You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/site-recovery/concepts-trusted-vm.md
+14-14Lines changed: 14 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: site-recovery
5
5
author: ankitaduttaMSFT
6
6
ms.service: site-recovery
7
7
ms.topic: conceptual
8
-
ms.date: 05/06/2024
8
+
ms.date: 05/09/2024
9
9
ms.author: ankitadutta
10
10
11
11
---
@@ -18,41 +18,41 @@ ms.author: ankitadutta
18
18
19
19
Find the support matrix for Azure trusted launch virtual machines with Azure Site Recovery:
20
20
21
-
-**Region**: Available in all [Azure Site Recovery supported public regions](./azure-to-azure-support-matrix.md#region-support).
21
+
-**Region**: Available in all [Azure Site Recovery supported regions](./azure-to-azure-support-matrix.md#region-support).
22
22
> [!NOTE]
23
23
> For [Azure government regions](../azure-government/documentation-government-overview-dod.md), both source and target location should either be in `US Gov` regions or both should be in `US DoD` regions. Setting source location of US Gov regions and target location of US DoD regions or vice versa isn't supported.
24
24
-**Operating system**: Support available only for Windows OS. Linux OS is currently not supported.
25
25
-**Private endpoints**: Azure trusted virtual machines can be protected using private endpoint configured recovery services vault with the following conditions:
26
-
- You can create a new recovery services vault and then configure private endpoints on it. You can then start protecting Azure Trusted VMs using it. You cannot protect Azure Trusted VMs using recovery services vault which are already created before public preview and have private endpoints configured.
27
-
-**Migration**: Migration of Azure Site Recovery protected existing Generation 1 Azure VMs to trusted VMs and [Generation 2 Azure virtual machines to trusted VMs](../virtual-machines/trusted-launch-existing-vm.md) isn't supported. [Learn more](#migrate-azure-site-recovery-protected-azure-generation-2-vm-to-trusted-vm)
28
-
-**Access**: Azure Site Recovery creates disks (replica and target disks) with public access enabled by default. To disable public access for these disks follow [these steps](./azure-to-azure-common-questions.md#disk-network-access).
26
+
- You can create a new recovery services vault and [configure private endpoints on it](./azure-to-azure-how-to-enable-replication-private-endpoints.md). Then you can start protecting Azure Trusted VMs using it.
27
+
- You can't protect Azure Trusted VMs using recovery services vault which are already created before public preview and have private endpoints configured.
28
+
-**Migration**: Migration of Azure Site Recovery protected existing Generation 1 Azure VMs to trusted VMs and [Generation 2 Azure virtual machines to trusted VMs](../virtual-machines/trusted-launch-existing-vm.md) isn't supported. [Learn more](#migrate-azure-site-recovery-protected-azure-generation-2-vm-to-trusted-vm) about migration of Generation 2 Azure VMs.
29
+
-**Disk Network Access**: Azure Site Recovery creates disks (replica and target disks) with public access enabled by default. To disable public access for these disks follow [these steps](./azure-to-azure-common-questions.md#disk-network-access).
29
30
-**Boot integrity monitoring**: Replication of [Boot integrity monitoring](../virtual-machines/boot-integrity-monitoring-overview.md) state isn't supported. If you want to use it, enable it explicitly on the failed over virtual machine.
-**Availability**: Available only for Azure-to-Azure scenario.
32
-
-**Action**: Enabling **Management** > **Site Recovery** option in *Create a new Virtual machine* flow is currently not supported.
31
+
-**Shared disks**: Trusted virtual machines with attached shared disks aren't currently supported.
32
+
-**Scenario**: Available only for Azure-to-Azure scenario.
33
+
-**Create a new VM flow**: Enabling **Management** > **Site Recovery** option in *Create a new Virtual machine* flow is currently not supported.
33
34
34
35
35
36
## Azure Site Recovery for trusted VMs
36
37
37
38
You can follow the same steps for Azure Site Recovery with trusted virtual machines as for Azure Site Recovery with standard Azure virtual machines.
38
39
39
-
- To configure Azure Site Recovery on trusted virtual machines to another region, [follow the steps](./azure-to-azure-tutorial-enable-replication.md).
40
-
- To enable replication to another zone within the same region, [follow the steps](./azure-to-azure-how-to-enable-zone-to-zone-disaster-recovery.md).
41
-
- To failover and failback trusted virtual machines, [follow the steps](./azure-to-azure-tutorial-failover-failback.md).
40
+
- To configure Azure Site Recovery on trusted virtual machines to another region, [follow these steps](./azure-to-azure-tutorial-enable-replication.md). To enable replication to another zone within the same region, [follow these steps](./azure-to-azure-how-to-enable-zone-to-zone-disaster-recovery.md).
41
+
- To failover and failback trusted virtual machines, [follow these steps](./azure-to-azure-tutorial-failover-failback.md).
42
42
43
43
44
44
## Migrate Azure Site Recovery protected Azure Generation 2 VM to trusted VM
45
45
46
46
Azure Generation 2 VMs protected by Azure Site Recovery cannot be migrated to trusted launch. While the portal blocks this migration, other channels like PowerShell and CLI do not. Before proceeding, review the migration [prerequisites](../virtual-machines/trusted-launch-existing-vm.md) and plan accordingly. If you still wish to migrate your Generation 2 Azure VM protected by Azure Site Recovery to Trusted Launch, follow these steps:
47
47
48
-
1. Disable Azure Site Recovery replication.
48
+
1.[Disable](./site-recovery-manage-registration-and-protection.md#disable-protection-for-a-azure-vm-azure-to-azure) Azure Site Recovery replication.
49
49
1. Uninstall Azure Site Recovery agent from the VM. To do this, follow these steps:
50
50
1. On the Azure portal, go to the virtual machine.
51
51
1. Select **Settings** > **Extensions**.
52
52
1. Select Site Recovery extension.
53
53
1. Select **Uninstall**.
54
-
1. Uninstall Azure Site Recovery mobility service using these commands.
55
-
1. Trigger the migration of Generation 2 VM to trusted launch VM.
54
+
1. Uninstall Azure Site Recovery mobility service using these [commands](./vmware-physical-manage-mobility-service.md#uninstall-mobility-service).
55
+
1. Trigger the migration of [Generation 2 VM to trusted launch VM](../virtual-machines/trusted-launch-existing-vm.md).
56
56
57
57
> [!NOTE]
58
58
> After migrating the virtual machine, the existing protection is disabled, deleting the existing recovery points. The migrated virtual machine is no longer protected by Azure Site Recovery. You must re-enable Azure Site Recovery protection on the trusted virtual machine, if needed.
0 commit comments