Merge pull request #246047 from AbhishekMallick-MS/Jul-24-2023-CrrMARS

CRR support for MARS agent - public preview release

Author: v-dirichards

articles/backup/about-restore-microsoft-azure-recovery-services.md

@@ -3,7 +3,7 @@ title: Restore options with Microsoft Azure Recovery Services (MARS) agent
 description: Learn about the restore options available with the Microsoft Azure Recovery Services (MARS) agent.
 ms.reviewer: mepand
 ms.topic: conceptual
-ms.date: 05/07/2021
+ms.date: 08/14/2023
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
 ---
@@ -29,8 +29,31 @@ Using the MARS agent you can:
 - **[Restore all backed up files in a volume](restore-all-files-volume-mars.md):** This option recovers all backed up data in a specified volume from the recovery point in Azure Backup. It allows a faster transfer speed (up to 40 MBPS).<br>We recommend you to use this option for recovering large amounts of data, or entire volumes.
 - **[Restore a specific set of backed up files and folders in a volume using PowerShell](backup-client-automation.md#restore-data-from-azure-backup):** If the paths to the files and folders relative to the volume root are known, this option allows you to restore the specified set of files and folders from a recovery point, using the faster transfer speed of the full volume restore. However, this option doesn’t provide the convenience of browsing files and folders in the recovery point using the Instant Restore option.
 - **[Restore individual files and folders using Instant Restore](backup-azure-restore-windows-server.md):** This option allows quick access to the backup data by mounting volume in the recovery point as a drive. You can then browse, and copy files and folders. This option offers a copy speed of up to 6 MBPS, which is suitable for recovering individual files and folders of total size less than 80 GB. Once the required files are copied, you can unmount the recovery point.
+- **Cross Region Restore for MARS (preview)**: If your Recovery Services vault uses GRS resiliency and has the [Cross Region Restore setting turned on](backup-create-recovery-services-vault.md#set-cross-region-restore), you can restore the backup data from the secondary region.
+
+## Cross Region Restore (preview)
+
+Cross Region Restore (CRR) allows you to restore MARS backup data from a secondary region, which is an Azure paired region. This enables you to conduct drills for audit and compliance, and recover data during the unavailability of the primary region in Azure in the case of a disaster. 
+
+To use this feature:
+
+1. [Turn on Cross Region Restore in your Recovery Services vault](backup-create-rs-vault.md#set-cross-region-restore). Once Cross Region Restore is enabled, you can't disable it.
+2. After you turn on the feature, it can take up to *48 hours* for the backup items to be available in the secondary region. Currently, the secondary region RPO is *36 hours*, because the RPO in the primary region is *24 hours*, and it can take up to *12 hours* to replicate the backup data from the primary to secondary region.
+3. To restore the backup data for the original machine, you can directly select **Secondary Region** as the source of the backup data in the wizard.
+
+   :::image type="content" source="./media/backup-azure-restore-windows-server/select-source-region-for-restore.png" alt-text="Screenshot shows the selection for secondary region as the backup data source during Cross Region Restore.":::
+
+4. To restore backup data for an alternate server from the secondary region, you need to download the *Secondary Region vault credential* from the Azure portal.
+
+   :::image type="content" source="./media/about-restore-microsoft-azure-recovery-services/download-vault-credentials-for-cross-region-restore.png" alt-text="Screenshot shows how to download vault credentials for secondary region.":::
+
+5. To automate recovery from secondary region for audit or compliance drills, [use this command](backup-client-automation.md#cross-region-restore). 
+
+>[!Note]
+>- Recovery Services vaults with private endpoint are currently not supported for Cross Region Restore with MARS.
+>- Recovery Services vaults enabled with Cross Region Restore will be automatically charged at RA-GRS rates for the MARS backups stored in the vault once the feature is generally available.
 
