Azure Backup

Azure Backup protects Azure VMs with backup policies held in a Recovery Services vault

  3 minute read  

Cloud Management Platform (CMP) imports those policies as protection plans and enables backup on a server under the policy you choose.

CMP reaches Azure Backup through an existing Azure resource handler and uses its credentials, so what that resource handler can do in your subscription is what Azure Backup can do.

Prerequisites

Set up the vault and policy in Azure

CMP only reads the vault and its policies, so create both in Azure first.

  1. Create a Recovery Services vault in the subscription used by your Azure resource handler.
  2. Create a backup policy in the vault with Azure virtual machines as the data source type, then set its backup schedule and retention range.

The retention range determines how long Azure keeps each recovery point and dictates how far back you can restore a server from CMP.

Connect Azure Backup in CMP

Follow Add a data protection plan and choose the Azure Backup tile. Two points are specific to Azure Backup:

  • The form asks only for a Name and an Azure Resource Handler. There is no host, username, or password.
  • Import Protection Plans lists the available backup policies. Wherever CMP says protection plan, read backup policy.

Protect a server

Add the Data Protection Plan parameter where your Azure servers are ordered, as described in Data protection plan parameters. A blueprint can pin the plan to a value or leave it to be chosen at order time.

When the order runs, CMP enables backup on the new VM under your chosen policy. Azure then backs up the VM according to that policy’s schedule, and the resulting recovery points appear in the server’s Data Protection tab.

Restore a server

See Restore from snapshots for the procedure. Three points are specific to Azure Backup:

  • The Description column shows the Azure recovery point name rather than the policy name.
  • The restore does not create a CMP job. CMP sends the request and reports back; watch progress in Azure.
  • A storage account in the same resource group as the vault is used to stage the restore; one is created if it doesn’t exist.