Unable to delete backup item - can't delete item or vault

Question

Unable to delete backup item - can't delete item or vault

Stephen Brown 0

I'm stuck in a loop whereby I can't delete the backup item due to issues in the backup vault, and I can't delete the backup vault because the backup item still exists.

I've tried solutions around disabling soft delete - in this case that isn't relevant as my vault had soft delete from the start and it can't be disabled. But trying to delete the 1 remaining obsolete backup item gives an error :

• Deletion Failed

The server cannot be unregistered as the security features setting is

enabled for hybrid backups and there are associated backup items in

active or soft delete state. Please disable the security features setting of

the vault, perform stop protection and delete data for all the backup

items and then trigger unregistration."

I seem to be in an infinite loop and can't get out! I've tried CLI and Powershell delete commands also - nothing works.

Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-10T03:20:47.2933333+00:00

Hello Stephen Brown,

I understand that you are experiencing difficulties in deleting the RSV due to the soft delete feature being enabled, which cannot be disabled. Could you please confirm if the Always On soft delete has been enabled on your RSV?

I look forward to your confirmation.

Thanks

Stephen Brown 0

Hi Vinod yes correct - from shell:

Get-AzRecoveryServicesVaultProperty -VaultId $myvaultid.ID                                                                                          
WARNING: The following CMK Encryption properties are deprecated: EncryptionAtRestType, SubscriptionId, LastUpdateStatus, Id, Name, Type, Location. Please avoid using these properties.

StorageModelType                : 
StorageType                     : 
StorageTypeState                : 
EnhancedSecurityState           : AlwaysON
SoftDeleteFeatureState          : AlwaysON
SoftDeleteRetentionPeriodInDays : 14
encryptionProperties            : Microsoft.Azure.Commands.RecoveryServices.Backup.Cmdlets.Models.EncryptionConfig

Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-10T03:53:46.7666667+00:00

Hello Stephen Brown,

Thank you for the confirmation.

Always-on soft delete state is an opt-in feature. Once enabled, it can't be disabled (irreversible). and given that the retention period is 14 days, you can proceed as follows:

First, initiate the deletion of your backup items. These items will be retained for 14 days before they are permanently deleted. Once all the backup items have been deleted, you can then attempt to delete the Recovery Services Vault (RSV). This means that the backup items will take 14 days to delete initially, and once all servers are unregistered from the vault, the RSV can be deleted subsequently.

Please note that the soft delete doesn't cost you for first 14 days of retention; however, you're charged for the period beyond 14 days. Learn more about pricing.

If this solution addresses your query, please don't forget to click the Upvote button.

Thank you.
Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-10T04:19:07.75+00:00

You can refer to the below useful doc.

https://learn.microsoft.com/en-us/azure/backup/backup-azure-delete-vault?branch=pr-en-us-182669&tabs=portal

Thanks
Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-11T03:34:01.6866667+00:00

Hello Stephen Brown,

I wanted to follow up on the detailed answer I provided regarding the issue you encountered. Have you had a chance to review it? I would like to ensure that the issue has been resolved to your satisfaction or if there is any further assistance you might need.

Please don't hesitate to reach out, as we are always here to help and support you.

Thank you
Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-14T01:57:02.18+00:00

Hello Stephen Brown,

I just wanted to check if the above provided solution worked for you or if you need any further assistance?

Please feel free to let us know, as we are always here to help whenever you need us.

Additionally, if you have a moment, please do Upvote it if the information provided has been helpful. This can be beneficial to other community members and would be greatly appreciated.

Thank you.
Vinay B 245 Reputation points Microsoft External Staff

2025-04-22T10:44:29.9466667+00:00
Hi Stephen Brown,

Thanks for confirming that both soft delete and Enhanced Security are set to AlwaysON.

since AlwaysON soft delete cannot be turned off, and you're stuck due to the security features preventing un-registration, here’s the next approach.

If you're stuck due to AlwaysON soft delete and can't delete the vault, the only supported option (aside from waiting 14 days) is to raise a Microsoft support request and request a backend force-delete with proper justification.

Run this to ensure you're not missing any active items

Get-AzRecoveryServicesBackupItem -VaultId $myvaultid.ID

then

Get-AzRecoveryServicesBackupItem -BackupManagementType AzureVM -Status SoftDeleted

You also try waiting out the 14-day soft delete window as Vinod highlighted.

