Azure Stack Hub managed disks: differences and considerations

This article summarizes the differences between managed disks in Azure Stack Hub and managed disks in Azure. To learn about high-level differences between Azure Stack Hub and Azure, see the Key considerations article.

Managed disks simplify disk management for IaaS virtual machines (VMs) by managing the storage accounts associated with the VM disks.

Note

Managed disks on Azure Stack Hub are available starting with the 1808 update. Beginning with the 1811 update, the feature is enabled by default when creating VMs using the Azure Stack Hub portal.

Cheat sheet: managed disk differences

Feature Azure (global) Azure Stack Hub
Encryption for data at rest Azure Storage Service Encryption (SSE), Azure Disk Encryption (ADE). BitLocker 128-bit AES encryption
Image Managed custom image Supported
Backup options Azure Backup service Not yet supported
Disaster recovery options Azure Site Recovery Not yet supported
Disk types Premium SSD, Standard SSD, and Standard HDD. Premium SSD, Standard HDD
Premium disks Fully supported. Can be provisioned, but no performance limit or guarantee
Premium disks IOPs Depends on disk size. 2300 IOPs per disk
Premium disks throughput Depends on disk size. 145 MB/second per disk
Disk size Azure Premium Disk: P4 (32 GiB) to P80 (32 TiB)
Azure Standard SSD Disk: E10 (128 GiB) to E80 (32 TiB)
Azure Standard HDD Disk: S4 (32 GiB) to S80 (32 TiB)
M4: 32 GiB
M6: 64 GiB
M10: 128 GiB
M15: 256 GiB
M20: 512 GiB
M30: 1023 GiB
Disks snapshot copy Snapshot Azure-managed disks attached to a running VM supported. Not yet supported
Disks performance analytic Aggregate metrics and per disk metrics supported. Not yet supported
Migration Provide tool to migrate from existing unmanaged Azure Resource Manager VMs without the need to recreate the VM. Not yet supported

Note

Managed disks IOPs and throughput in Azure Stack Hub is a cap number instead of a provisioned number, which may be impacted by hardware and workloads running in Azure Stack Hub.

Metrics

There are also differences with storage metrics:

  • With Azure Stack Hub, the transaction data in storage metrics does not differentiate internal or external network bandwidth.
  • Azure Stack Hub transaction data in storage metrics does not include virtual machine access to the mounted disks.

API versions

Azure Stack Hub managed disks support the following API versions:

  • 2017-03-30
  • 2017-12-01

Convert to managed disks

Note

The Azure PowerShell cmdlet ConvertTo-AzureRmVMManagedDisk cannot be used to convert an unmanaged disk to a managed disk in Azure Stack Hub. Azure Stack Hub does not currently support this cmdlet.

You can use the following script to convert a currently provisioned VM from unmanaged to managed disks. Replace the placeholders with your own values:

$SubscriptionId = "SubId"

# The name of your resource group where your VM to be converted exists.
$ResourceGroupName ="MyResourceGroup"

# The name of the managed disk to be created.
$DiskName = "mngddisk"

# The size of the disks in GB. It should be greater than the VHD file size.
$DiskSize = "50"

# The URI of the VHD file that will be used to create the managed disk.
# The VHD file can be deleted as soon as the managed disk is created.
$VhdUri = "https://rgmgddisks347.blob.local.azurestack.external/vhds/unmngdvm20181109013817.vhd"

# The storage type for the managed disk: PremiumLRS or StandardLRS.
$AccountType = "StandardLRS"

# The Azure Stack Hub location where the managed disk will be located.
# The location should be the same as the location of the storage account in which VHD file is stored.
# Configure the new managed VM point to the old unmanaged VM configuration (network config, VM name, location).
$Location = "local"
$VirtualMachineName = "unmngdvm"
$VirtualMachineSize = "Standard_D1"
$PIpName = "unmngdvm-ip"
$VirtualNetworkName = "unmngdrg-vnet"
$NicName = "unmngdvm"

# Set the context to the subscription ID in which the managed disk will be created.
Select-AzureRmSubscription -SubscriptionId $SubscriptionId

# Delete old VM, but keep the OS disk.
Remove-AzureRmVm -Name $VirtualMachineName -ResourceGroupName $ResourceGroupName

# Create the managed disk configuration.
$DiskConfig = New-AzureRmDiskConfig -AccountType $AccountType -Location $Location -DiskSizeGB $DiskSize -SourceUri $VhdUri -CreateOption Import

# Create managed disk.
New-AzureRmDisk -DiskName $DiskName -Disk $DiskConfig -ResourceGroupName $resourceGroupName
$Disk = Get-AzureRmDisk -DiskName $DiskName -ResourceGroupName $ResourceGroupName
$VirtualMachine = New-AzureRmVMConfig -VMName $VirtualMachineName -VMSize $VirtualMachineSize

# Use the managed disk resource ID to attach it to the virtual machine.
# Change the OS type to "-Windows" if the OS disk has the Windows OS.
$VirtualMachine = Set-AzureRmVMOSDisk -VM $VirtualMachine -ManagedDiskId $Disk.Id -CreateOption Attach -Linux

# Create a public IP for the VM.
$PublicIp = Get-AzureRmPublicIpAddress -Name $PIpName -ResourceGroupName $ResourceGroupName

# Get the virtual network where the virtual machine will be hosted.
$VNet = Get-AzureRmVirtualNetwork -Name $VirtualNetworkName -ResourceGroupName $ResourceGroupName

# Create NIC in the first subnet of the virtual network.
$Nic = Get-AzureRmNetworkInterface -Name $NicName -ResourceGroupName $ResourceGroupName

$VirtualMachine = Add-AzureRmVMNetworkInterface -VM $VirtualMachine -Id $Nic.Id

# Create the virtual machine with managed disk.
New-AzureRmVM -VM $VirtualMachine -ResourceGroupName $ResourceGroupName -Location $Location

Managed images

Azure Stack Hub supports managed images, which enable you to create a managed image object on a generalized VM (both unmanaged and managed) that can only create managed disk VMs going forward. Managed images enable the following two scenarios:

  • You have generalized unmanaged VMs and want to use managed disks going forward.
  • You have a generalized managed VM and would like to create multiple, similar managed VMs.