 ## Next steps
 
-- For more frequently asked questions, see [MARS agent FAQs](backup-azure-file-folder-backup-faq.yml).
+- For additional frequently asked questions, see [MARS agent FAQs](backup-azure-file-folder-backup-faq.yml).
 - For information about supported scenarios and limitations, see [Support Matrix for the backup with the MARS agent](backup-support-matrix-mars-agent.md).

articles/backup/backup-azure-file-folder-backup-faq.yml

@@ -4,7 +4,7 @@ metadata:
   description: Addresses common questions about backing up files and folders with Azure Backup.
   ms.topic: faq
   ms.service: backup
-  ms.date: 02/25/2022
+  ms.date: 08/14/2023
   author: AbhishekMallick-MS
   ms.author: v-abhmallick
 title: Frequently asked questions - Microsoft Azure Recovery Services (MARS) agent
@@ -23,9 +23,18 @@ sections:
       - question: |
           Where can I download the vault credentials file?
         answer: |
-          In the Azure portal, navigate to **Properties** for your vault. Under **Backup Credentials**, select the checkbox for **Already using the latest Recovery Services Agent**. Select **Download**.
+          In the Azure portal, go to **Properties** for your vault. Under **Backup Credentials**, select **Download**.
+
+          - If you want to register your MARS agent or restore data from the primary region, select **Primary Region**, *confirm* that you're using the latest Recovery Services Agent, and then select **Download**.
+          - If you're doing an alternate server restore from the backup data in the secondary region using Cross Region Restore, then select **Secondary Region** to download the vault credentials.
+          
+          :::image type="content" source="./media/backup-azure-file-folder-backup-faq/download-vault-credentials.png" alt-text="Screenshot shows how to initiate downloading vault credential file.":::
+
+          :::image type="content" source="./media/backup-azure-file-folder-backup-faq/download-vault-credential-file.png" alt-text="Screenshot shows the Download option for vault credential files in secondary region.":::
+            >[!Note]
+            >You can't use this secondary region vault credential for registration of the MARS agent.
+          
           
-          ![Download credentials](./media/backup-azure-file-folder-backup-faq/download-credentials.png)
           
       - question: |
           How long are vault credentials valid?

articles/backup/backup-azure-restore-system-state.md

@@ -2,7 +2,7 @@
 title: Restore System State to a Windows Server
 description: Step-by-step explanation for restoring Windows Server System State from a backup in Azure.
 ms.topic: conceptual
-ms.date: 12/09/2022
+ms.date: 08/14/2023
 ms.service: backup
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
@@ -14,6 +14,7 @@ This article explains how to restore Windows Server System State backups from an
 1. Restore System State as files from Azure Backup. When restoring System State as files from Azure Backup, you can either:
    * Restore System State to the same server where the backups were taken, or
    * Restore System State file to an alternate server.
+   * If you have Cross Region Restore enabled in your vault, you can restore the backup data from a secondary region.
 
 2. Apply the restored System State files to a Windows Server using the Windows Server Backup utility.
 
@@ -33,6 +34,10 @@ The following steps explain how to roll back your Windows Server configuration t
 
     ![Choose this server option to restore the data to the same machine](./media/backup-azure-restore-system-state/samemachine.png)
 
+   If you have enabled Cross Region Restore (preview) and want to restore from the secondary region, select **Secondary Region**. Else, select **Primary Region**.
+
+   :::image type="content" source="./media/backup-azure-restore-windows-server/select-source-region-for-restore.png" alt-text="Screenshot shows the selection of the source region of recovery point.":::
+
 4. On the **Select Recovery Mode** pane, choose **System State** and then select **Next**.
 
     ![Browse files](./media/backup-azure-restore-system-state/recover-type-selection.png)
@@ -84,6 +89,10 @@ The terminology used in these steps includes:
 
 5. Provide the vault credential file that corresponds to the *Sample vault*. If the vault credential file is invalid (or expired), download a new vault credential file from the *Sample vault* in the Azure portal. Once the vault credential file is provided, the Recovery Services vault associated with the vault credential file appears.
 