Please let us know if it was helpful, and feel free to reach out if you have any further queries.
Vinay B 245 Reputation points Microsoft External Staff

2025-04-23T12:59:25.4433333+00:00

Hi Stephen Brown,

We haven’t heard from you on the last response, and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.

Your answer

Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-10T03:20:47.2933333+00:00

Hello Stephen Brown,

I understand that you are experiencing difficulties in deleting the RSV due to the soft delete feature being enabled, which cannot be disabled. Could you please confirm if the Always On soft delete has been enabled on your RSV?

I look forward to your confirmation.

Thanks
Stephen Brown 0 Reputation points

2025-04-10T03:27:29.1933333+00:00

Hi Vinod yes correct - from shell:

Get-AzRecoveryServicesVaultProperty -VaultId $myvaultid.ID WARNING: The following CMK Encryption properties are deprecated: EncryptionAtRestType, SubscriptionId, LastUpdateStatus, Id, Name, Type, Location. Please avoid using these properties. StorageModelType : StorageType : StorageTypeState : EnhancedSecurityState : AlwaysON SoftDeleteFeatureState : AlwaysON SoftDeleteRetentionPeriodInDays : 14 encryptionProperties : Microsoft.Azure.Commands.RecoveryServices.Backup.Cmdlets.Models.EncryptionConfig
Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-10T03:53:46.7666667+00:00

Hello Stephen Brown,

Thank you for the confirmation.

Always-on soft delete state is an opt-in feature. Once enabled, it can't be disabled (irreversible). and given that the retention period is 14 days, you can proceed as follows:

First, initiate the deletion of your backup items. These items will be retained for 14 days before they are permanently deleted. Once all the backup items have been deleted, you can then attempt to delete the Recovery Services Vault (RSV). This means that the backup items will take 14 days to delete initially, and once all servers are unregistered from the vault, the RSV can be deleted subsequently.

Please note that the soft delete doesn't cost you for first 14 days of retention; however, you're charged for the period beyond 14 days. Learn more about pricing.

If this solution addresses your query, please don't forget to click the Upvote button.

Thank you.
Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-10T04:19:07.75+00:00

You can refer to the below useful doc.

https://learn.microsoft.com/en-us/azure/backup/backup-azure-delete-vault?branch=pr-en-us-182669&tabs=portal

Thanks
Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-11T03:34:01.6866667+00:00

Hello Stephen Brown,

I wanted to follow up on the detailed answer I provided regarding the issue you encountered. Have you had a chance to review it? I would like to ensure that the issue has been resolved to your satisfaction or if there is any further assistance you might need.

Please don't hesitate to reach out, as we are always here to help and support you.

Thank you
Vinod Pittala 1,600 Reputation points Microsoft External Staff

2025-04-14T01:57:02.18+00:00

Hello Stephen Brown,

I just wanted to check if the above provided solution worked for you or if you need any further assistance?

Please feel free to let us know, as we are always here to help whenever you need us.

Additionally, if you have a moment, please do Upvote it if the information provided has been helpful. This can be beneficial to other community members and would be greatly appreciated.

Thank you.
Vinay B 245 Reputation points Microsoft External Staff

2025-04-22T10:44:29.9466667+00:00

Hi Stephen Brown,

Thanks for confirming that both soft delete and Enhanced Security are set to AlwaysON.

since AlwaysON soft delete cannot be turned off, and you're stuck due to the security features preventing un-registration, here’s the next approach.

If you're stuck due to AlwaysON soft delete and can't delete the vault, the only supported option (aside from waiting 14 days) is to raise a Microsoft support request and request a backend force-delete with proper justification.

Run this to ensure you're not missing any active items

Get-AzRecoveryServicesBackupItem -VaultId $myvaultid.ID

then

Get-AzRecoveryServicesBackupItem -BackupManagementType AzureVM -Status SoftDeleted

You also try waiting out the 14-day soft delete window as Vinod highlighted.

Please let us know if it was helpful, and feel free to reach out if you have any further queries.
Vinay B 245 Reputation points Microsoft External Staff

2025-04-23T12:59:25.4433333+00:00

Hi Stephen Brown,

We haven’t heard from you on the last response, and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.

Share via

Unable to delete backup item - can't delete item or vault

Your answer