Step 1: Generalize the VM

For Windows, follow the Generalize the Windows VM using Sysprep section. For Linux, follow Step 1 here.

Note

Make sure to generalize your VM. Creating a VM from an image that hasn't been properly generalized will lead to a VMProvisioningTimeout error.

Step 2: Create the managed image

You can use the portal, PowerShell, or CLI to create the managed image. Follow the steps in Create a managed image.

Step 3: Choose the use case

Case 1: Migrate unmanaged VMs to managed disks

Make sure to generalize your VM correctly before doing this step. After generalization, you can no longer use this VM. Creating a VM from an image that hasn't been properly generalized will lead to a VMProvisioningTimeout error.

Follow the instructions in Create an image from a VM that uses a storage account to create a managed image from a generalized VHD in a storage account. You can use this image in the future to create managed VMs.

Case 2: Create managed VM from managed image using Powershell

After you create an image from an existing managed disk VM using the script in Create an image from a managed disk using PowerShell, use the following example script to create a similar Linux VM from an existing image object.

Azure Stack Hub PowerShell module 1.7.0 or later: Follow the instructions in Create a VM from a managed image.

Azure Stack Hub PowerShell module 1.6.0 or earlier:

# Variables for common values
$ResourceGroupName = "MyResourceGroup"
$Location = "local"
$VirtualMachineName = "MyVM"
$ImageRG = "managedlinuxrg"
$ImageName = "simplelinuxvmm-image-2019122"

# Create credential object
$Cred = Get-Credential -Message "Enter a username and password for the virtual machine."

# Create a resource group
New-AzureRmResourceGroup -Name $ResourceGroupName -Location $Location

# Create a subnet configuration
$SubnetConfig = New-AzureRmVirtualNetworkSubnetConfig -Name "MySubnet" -AddressPrefix "192.168.1.0/24"

# Create a virtual network
$VNet = New-AzureRmVirtualNetwork -ResourceGroupName $ResourceGroupName -Location $Location `
  -Name "MyVNet" -AddressPrefix "192.168.0.0/16" -Subnet $SubnetConfig

# Create a public IP address and specify a DNS name
$PIp = New-AzureRmPublicIpAddress -ResourceGroupName $ResourceGroupName -Location $Location `
  -Name "mypublicdns$(Get-Random)" -AllocationMethod Static -IdleTimeoutInMinutes 4

# Create an inbound network security group rule for port 3389
$NsgRuleRDP = New-AzureRmNetworkSecurityRuleConfig -Name "MyNetworkSecurityGroupRuleRDP"  -Protocol Tcp `
  -Direction Inbound -Priority 1000 -SourceAddressPrefix * -SourcePortRange * -DestinationAddressPrefix * `
  -DestinationPortRange 3389 -Access Allow

# Create a network security group
$Nsg = New-AzureRmNetworkSecurityGroup -ResourceGroupName $ResourceGroupName -Location $Location `
  -Name "MyNetworkSecurityGroup" -SecurityRules $NsgRuleRDP

# Create a virtual network card and associate with public IP address and NSG
$Nic = New-AzureRmNetworkInterface -Name "MyNic" -ResourceGroupName $ResourceGroupName -Location $Location `
  -SubnetId $VNet.Subnets[0].Id -PublicIpAddressId $PIp.Id -NetworkSecurityGroupId $Nsg.Id

$Image = Get-AzureRmImage -ResourceGroupName $ImageRG -ImageName $ImageName

# Create a virtual machine configuration
$VmConfig = New-AzureRmVMConfig -VMName $VirtualMachineName -VMSize "Standard_D1" | `
Set-AzureRmVMOperatingSystem -Linux -ComputerName $VirtualMachineName -Credential $Cred | `
Set-AzureRmVMSourceImage -Id $Image.Id | `
Add-AzureRmVMNetworkInterface -Id $Nic.Id

# Create a virtual machine
New-AzureRmVM -ResourceGroupName $ResourceGroupName -Location $Location -VM $VmConfig

You can also use the portal to create a VM from a managed image. For more information, see the Azure-managed image articles Create a managed image of a generalized VM in Azure and Create a VM from a managed image.

Configuration

After applying the 1808 update or later, you must make the following configuration change before using managed disks:

  • If a subscription was created before the 1808 update, follow below steps to update the subscription. Otherwise, deploying VMs in this subscription might fail with an error message "Internal error in disk manager."
    1. In the Azure Stack Hub user portal, go to Subscriptions and find the subscription. Click Resource Providers, then click Microsoft.Compute, and then click Re-register.
    2. Under the same subscription, go to Access Control (IAM), and verify that Azure Stack Hub - Managed Disk is listed.
  • If you use a multi-tenant environment, ask your cloud operator (who may be in your own organization, or from the service provider) to reconfigure each of your guest directories following the steps in this article. Otherwise, deploying VMs in a subscription associated with that guest directory might fail with the error message "Internal error in disk manager."

Next steps