You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/backup/backup-azure-security-feature-cloud.md
+20-20Lines changed: 20 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ author: dcurwin
5
5
manager: carmonm
6
6
ms.service: backup
7
7
ms.topic: conceptual
8
-
ms.date: 08/04/2019
8
+
ms.date: 09/13/2019
9
9
ms.author: dacurwin
10
10
---
11
11
# Security features to help protect cloud workloads that use Azure Backup
@@ -20,47 +20,47 @@ Concerns about security issues, like malware, ransomware, and intrusion, are inc
20
20
21
21
### Supported regions
22
22
23
-
Soft delete is currently supported in the West Central US region and EastAsia.
23
+
Soft delete is currently supported in the West Central US, East Asia, Canada Central, Canada East, France Central, France South, Korea Central, Korea South, UK South, UK West, Australia East, Australia South East, North Europe, West US, West US2, Central US, South East Asia, North Central US, South Central US, Japan East, Japan West, India South, India Central, India West, East US 2, Switzerland North, Switzerland West and all National regions.
24
24
25
25
### Soft delete for VMs
26
26
27
27
1. In order to delete the backup data of a VM, the backup must be stopped. In the Azure portal, go to your recovery services vault, right-click on the backup item and choose **Stop backup**.
28
28
29
-

29
+

30
30
31
31
2. In the following window, you will be given a choice to delete or retain the backup data. If you choose **Delete backup data** and then **Stop backup**, the VM backup will not be permanently deleted. Rather, the backup data will be retained for 14 days in the soft deleted state. If **Delete backup data** is chosen, a delete email alert is sent to the configured email ID informing the user that 14 days remain of extended retention for backup data. Also, an email alert is sent on the 12th day informing that there are two more days left to resurrect the deleted data. The deletion is deferred until the 15th day, when permanent deletion will occur and a final email alert is sent informing about the permanent deletion of the data.
32
32
33
-

33
+

34
34
35
35
3. During those 14 days, in the Recovery Services Vault, the soft deleted VM will appear with a red “soft-delete” icon next to it.
36
36
37
-

37
+

38
38
39
-
> [!NOTE]
40
-
> If any soft-deleted backup items are present in the vault, the vault cannot be deleted at that time. Please try vault deletion after the backup items are permanently deleted, and there is no item in soft deleted state left in the vault.
39
+
> [!NOTE]
40
+
> If any soft-deleted backup items are present in the vault, the vault cannot be deleted at that time. Please try vault deletion after the backup items are permanently deleted, and there is no item in soft deleted state left in the vault.
41
41
42
42
4. In order to restore the soft-deleted VM, it must first be undeleted. To undelete, choose the soft-deleted VM, and then click on the option **Undelete**.
43
43
44
-

44
+

45
45
46
-
A window will appear warning that if undelete is chosen, all restore points for the VM will be undeleted and available for performing a restore operation. The VM will be retained in a “stop protection with retain data” state with backups paused and backup data retained forever with no backup policy effective.
46
+
A window will appear warning that if undelete is chosen, all restore points for the VM will be undeleted and available for performing a restore operation. The VM will be retained in a “stop protection with retain data” state with backups paused and backup data retained forever with no backup policy effective.
47
47
48
-

48
+

49
49
50
-
At this point, you can also restore the VM by selecting **Restore VM** from the chosen restore point.
50
+
At this point, you can also restore the VM by selecting **Restore VM** from the chosen restore point.
51
51
52
52

53
53
54
-
> [!NOTE]
55
-
> Garbage collector will run and clean expired recovery points only after the user performs the **Resume backup** operation.
54
+
> [!NOTE]
55
+
> Garbage collector will run and clean expired recovery points only after the user performs the **Resume backup** operation.
56
56
57
57
5. After the undelete process is completed, the status will return to “Stop backup with retain data” and then you can choose **Resume backup**. The **Resume backup** operation brings back the backup item in the active state, associated with a backup policy selected by the user defining the backup and retention schedules.
58
58
59
-

