Merge pull request #99540 from vrvkrajesh/master

Re-generate passphrase section added

Author: tiburd

articles/backup/backup-azure-file-folder-backup-faq.md

@@ -148,6 +148,33 @@ The cache folder and the metadata VHD do not have the necessary attributes for t
 Yes, you can use the **Change Properties** option in the MARS agent to adjust the bandwidth and timing. [Learn more](backup-configure-vault.md#enable-network-throttling).
 
 ## Restore
+### Manage
+**Can I recover if I forgot my passphrase?**<br>
+The Azure Backup agent requires a passphrase (that you provided during registration) to decrypt the backed up data during restore. Review the scenarios below to understand your options for handling a lost passphrase:<br>
+
+| Original Machine <br> *(source machine where backups were taken)* | Passphrase | Available Options |
+| --- | --- | --- |
+| Available |Lost |If your original machine (where backups were taken) is available and still registered with the same Recovery Services vault, then you will be able to regenerate the passphrase by following these <steps>  |
+| Lost |Lost |Not possible to recover the data or data is not available |
+
+Consider the following conditions:
+- If you uninstall & re-register the agent on the same original machine with
+ - *Same passphrase*, then you will be able to restore your backed up data.<br>
+ - *Different passphrase*, then you will not be able to restore your backed up data.
+-	If you install the agent on a *different machine* with<br>
+  - the same passphrase (used in the original machine), then you will be able to restore your backed up data.<br>
+  - a different passphrase, you will not be able to restore your backed up data.<br>
+-	Additionally, if your original machine is corrupted (preventing you from regenerating the passphrase through the MARS console); but you are able to restore/access the original scratch folder used by the MARS agent, then you might be able to restore (if you forgot the password). For more assistance, contact Customer Support.
+
+**How do I recover if I lost my original machine (where backups were taken)?**<br>
+
+If you have the same passphrase (that you provided during registration) of the original machine, then you can restore the backed up data to an alternate machine. Review the scenarios below to understand your restore options.
+
+| Original Machine | Passphrase | Available Options |
+| --- | --- | --- |
+| Lost |Available |You can install and register the MARS agent on another machine with the same passphrase that you provided during registration of the original machine. Choose **Recovery Option** > **Another location** to perform your restore. For more information, see
+| Lost |Lost |Not possible to recover the data or data is not available |
+
 
 ### What happens if I cancel an ongoing restore job?
 

articles/backup/backup-azure-manage-mars.md

@@ -95,14 +95,18 @@ There are two ways to stop protecting Files and Folders backup:
 ### Stop protection and retain backup data
 
 1. Open the MARS management console, go to the **Actions pane**, and **select Schedule Backup**.
+
     ![Modify or stop a scheduled backup.](./media/backup-azure-manage-mars/mars-actions.png)
 1. In **Select Policy Item** page, select **Modify a backup schedule for your files and folders** and click **Next**.
+
     ![Modify or stop a scheduled backup.](./media/backup-azure-manage-mars/select-policy-item-retain-data.png)
-1. From the **Modify or Stop a Scheduled Backup** page, select **Stop using this backup schedule, but keep the stored backups until a schedule is activated again**. Then, select **Next**.  
+1. From the **Modify or Stop a Scheduled Backup** page, select **Stop using this backup schedule, but keep the stored backups until a schedule is activated again**. Then, select **Next**.
+
     ![Modify or stop a scheduled backup.](./media/backup-azure-manage-mars/stop-schedule-backup.png)
-1. In **Pause Scheduled Backup** review the information and click **Finish**
+1. In **Pause Scheduled Backup** review the information and click **Finish**.
+
     ![Modify or stop a scheduled backup.](./media/backup-azure-manage-mars/pause-schedule-backup.png)
-1. in **Modify backup process** check your schedule backup pause is in success status and click **close** to finish.
+1. In **Modify backup process** check your schedule backup pause is in success status and click **close** to finish.
 
 ### Stop protection and delete backup data
 
@@ -132,15 +136,34 @@ After you delete the on-premises backup items, follow the next steps from the po
 If you stopped protection while retaining data and decided to resume protection, then you can re-enable the backup schedule using modify backup policy.
 
 1. On **Actions** select **Schedule backup**.
-1. Select **Re-enable backup schedule. You can also modify backup items or times** and click **Next**.
+1. Select **Re-enable backup schedule. You can also modify backup items or times** and click **Next**.<br>
+
     ![Delete the backup infrastructure.](./media/backup-azure-manage-mars/re-enable-policy-next.png)
 1. In **Select Items to Backup**, click **Next**.
+
     ![Delete the backup infrastructure.](./media/backup-azure-manage-mars/re-enable-next.png)
 1. In **Specify Backup Schedule**, specify the backup schedule and click **Next**.
 1. In **Select Retention Policy**, specify retention duration and click **Next**.
-1. Finally in **Conformation** screen, review the policy details and click **Finish**.
+1. Finally in the **Confirmation** screen, review the policy details and click **Finish**.
+
+## Re-generate passphrase
+
+A passphrase is used to encrypt and decrypt data while backing up or restoring your on-premises or local machine using the MARS agent to or from Azure. If you lost or forgot the passphrase, then you can regenerate the passphrase (provided your machine is still registered with the Recovery Services Vault and the backup is configured) by following these steps:
+
+- From the MARS agent console, go to **Actions Pane** > **Change properties** >. Then go to **Encryption tab**.<br>
+- Select **Change Passphrase** checkbox.<br>
+- Enter a new passphrase or click **Generate Passphrase**.
+- Click **Browse** to save the new passphrase.
+
+    ![Generate passphrase.](./media/backup-azure-manage-mars/passphrase.png)
+- Click **OK** to apply changes.  If the [Security Feature](https://docs.microsoft.com/azure/backup/backup-azure-security-feature#enable-security-features) is enabled on the Azure portal for the Recovery Services Vault, then you will be prompted to enter the Security PIN. To receive the PIN, follow the steps listed in this [article](https://docs.microsoft.com/azure/backup/backup-azure-security-feature#authentication-to-perform-critical-operations).<br>
+- Paste the security PIN from the portal and click **OK** to apply the changes.<br>
+
+    ![Generate passphrase.](./media/backup-azure-manage-mars/passphrase2.png)
+- Ensure that the passphrase is securely saved in an alternate location (other than the source machine), preferably in the Azure Key Vault. Keep track of all the passphrases if you have multiple machines being backed up with the MARS agents.
+
 
 ## Next steps
 
-- For information about supported scenarios and limitations, refer to the [Support Matrix for MARS](https://docs.microsoft.com/azure/backup/backup-support-matrix-mars-agent).
+- For information about supported scenarios and limitations, refer to the [Support Matrix for the MARS Agent](https://docs.microsoft.com/azure/backup/backup-support-matrix-mars-agent).
 - Learn more about [On demand backup policy retention behavior](backup-configure-vault.md#on-demand-backup-policy-retention-behavior).