Tutorial: Export data from Azure Blob storage with Azure Import/Export

This article provides step-by-step instructions on how to use the Azure Import/Export service to securely export large amounts of data from Azure Blob storage. The service requires you to ship empty drives to the Azure datacenter. The service exports data from your storage account to the drives and then ships the drives back.

In this tutorial, you learn how to:

  • Prerequisites to export data from Azure Blob storage with Azure Import/Export
  • Step 1: Create an export job
  • Step 2: Ship the drives
  • Step 3: Update the job with tracking information
  • Step 4: Receive the disks
  • Step 5: Unlock the disks

Prerequisites

Before you create an export job to transfer data out of Azure Blob Storage, carefully review and complete the following list of prerequisites for this service. You must:

  • Have an active Azure subscription that can be used for the Import/Export service.
  • Have at least one Azure Storage account. See the list of Supported storage accounts and storage types for Import/Export service. For information on creating a new storage account, see How to Create a Storage Account.
  • Have adequate number of disks of Supported types. You can use the Azure Import/Export tool to determine how many disks to provide. For steps, see Determine drives to use.
  • Have a FedEx/DHL account. If you want to use a carrier other than FedEx/DHL, contact Azure Data Box Operations team at adbops@microsoft.com.
    • The account must be valid, should have balance, and must have return shipping capabilities.
    • Generate a tracking number for the export job.
    • Every job should have a separate tracking number. Multiple jobs with the same tracking number are not supported.
    • If you do not have a carrier account, go to:

Step 1: Create an export job

Perform the following steps to create an export job in the Azure portal.

  1. Log on to https://portal.azure.com/.

  2. Search for import/export jobs.

    Search for import/export jobs

  3. Select + New.

    Select + New to create a new

  4. In Basics:

    1. Select a subscription.

    2. Select a resource group, or select Create new and create a new one.

    3. Enter a descriptive name for the import job. Use the name to track the progress of your jobs.

      • The name may contain only lowercase letters, numbers, and hyphens.
      • The name must start with a letter, and may not contain spaces.
    4. Select Export from Azure.

    Basics options for an export order

    Select Next: Job details > to proceed.

  5. In Job details:

    1. Select the Azure region where your data currently is.

    2. Select the storage account from where you want to export data. Use a storage account close to your location.

      The drop-off location is automatically populated based on the region of the storage account selected.

    3. Specify the blob data to export from your storage account to your blank drive or drives. Choose one of the three following methods.

      • Choose to Export all blob data in the storage account.

        Export all

      • Choose Selected containers and blobs, and specify containers and blobs to export. You can use more than one of the selection methods. Selecting an Add option opens a panel on the right where you can add your selection strings.

        Option Description
        Add containers Export all blobs in a container.
        Select Add containers, and enter each container name.
        Add blobs Specify individual blobs to export.
        Select Add blobs. Then specify the relative path to the blob, beginning with the container name. Use $root to specify the root container.
        You must provide the blob paths in valid format to avoid errors during processing, as shown in this screenshot. For more information, see Examples of valid blob paths.
        Add prefixes Use a prefix to select a set of similarly named containers or similarly named blobs in a container. The prefix may be the prefix of the container name, the complete container name, or a complete container name followed by the prefix of the blob name.

        Export selected containers and blobs

    • Choose Export from blob list file (XML format), and select an XML file that contains a list of paths and prefixes for the blobs to be exported from the storage account. You must construct the XML file and store it in a container for the storage account. The file cannot be empty.

      Important

      If you use an XML file to select the blobs to export, make sure that the XML contains valid paths and/or prefixes. If the file is invalid or no data matches the paths specified, the order terminates with partial data or no data exported.

      To see how to add an XML file to a container, see Export order using XML file.

      Export from blob list file

    Note

    If a blob to be exported is in use during data copy, the Azure Import/Export service takes a snapshot of the blob and copies the snapshot.

    Select Next: Shipping > to proceed.

  6. In Shipping:

    • Select the carrier from the dropdown list. If you want to use a carrier other than FedEx/DHL, choose an existing option from the dropdown. Contact Azure Data Box Operations team at adbops@microsoft.com with the information regarding the carrier you plan to use.

    • Enter a valid carrier account number that you have created with that carrier. Microsoft uses this account to ship the drives back to you once your export job is complete.

    • Provide a complete and valid contact name, phone, email, street address, city, zip, state/province, and country/region.

      Tip

      Instead of specifying an email address for a single user, provide a group email. This ensures that you receive notifications even if an admin leaves.

    Select Review + create to proceed.

  7. In Review + create:

    1. Review the details of the job.

    2. Make a note of the job name and provided Azure datacenter shipping address for shipping disks to Azure.

      Note

      Always send the disks to the datacenter noted in the Azure portal. If the disks are shipped to the wrong datacenter, the job will not be processed.

    3. Review the Terms for your order for privacy and source data deletion. If you agree to the terms, select the check box beneath the terms. Validation of the order begins.

    Review and create your export order

  8. After validation passes, select Create.

Step 2: Ship the drives

If you do not know the number of drives you need, see Determine how many drives you need. If you know the number of drives, proceed to ship the drives.

FedEx, UPS, or DHL can be used to ship the package to Azure datacenter. If you want to use a carrier other than FedEx/DHL, contact Azure Data Box Operations team at adbops@microsoft.com

  • Provide a valid FedEx, UPS, or DHL carrier account number that Microsoft will use to ship the drives back.
    • A FedEx, UPS, or DHL account number is required for shipping drives back from the US and Europe locations.
      • A DHL account number is preferred for shipping drives back from Asia and Australia locations.
      • If you do not have an account number, create a FedEx or DHL carrier account.
  • When shipping your packages, you must follow the Microsoft Azure Service Terms.
  • Properly package yours disks to avoid potential damage and delays in processing.

Step 3: Update the job with tracking information

After shipping the disks, return to the Import/Export page on the Azure portal.

Important

If the tracking number is not updated within 2 weeks of creating the job, the job expires.

To update the tracking number, perform the following steps.

  1. Select and click the job.
  2. Click Update job status and tracking info once drives are shipped.
  3. Select the checkbox against Mark as shipped.
  4. Provide the Carrier and Tracking number.
  5. Track the job progress on the portal dashboard. For a description of each job state, go to View your job status.

Note

You can only cancel a job while it's in Creating state. After you provide tracking details, the job status changes to Shipping, and the job can't be canceled.

Step 4: Receive the disks

When the dashboard reports the job is complete, the disks are shipped to you and the tracking number for the shipment is available on the portal.

  1. After you receive the drives with exported data, you need to get the BitLocker keys to unlock the drives. Go to the export job in the Azure portal. Click Import/Export tab.

  2. Select and click your export job from the list. Go to Encryption and copy the keys.

    View BitLocker keys for export job

  3. Use the BitLocker keys to unlock the disks.

The export is complete.

Step 5: Unlock the disks

Use the following command to unlock the drive:

WAImportExport Unlock /bk:<BitLocker key (base 64 string) copied from Encryption blade in Azure portal> /driveLetter:<Drive letter>

Here is an example of the sample input.

WAImportExport.exe Unlock /bk:CAAcwBoAG8AdQBsAGQAIABiAGUAIABoAGkAZABkAGUAbgA= /driveLetter:e

At this time, you can delete the job or leave it. Jobs automatically get deleted after 90 days.

Next steps