59
+

60
60
61
61
This flow chart shows the different steps and states of a backup item:
62
62
63
-

63
+

64
64
65
65
For more information, see the [Frequently Asked Questions](backup-azure-security-feature-cloud.md#frequently-asked-questions) section below.
66
66
@@ -95,23 +95,23 @@ No, it is built and enabled by default for all the recovery services vaults.
95
95
#### Can I configure the number of days for which my data will be retained in soft-deleted state after delete operation is complete?
96
96
97
97
No, it is fixed to 14 days of additional retention after the delete operation.
98
-
98
+
99
99
#### Do I need to pay the cost for this additional 14-day retention?
100
100
101
101
No, this 14-day additional retention comes for free of cost as a part of soft-delete functionality.
102
-
102
+
103
103
#### Can I perform a restore operation when my data is in soft delete state?
104
104
105
105
No, you need to undelete the soft deleted resource in order to restore. The undelete operation will bring the resource back into the **Stop protection with retain data state** where you can restore to any point in time. Garbage collector remains paused in this state.
106
-
106
+
107
107
#### Will my snapshots follow the same lifecycle as my recovery points in the vault?
108
108
109
109
Yes.
110
-
110
+
111
111
#### How can I trigger the scheduled backups again for a soft-deleted resource?
112
112
113
113
Undelete followed by resume operation will protect the resource again. Resume operation associates a backup policy to trigger the scheduled backups with the selected retention period. Also, the garbage collector runs as soon as the resume operation completes. If you wish to perform a restore from a recovery point that is past its expiry date, you are advised to do it before triggering the resume operation.
114
-
114
+
115
115
#### Can I delete my vault if there are soft deleted items in the vault?
116
116
117
117
Recovery Services vault cannot be deleted if there are backup items in soft-deleted state in the vault. The soft-deleted items are permanently deleted after 14 days of delete operation. You can delete the vault only after all the soft deleted items have been purged.
Copy file name to clipboardExpand all lines: articles/backup/backup-azure-troubleshoot-vm-backup-fails-snapshot-timeout.md
+8-11Lines changed: 8 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -100,12 +100,12 @@ After you register and schedule a VM for the Azure Backup service, Backup initia
100
100
**Cause 5: Backup service doesn't have permission to delete the old restore points because of a resource group lock** <br>
101
101
**Cause 6: [The VM doesn't have internet access](#the-vm-has-no-internet-access)**
102
102
103
-
## UserErrorUnsupportedDiskSize - Currently Azure Backup does not support disk sizes greater than 4095 GB
103
+
## UserErrorUnsupportedDiskSize - The configured disk size(s) is currently not supported by Azure Backup.
104
104
105
105
**Error code**: UserErrorUnsupportedDiskSize <br>
106
-
**Error message**: Currently Azure Backup does not support disk sizes greater than 4095 GB <br>
106
+
**Error message**: The configured disk size(s) is currently not supported by Azure Backup. <br>
107
107
108
-
Your backup operation could fail when backing up a VM with a disk size greater than 4095 GB. To sign up for a limited public preview of Azure Backup large disk support for disks greater than 4 TB and up to 30 TB in size, refer to this [article](backup-azure-vms-introduction.md#limited-public-preview-backup-of-vm-with-disk-sizes-up-to-30tb).
108
+
Your backup operation could fail when backing up a VM with a disk size greater than 30 TB. Also, backup of encrypted disks greater than 4TB in size is not supported today. Ensure that the disk size(s) is less than or equal to the supported limit by splitting the disk(s).
109
109
110
110
## UserErrorBackupOperationInProgress - Unable to initiate backup as another backup operation is currently in progress
111
111
@@ -117,12 +117,10 @@ Your recent backup job failed because there is an existing backup job in progres
117
117
