Azure Encrypted VM backup

HASSAN BIN NASIR DAR 306 Reputation points
2021-06-15T13:40:57.353+00:00

Hi,

I have two VMs in Azure.

VM01 disk is encrypted But VM02 disk is not encrypted.

I have a backup for VM02. Now I want to create a backup for VM01. Since VM01 has encrypted disk. So my question is, Backup steps for the VM01 are same as VM01 or will be different? thanks

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,654 questions
Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
158 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. SUNOJ KUMAR YELURU 13,921 Reputation points MVP
    2021-06-15T14:18:08.897+00:00

    Hi @HASSAN BIN NASIR DAR

    If Azure VM disk is encrypted below are the backup process.
    Before you start, do the following:

    1. Make sure you have one or more Windows or Linux VMs with ADE enabled.
    2. Review the support matrix for Azure VM backup
    3. Create a Recovery Services Backup vault if you don't have one.
    4. If you enable encryption for VMs that are already enabled for backup, you simply need to provide Backup with permissions to access the Key Vault so that backups can continue without disruption. Learn more about assigning these permissions.

    Limitations

    1. You can back up and restore ADE encrypted VMs within the same subscription and region.
    2. Azure Backup supports VMs encrypted using standalone keys. Any key that's a part of a certificate used to encrypt a VM isn't currently supported.
    3. You can back up and restore ADE encrypted VMs within the same subscription and region as the Recovery Services Backup vault.
    4. ADE encrypted VMs can’t be recovered at the file/folder level. You need to recover the entire VM to restore files and folders.
    5. When restoring a VM, you can't use the replace existing VM option for ADE encrypted VMs. This option is only supported for unencrypted managed disks.

    refer- https://learn.microsoft.com/en-us/azure/backup/backup-azure-vms-encryption

    If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.

    0 comments
  2. HASSAN BIN NASIR DAR 306 Reputation points
    2021-06-15T14:27:35.603+00:00

    Hi,

    Do you have any video link for the reference?