+   If you want to use Cross Region Restore to restore the backup data from the secondary region, you need to download the *Secondary Region vault credential file* from the Azure portal, and then pass the file in the MARS agent.
+
+   :::image type="content" source="./media/backup-azure-restore-windows-server/pass-vault-credentials-in-mars-agent.png" alt-text="Screenshot shows the secondary vault credentials passed in MARS agent.":::
+
 6. On the Select Backup Server pane, select the *Source machine* from the list of displayed machines.
 7. On the Select Recovery Mode pane, choose **System State** and select **Next**.
 

articles/backup/backup-azure-restore-windows-server.md

@@ -1,8 +1,8 @@
 ---
 title: Restore files to Windows Server using the MARS Agent
 description: In this article, learn how to restore data stored in Azure to a Windows server or Windows computer with the Microsoft Azure Recovery Services (MARS) Agent.
-ms.topic: conceptual
-ms.date: 09/07/2018
+ms.topic: how-to
+ms.date: 08/14/2023
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
 ---
@@ -12,8 +12,9 @@ This article explains how to restore data from a backup vault. To restore data,
 
 * Restore data to the same machine from which the backups were taken.
 * Restore data to an alternate machine.
+* If you have Cross Region Restore enabled on your vault, you can restore the backup data from the secondary region.
 
-Use the Instant Restore feature to mount a writeable recovery point snapshot as a recovery volume. You can then explore the recovery volume and copy files to a local computer, in that way selectively restoring files.
+Use the Instant Restore feature to mount a writeable recovery point snapshot as a recovery volume. You can then explore the recovery volume and copy files to a local computer, thus selectively restoring files.
 
 > [!NOTE]
 > The [January 2017 Azure Backup update](https://support.microsoft.com/help/3216528/azure-backup-update-for-microsoft-azure-recovery-services-agent-januar) is required if you want to use Instant Restore to restore data. Also, the backup data must be protected in vaults in locales listed in the support article. Consult the [January 2017 Azure Backup update](https://support.microsoft.com/help/3216528/azure-backup-update-for-microsoft-azure-recovery-services-agent-januar) for the latest list of locales that support Instant Restore.
@@ -39,6 +40,11 @@ If you accidentally deleted a file and want to restore it to the same machine (f
 
     ![Screenshot of Recover Data Wizard Getting Started page (restore to same machine)](./media/backup-azure-restore-windows-server/samemachine_gettingstarted_instantrestore.png)
 
+   If you have enabled Cross Region Restore (preview) and want to restore from the secondary region, select **Secondary Region**. Else, select **Primary Region**.
+
+   :::image type="content" source="./media/backup-azure-restore-windows-server/select-source-region-for-restore.png" alt-text="Screenshot shows the selection of the source region of recovery point.":::
+
+
 4. On the **Select Recovery Mode** page, choose
    **Individual files and folders** > **Next**.
 
@@ -102,10 +108,16 @@ These steps include the following terminology:
 
     ![Screenshot of Recover Data Wizard Getting Started page (restore to alternate machine)](./media/backup-azure-restore-windows-server/alternatemachine_gettingstarted_instantrestore.png)
 
-5. Provide the vault credential file that corresponds to the sample vault, and select **Next**.
+5. Provide the vault credential file that corresponds to the sample vault.
 
     If the vault credential file is invalid (or expired), [download a new vault credential file from the sample vault](backup-azure-file-folder-backup-faq.yml#where-can-i-download-the-vault-credentials-file-) in the Azure portal. After you provide a valid vault credential, the name of the corresponding backup vault appears.
 
+    If you want to use Cross Region Restore to restore backup data from the secondary region, you need to download the *Secondary Region* vault credential file* from the Azure portal, and then pass the file in the MARS agent.
+
+   :::image type="content" source="./media/backup-azure-restore-windows-server/pass-vault-credentials-in-mars-agent.png" alt-text="Screenshot shows the vault credentials added to MARS agent.":::
+
+   Select **Next** to continue.
+
 6. On the **Select Backup Server** page, select the source machine from the list of displayed machines, and provide the passphrase. Then select **Next**.
 