1. Sign in to the Azure portal, click **All services**. Type Recovery Services and click **Recovery Services vaults**. The list of recovery services vaults appears.
118
118
2. From the list of recovery services vaults, select a vault in which the backup is configured.
119
119
3. On the vault dashboard menu, click **Backup Jobs** it displays all the backup jobs.
120
-
121
-
- If a backup job is in progress, wait for it to complete or cancel the backup job.
122
-
- To cancel the backup job, right-click on the backup job and click **Cancel** or use [PowerShell](https://docs.microsoft.com/powershell/module/az.recoveryservices/stop-azrecoveryservicesbackupjob?view=azps-1.4.0).
123
-
- If you have reconfigured the backup in a different vault, then ensure there are no backup jobs running in the old vault. If it exists, then cancel the backup job.
124
-
- To cancel the backup job, right-click on the backup job and click **Cancel** or use [PowerShell](https://docs.microsoft.com/powershell/module/az.recoveryservices/stop-azrecoveryservicesbackupjob?view=azps-1.4.0)
125
-
120
+
- If a backup job is in progress, wait for it to complete or cancel the backup job.
121
+
- To cancel the backup job, right-click on the backup job and click **Cancel** or use [PowerShell](https://docs.microsoft.com/powershell/module/az.recoveryservices/stop-azrecoveryservicesbackupjob?view=azps-1.4.0).
122
+
- If you have reconfigured the backup in a different vault, then ensure there are no backup jobs running in the old vault. If it exists, then cancel the backup job.
123
+
- To cancel the backup job, right-click on the backup job and click **Cancel** or use [PowerShell](https://docs.microsoft.com/powershell/module/az.recoveryservices/stop-azrecoveryservicesbackupjob?view=azps-1.4.0)
126
124
4. Retry backup operation.
127
125
128
126
If the scheduled backup operation is taking longer, conflicting with the next backup configuration, then review the [Best Practices](backup-azure-vms-introduction.md#best-practices), [Backup Performance](backup-azure-vms-introduction.md#backup-performance), and [Restore consideration](backup-azure-vms-introduction.md#backup-and-restore-considerations).
@@ -151,8 +149,7 @@ The VM agent might have been corrupted, or the service might have been stopped.
151
149
4. Download and install the [latest version of the agent MSI](https://go.microsoft.com/fwlink/?LinkID=394789&clcid=0x409). You must have Administrator rights to complete the installation.
152
150
5. Verify that the Windows Azure Guest Agent services appear in services.
153
151
6. Run an on-demand backup:
154
-
155
-
- In the portal, select **Backup Now**.
152
+
- In the portal, select **Backup Now**.
156
153
157
154
Also, verify that [Microsoft .NET 4.5 is installed](https://docs.microsoft.com/dotnet/framework/migration-guide/how-to-determine-which-versions-are-installed) in the VM. .NET 4.5 is required for the VM agent to communicate with the service.
Copy file name to clipboardExpand all lines: articles/backup/backup-azure-vms-introduction.md
+5-40Lines changed: 5 additions & 40 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: dcurwin
6
6
manager: carmonm
7
7
ms.service: backup
8
8
ms.topic: conceptual
9
-
ms.date: 03/04/2019
9
+
ms.date: 09/13/2019
10
10
ms.author: dacurwin
11
11
---
12
12
@@ -136,48 +136,13 @@ Data disk 2 | 4095 GB | 0 GB
136
136
The actual size of the VM in this case is 17 GB + 30 GB + 0 GB = 47 GB. This protected-instance size (47 GB) becomes the basis for the monthly bill. As the amount of data in the VM grows, the protected-instance size used for billing changes to match.
## Limited Public Preview: Backup of VM with disk sizes up to 30 TB
139
+
## Public Preview: Backup of VM with disk sizes up to 30 TB
140
140
141
-
Azure Backup now supports a limited public preview of larger and more powerful [Azure Managed Disks](https://azure.microsoft.com/blog/larger-more-powerful-managed-disks-for-azure-virtual-machines/) of up to 30 TB in size. This preview provides production-level support for managed virtual machines.
142
-
143
-
You can seamlessly enroll in the preview without any impact on your ongoing backups. After the subscription is enrolled in the preview, all the virtual machines with disk sizes up to 30 TB should be successfully backed up. To enroll in the preview:
