAzureCDNEndpoint | URL of the HTTP endpoint of a [Azure Blob storage CDN](https://docs.kentico.com/k12sp/deploying-websites/running-kentico-on-microsoft-azure/configuring-azure-cdn.md).
**Note:** If you set the CMSAzureCDNEndpoint key, you also need to set the blob storage container to public - ****. | `
` |
| CMSDownloadBlobTimeout | Specifies the timeout interval in minutes for importing files from Azure Blob storage into Kentico.
The default value is _1.5_ minutes. Increase the interval if you encounter problems when importing large (about 2GB) files. | `
` |