Shulou(Shulou.com)06/02 Report--

This article mainly introduces the use of Azure backup backup and restore encrypted virtual machines.

Supported scenario

Encrypted VM backup and restore is supported only for VM that uses the Azure Resource Manager deployment model. VM that uses the classic deployment model does not support this feature. Windows and Linux VM encrypted with Azure disk support the backup and recovery of encrypted VM. Disk encryption uses Windows's industry-standard BitLocker feature and Linux's dm-crypt feature to provide disk encryption. The following table shows the encryption types and support for VM.

BEK + KEK VM VM unmanaged VM for BEK only is managed VM is

Back up encrypted VM

1. Configure backup

1) if the recovery Services vault is open, go to the next step. If you do not open the recovery Services vault but are in the Azure portal, select all Services.

a. In the resource list, type "Recovery".

b. When you start typing, the list is filtered based on input. When the Recovery Services vault appears, select it.

c. A list of recovery service vaults appears. Select a vault from the list. The selected vault dashboard opens.

2) from the list of items displayed under the vault, select "backup"

3) in the "backup" item, select "backup Strategy", and click OK.

4) Select the encrypted VM to be backed up, and click OK

5) this page displays messages for the Key Vault associated with the selected encrypted VM. Backup requires read-only access to keys and secrets in Key Vault. It uses these permissions to back up keys and secrets and the associated VM.

If you are a member user, the enable backup process will seamlessly gain access to the Keyvault so that encrypted VM can be backed up without any user intervention. Click to enable backup

"if VM has been backed up in the recovery service repository and encryption is later enabled on it, the backup service must be provided with access to Key Vault before the backup can continue." Click on all resources to find your key vault

Select "access Policy", then "add".

Under configure from template (optional), select Azure backup. The required permissions are pre-populated in key permissions and Secret permissions. If VM is encrypted using BEK only, only secret permissions are required, so the key permission selection must be removed. Click OK

After successfully providing permissions, you can continue to enable backup for encrypted VM.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.