Skip to content

Commit 6468fae

Browse files
Merge pull request #268678 from chen-karen/main
Update disaster-recovery-guide.md
2 parents 290c0f8 + 5870742 commit 6468fae

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

articles/key-vault/managed-hsm/disaster-recovery-guide.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -103,14 +103,14 @@ To create an HSM backup, you'll need:
103103
- A storage account where the backup will be stored
104104
- A blob storage container in this storage account where the backup process will create a new folder to store encrypted backup
105105

106-
We use `az keyvault backup` command to the HSM backup in the storage container **mhsmbackupcontainer**, which is in the storage account **ContosoBackup** in the following example. We create a SAS token that expires in 30 minutes and provide that to Managed HSM to write the backup.
106+
We use `az keyvault backup` command to the HSM backup in the storage container **mhsmbackupcontainer**, which is in the storage account **mhsmdemobackup** in the following example. We create a SAS token that expires in 30 minutes and provide that to Managed HSM to write the backup.
107107

108108
```azurecli-interactive
109109
end=$(date -u -d "500 minutes" '+%Y-%m-%dT%H:%MZ')
110-
skey=$(az storage account keys list --query '[0].value' -o tsv --account-name ContosoBackup)
110+
skey=$(az storage account keys list --query '[0].value' -o tsv --account-name mhsmdemobackup)
111111
az storage container create --account-name mhsmdemobackup --name mhsmbackupcontainer --account-key $skey
112-
sas=$(az storage container generate-sas -n mhsmbackupcontainer --account-name ContosoBackup --permissions crdw --expiry $end --account-key $skey -o tsv)
113-
az keyvault backup start --hsm-name ContosoMHSM2 --storage-account-name ContosoBackup --blob-container-name mhsmdemobackupcontainer --storage-container-SAS-token $sas
112+
sas=$(az storage container generate-sas -n mhsmbackupcontainer --account-name mhsmdemobackup --permissions crdw --expiry $end --account-key $skey -o tsv)
113+
az keyvault backup start --hsm-name ContosoMHSM2 --storage-account-name mhsmdemobackup --blob-container-name mhsmdemobackupcontainer --storage-container-SAS-token $sas
114114
115115
```
116116

@@ -121,6 +121,7 @@ For this step you need:
121121
- The storage account and the blob container in which the source HSM's backups are stored.
122122
- The folder name from where you want to restore the backup. If you create regular backups, there will be many folders inside this container.
123123

124+
We use `az keyvault restore` command to the new HSM **ContosoMHSM2**, using the backup of the source MHSM we are trying to restore, which is in the folder name **mhsm-ContosoMHSM-2020083120161860** found in the storage container **mhsmdemobackupcontainer** of the storage account **ContosoBackup** in the following example. We create a SAS token that expires in 30 minutes and provide that to Managed HSM to write the restore.
124125

125126
```azurecli-interactive
126127
end=$(date -u -d "500 minutes" '+%Y-%m-%dT%H:%MZ')

0 commit comments

Comments
 (0)