144
-
145
-
Execute the following cmdlets from an elevated PowerShell terminal:
146
-
147
-
1. Sign in to your Azure account.
148
-
149
-
```powershell
150
-
PS C:> Login-AzureRmAccount
151
-
```
152
-
153
-
2. Select the subscription that you want to register for the upgrade:
> Encrypted VMs with disks larger than 4 TB aren't supported in this preview.
141
+
Azure Backup now supports public preview of larger and more powerful [Azure Managed Disks](https://azure.microsoft.com/blog/larger-more-powerful-managed-disks-for-azure-virtual-machines/) of up to 30 TB in size. This preview provides production-level support for managed virtual machines.
179
142
143
+
The backups for your virtual machines with each disk size up to 30TB and a maximum of 256TB combined for all disks in a VM should work seamlessly without impacting your existing backups. There is no user action required to get the backups running for the large sized disks, if the virtual machine is already configured with Azure Backup.
180
144
145
+
All Azure Virtual Machines with large disks having backup configured should be successfully backed up.
Copy file name to clipboardExpand all lines: articles/backup/backup-support-matrix-iaas.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: dcurwin
6
6
manager: carmonm
7
7
ms.service: backup
8
8
ms.topic: conceptual
9
-
ms.date: 07/02/2019
9
+
ms.date: 09/13/2019
10
10
ms.author: dacurwin
11
11
---
12
12
@@ -154,13 +154,13 @@ Gen2 VMs | Supported <br> Azure Backup supports backup and restore of [Gen2 VMs]
154
154
155
155
**Component** | **Support**
156
156
--- | ---
157
-
Azure VM data disks | Back up a VM with 16 or less data disks. <br/><br/> Supports disk sizes up to 4 TB.<br/><br/>To sign up for a limited public preview of Azure Backup large disk support for disks greater than 4 TB and up to 30 TB in size, refer to this [article](backup-azure-vms-introduction.md#limited-public-preview-backup-of-vm-with-disk-sizes-up-to-30tb).
158
-
Data disk size | Individual disk can be up to 4095 GB.<br/><br/>To sign up for limited public preview of Azure Backup large disk support for disks greater than 4TB up to 30TB in size, refer to this [article](backup-azure-vms-introduction.md#limited-public-preview-backup-of-vm-with-disk-sizes-up-to-30tb).
157
+
Azure VM data disks | Back up a VM with 16 or less data disks. <br/><br/> Supports backup of virtual machines with each disk size up to 30TB and a maximum of 256TB combined for all disks in a VM.
158
+
Data disk size | Individual disk can be up to 30TB.
159
159
Storage type | Standard HDD, Standard SSD, Premium SSD.
160
160
Managed disks | Supported.
161
161
Encrypted disks | Supported.<br/><br/> Azure VMs enabled with Azure Disk Encryption can be backed up (with or without the Azure AD app).<br/><br/> Encrypted VMs can’t be recovered at the file/folder level. You must recover the entire VM.<br/><br/> You can enable encryption on VMs that are already protected by Azure Backup.
162
162
Disks with Write Accelerator enabled | Not supported.<br/><br/> Azure backup automatically excludes the Disks with Write Accelerator enabled during backup. Since they are not backed up, you will not be able to Restore these disks from Recovery-Points of the VM.
163
-
Back up deduplicated disks | Not supported.
163
+
Back up & Restore deduplicated VMs/disks | Azure Backup does not support deduplication. For more information refer to this [article](https://docs.microsoft.com/azure/backup/backup-support-matrix#disk-deduplication-support) <br/> <br/> - Azure Backup does not deduplicate across VMs in the Recovery Services vault <br/> <br/> - If there are VMs in deduplication state during restore, the files can't be restored as vault does not understand the format
164
164
Add disk to protected VM | Supported.
165
165
Resize disk on protected VM | Supported.
166
166
Shared storage| Backing up VMs using Cluster Shared Volume (CSV) or Scale-Out File Server is not recommended. CSV writers are likely to fail during backup. On restore, disks containing CSV volumes might not come-up.
0 commit comments