     ![Screenshot of Recover Data Wizard Select Backup Server page (restore to alternate machine)](./media/backup-azure-restore-windows-server/alternatemachine_selectmachine_instantrestore.png)

articles/backup/backup-client-automation.md

@@ -1,8 +1,8 @@
 ---
 title: Use PowerShell to back up Windows Server to Azure
 description: In this article, learn how to use PowerShell to set up Azure Backup on Windows Server or a Windows client, and manage backup and recovery.
-ms.topic: conceptual
-ms.date: 08/24/2021 
+ms.topic: how-to
+ms.date: 08/29/2021 
 ms.custom: devx-track-azurepowershell, has-azure-ad-ps-ref
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
@@ -131,7 +131,7 @@ $CredsPath = "C:\downloads"
 $CredsFilename = Get-AzRecoveryServicesVaultSettingsFile -Backup -Vault $Vault1 -Path $CredsPath
 ```
 
-### Registering using the PS Az module
+### Register using the PowerShell Az module
 
 > [!NOTE]
 > A bug with generation of vault certificate is fixed in Az 3.5.0 release. Use Az 3.5.0 release version or greater to download a vault certificate.
@@ -228,9 +228,9 @@ Server properties updated successfully
 
 All backups from Windows Servers and clients to Azure Backup are governed by a policy. The policy includes three parts:
 
-1. A **backup schedule** that specifies when backups need to be taken and synchronized with the service.
-2. A **retention schedule** that specifies how long to retain the recovery points in Azure.
-3. A **file inclusion/exclusion specification** that dictates what should be backed up.
+- A **backup schedule** that specifies when backups need to be taken and synchronized with the service.
+- A **retention schedule** that specifies how long to retain the recovery points in Azure.
+- A **file inclusion/exclusion specification** that dictates what should be backed up.
 
 In this document, since we're automating backup, we'll assume nothing has been configured. We begin by creating a new backup policy using the [New-OBPolicy](/powershell/module/msonlinebackup/new-obpolicy) cmdlet.
 
@@ -676,7 +676,41 @@ Job completed.
 The recovery operation completed successfully.
 ```
 
-## Uninstalling the Azure Backup agent
+## Cross Region Restore
+
+Cross Region Restore (CRR) allows you to restore MARS backup data from a secondary region, which is an Azure paired region. This enables you to conduct drills for audit and compliance, and recover data during the unavailability of the primary region in Azure in the case of a disaster.
+
+### Original server restore
+
+If you're performing restore for the original server from the secondary region (Cross Region Restore), use the flag `UseSecondaryRegion` while getting the `OBRecoverableSource` object. 
+
+```azurepowershell
+$sources = Get-OBRecoverableSource -UseSecondaryRegion
+$RP = Get-OBRecoverableItem -Source $sources[0]
+$RO = New-OBRecoveryOption -DestinationPath $RecoveryPath -OverwriteType Overwrite
+Start-OBRecovery -RecoverableItem $RP -RecoveryOption $RO -Async | ConvertTo-Json
+
+```
+
+### Alternate server restore
+
+If you're performing restore for an alternate server from the secondary region (Cross Region Restore), download the *secondary region vault credential file* from the Azure portal and pass the secondary region vault credential for restore.
+
+```azurepowershell
+$serverName = ‘myserver.mycompany.com’
+$secVaultCred = “C:\Users\myuser\Downloads\myvault_Mon Jul 17 2023.VaultCredentials”
+$passphrase = ‘Default Passphrase’
+$alternateServers = Get-OBAlternateBackupServer -VaultCredentials $secVaultCred
+$altServer = $alternateServers[2] | Where-Object {$_.ServerName -Like $serverName}
+$pwd = ConvertTo-SecureString -String $passphrase -AsPlainText -Force
+$sources = Get-OBRecoverableSource $altServer
+$RP = Get-OBRecoverableItem -Source $sources[0]
+$RO = New-OBRecoveryOption
+Start-OBRecoveryMount -RecoverableItem $RP -RecoveryOption $RO -EncryptionPassphrase $pwd  -Async | ConvertTo-Json 
+
+```
+
+## Uninstall the Azure Backup agent
 
 Uninstalling the Azure Backup agent can be done by using the following command: