Set up disaster recovery to Azure for Hyper-V VMs using PowerShell and Azure Resource Manager
Azure Site Recovery contributes to your business continuity and disaster recovery (BCDR) strategy by orchestrating replication, failover, and recovery of Azure virtual machines (VMs), and on-premises VMs and physical servers.
This article describes how to use Windows PowerShell, together with Azure Resource Manager, to replicate Hyper-V VMs to Azure. The example used in this article shows you how to replicate a single VM running on a Hyper-V host, to Azure.
This article has been updated to use the new Azure PowerShell Az module. You can still use the AzureRM module, which will continue to receive bug fixes until at least December 2020. To learn more about the new Az module and AzureRM compatibility, see Introducing the new Azure PowerShell Az module. For Az module installation instructions, see Install Azure PowerShell.
Azure PowerShell provides cmdlets to manage Azure using Windows PowerShell. Site Recovery PowerShell cmdlets, available with Azure PowerShell for Azure Resource Manager, help you protect and recover your servers in Azure.
You don't need to be a PowerShell expert to use this article, but you do need to understand basic concepts, such as modules, cmdlets, and sessions. Read Getting started with Windows PowerShell, and Using Azure PowerShell with Azure Resource Manager.
Microsoft partners in the Cloud Solution Provider (CSP) program can configure and manage protection of customer servers to their respective CSP subscriptions (tenant subscriptions).
Before you start
Make sure you have these prerequisites in place:
- A Microsoft Azure account. You can start with a free trial. In addition, you can read about Azure Site Recovery Manager pricing.
- Azure PowerShell. For information about this release and how to install it, see Install Azure PowerShell.
In addition, the specific example described in this article has the following prerequisites:
- A Hyper-V host running Windows Server 2012 R2 or Microsoft Hyper-V Server 2012 R2 containing one or more VMs. Hyper-V servers should be connected to the Internet, either directly or through a proxy.
- The VMs you want to replicate should conform with these prerequisites.
Step 1: Sign in to your Azure account
Open a PowerShell console and run this command to sign in to your Azure account. The cmdlet brings up a web page prompts you for your account credentials: Connect-AzAccount.
- Alternately, you can include your account credentials as a parameter in the Connect-AzAccount cmdlet, using the -Credential parameter.
- If you are CSP partner working on behalf of a tenant, specify the customer as a tenant, by using their tenantID or tenant primary domain name. For example: Connect-AzAccount -Tenant "fabrikam.com"
Associate the subscription you want to use with the account, since an account can have several subscriptions:
Select-AzSubscription -SubscriptionName $SubscriptionName
Verify that your subscription is registered to use the Azure providers for Recovery Services and Site Recovery, using these commands:
Get-AzResourceProvider -ProviderNamespace Microsoft.RecoveryServices
Verify that in the command output, the RegistrationState is set to Registered, you can proceed to Step 2. If not, you should register the missing provider in your subscription, by running these commands:
Register-AzResourceProvider -ProviderNamespace Microsoft.RecoveryServices
Verify that the Providers registered successfully, using the following commands:
Get-AzResourceProvider -ProviderNamespace Microsoft.RecoveryServices
Step 2: Set up the vault
Create an Azure Resource Manager resource group in which to create the vault, or use an existing resource group. Create a new resource group as follows. The $ResourceGroupName variable contains the name of the resource group you want to create, and the $Geo variable contains the Azure region in which to create the resource group (for example, "Brazil South").
New-AzResourceGroup -Name $ResourceGroupName -Location $Geo
To obtain a list of resource groups in your subscription run the Get-AzResourceGroup cmdlet.
Create a new Azure Recovery Services vault as follows:
$vault = New-AzRecoveryServicesVault -Name <string> -ResourceGroupName <string> -Location <string>
You can retrieve a list of existing vaults with the Get-AzRecoveryServicesVault cmdlet.
Step 3: Set the Recovery Services vault context
Set the vault context as follows:
Set-AsrVaultSettings -Vault $vault
Step 4: Create a Hyper-V site
Create a new Hyper-V site as follows:
$sitename = "MySite" #Specify site friendly name New-AsrFabric -Type HyperVSite -Name $sitename
This cmdlet starts a Site Recovery job to create the site, and returns a Site Recovery job object. Wait for the job to complete and verify that the job completed successfully.
Use the Get-AsrJob cmdlet, to retrieve the job object, and check the current status of the job.
Generate and download a registration key for the site, as follows:
$SiteIdentifier = Get-AsrFabric -Name $sitename | Select -ExpandProperty SiteIdentifier $path = Get-AzRecoveryServicesVaultSettingsFile -Vault $vault -SiteIdentifier $SiteIdentifier -SiteFriendlyName $sitename
Copy the downloaded key to the Hyper-V host. You need the key to register the Hyper-V host to the site.
Step 5: Install the Provider and agent
Download the installer for the latest version of the Provider from Microsoft.
Run the installer on the Hyper-V host.
At the end of the installation continue to the registration step.
When prompted, provide the downloaded key, and complete registration of the Hyper-V host.
Verify that the Hyper-V host is registered to the site as follows:
$server = Get-AsrFabric -Name $siteName | Get-AsrServicesProvider -FriendlyName $server-friendlyname
If you're running a Hyper-V core server, download the setup file and follow these steps:
Extract the files from AzureSiteRecoveryProvider.exe to a local directory by running this command:
AzureSiteRecoveryProvider.exe /x:. /q
.\setupdr.exe /iResults are logged to %Programdata%\ASRLogs\DRASetupWizard.log.
Register the server by running this command:
cd C:\Program Files\Microsoft Azure Site Recovery Provider\DRConfigurator.exe" /r /Friendlyname "FriendlyName of the Server" /Credentials "path to where the credential file is saved"
Step 6: Create a replication policy
Before you start, note that the storage account specified should be in the same Azure region as the vault, and should have geo-replication enabled.
Create a replication policy as follows:
$ReplicationFrequencyInSeconds = "300"; #options are 30,300,900 $PolicyName = “replicapolicy” $Recoverypoints = 6 #specify the number of recovery points $storageaccountID = Get-AzStorageAccount -Name "mystorea" -ResourceGroupName "MyRG" | Select -ExpandProperty Id $PolicyResult = New-AsrPolicy -Name $PolicyName -ReplicationProvider “HyperVReplicaAzure” -ReplicationFrequencyInSeconds $ReplicationFrequencyInSeconds -RecoveryPoints $Recoverypoints -ApplicationConsistentSnapshotFrequencyInHours 1 -RecoveryAzureStorageAccountId $storageaccountID
Check the returned job to ensure that the replication policy creation succeeds.
Retrieve the protection container that corresponds to the site, as follows:
$protectionContainer = Get-AsrProtectionContainer
Associate the protection container with the replication policy, as follows:
$Policy = Get-AsrPolicy -FriendlyName $PolicyName $associationJob = New-AsrProtectionContainerMapping -Name $mappingName -Policy $Policy -PrimaryProtectionContainer $protectionContainer
Wait for the association job to complete successfully.
Retrieve the protection container mapping.
$ProtectionContainerMapping = Get-ASRProtectionContainerMapping -ProtectionContainer $protectionContainer
Step 7: Enable VM protection
Retrieve the protectable item that corresponds to the VM you want to protect, as follows:
$VMFriendlyName = "Fabrikam-app" #Name of the VM $ProtectableItem = Get-AsrProtectableItem -ProtectionContainer $protectionContainer -FriendlyName $VMFriendlyName
Protect the VM. If the VM you are protecting has more than one disk attached to it, specify the operating system disk by using the OSDiskName parameter.
$OSType = "Windows" # "Windows" or "Linux" $DRjob = New-AsrReplicationProtectedItem -ProtectableItem $VM -Name $VM.Name -ProtectionContainerMapping $ProtectionContainerMapping -RecoveryAzureStorageAccountId $StorageAccountID -OSDiskName $OSDiskNameList[$i] -OS $OSType -RecoveryResourceGroupId $ResourceGroupID
Wait for the VMs to reach a protected state after the initial replication. This can take a while, depending on factors such as the amount of data to be replicated, and the available upstream bandwidth to Azure. When a protected state is in place, the job State and StateDescription are updated as follows:
PS C:\> $DRjob = Get-AsrJob -Job $DRjob PS C:\> $DRjob | Select-Object -ExpandProperty State Succeeded PS C:\> $DRjob | Select-Object -ExpandProperty StateDescription Completed
Update recovery properties (such as the VM role size,), and the Azure network to which to attach the VM NIC after failover.
PS C:\> $nw1 = Get-AzVirtualNetwork -Name "FailoverNw" -ResourceGroupName "MyRG" PS C:\> $VMFriendlyName = "Fabrikam-App" PS C:\> $rpi = Get-AsrReplicationProtectedItem -ProtectionContainer $protectionContainer -FriendlyName $VMFriendlyName PS C:\> $UpdateJob = Set-AsrReplicationProtectedItem --InputObject $rpi -PrimaryNic $VM.NicDetailsList.NicId -RecoveryNetworkId $nw1.Id -RecoveryNicSubnetName $nw1.Subnets.Name PS C:\> $UpdateJob = Get-AsrJob -Job $UpdateJob PS C:\> $UpdateJob| select -ExpandProperty state Get-AsrJob -Job $job | select -ExpandProperty state Succeeded
Step 8: Run a test failover
Run a test failover as follows:
$nw = Get-AzVirtualNetwork -Name "TestFailoverNw" -ResourceGroupName "MyRG" #Specify Azure vnet name and resource group $rpi = Get-AsrReplicationProtectedItem -ProtectionContainer $protectionContainer -FriendlyName $VMFriendlyName $TFjob =Start-AsrTestFailoverJob -ReplicationProtectedItem $VM -Direction PrimaryToRecovery -AzureVMNetworkId $nw.Id
Verify that the test VM is created in Azure. The test failover job is suspended after creating the test VM in Azure.
To clean up and complete the test failover, run:
$TFjob = Start-AsrTestFailoverCleanupJob -ReplicationProtectedItem $rpi -Comment "TFO done"
Learn more about Azure Site Recovery with Azure Resource Manager PowerShell cmdlets.