Back up Azure VMware Solution VMs with Azure Backup Server

This article shows you how to back up VMware virtual machines (VMs) running on Azure VMware Solution with Azure Backup Server. First, thoroughly go through Set up Microsoft Azure Backup Server for Azure VMware Solution.

Then, walk through all of the necessary procedures to:

Создание безопасного подключения к серверу vCenter Server

By default, Azure Backup Server communicates with VMware vCenter Server over HTTPS. To set up the HTTPS connection, download the VMware certificate authority (CA) certificate and import it on the Azure Backup Server.

Настройка сертификата

1. In the browser, on the Azure Backup Server machine, enter the vSphere Client URL.

   Примечание.

   If the VMware vSphere Client Getting Started page doesn't appear, verify the connection and browser proxy settings and try again.

2. On the VMware vSphere Client Getting Started page, select Download trusted root CA certificates.

   

3. Save the download.zip file to the Azure Backup Server machine, and then extract its contents to the certs folder, which contains the:

   • Root certificate file with an extension that begins with a numbered sequence like 0.0 and 0.1.
   • CRL file with an extension that begins with a sequence like, .r0 or .r1.

4. In the certs folder, right-click the root certificate file and select Rename to change the extension to .crt.

   Значок файла изменяется на тот, который представляет корневой сертификат.

5. Right-click the root certificate, and select Install Certificate.

6. In the Certificate Import Wizard, select Local Machine as the destination for the certificate, and select Next.

   

   Примечание.

   If asked, confirm that you want to allow changes to the computer.

7. Select Place all certificates in the following store, and select Browse to choose the certificate store.

   

8. Select Trusted Root Certification Authorities as the destination folder, and select OK.

9. Review the settings, and select Finish to start importing the certificate.

   

10. После подтверждения импорта сертификата войдите на сервер vCenter Server, чтобы убедиться, что подключение безопасно.

Enable TLS 1.2 on Azure Backup Server

VMware vSphere 6.7 onwards has TLS enabled as the communication protocol.

1. Copy the following registry settings, and paste them into Notepad. Then save the file as TLS.REG without the .txt extension.

   
   Windows Registry Editor Version 5.00
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727]
   
      "SystemDefaultTlsVersions"=dword:00000001
   
      "SchUseStrongCrypto"=dword:00000001
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319]
   
      "SystemDefaultTlsVersions"=dword:00000001
   
      "SchUseStrongCrypto"=dword:00000001
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727]
   
      "SystemDefaultTlsVersions"=dword:00000001
   
      "SchUseStrongCrypto"=dword:00000001
   
   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
   
      "SystemDefaultTlsVersions"=dword:00000001
   
      "SchUseStrongCrypto"=dword:00000001
   
   

2. Right-click the TLS.REG file, and select Merge or Open to add the settings to the registry.

Добавление учетной записи на Azure Backup Server

1. Open Azure Backup Server, and in the Azure Backup Server console, select Management>Production Servers>Manage VMware.

   

2. In the Manage Credentials dialog box, select Add.

   

3. In the Add Credential dialog box, enter a name and a description for the new credential. Specify the user name and password you defined on the VMware server.

   Примечание.

   If the VMware vSphere virtual machine and Azure Backup Server aren't in the same domain, specify the domain in the User name box.

   

4. Нажмите кнопку "Добавить ", чтобы добавить новые учетные данные.

   

Add the vCenter Server to Azure Backup Server

1. In the Azure Backup Server console, select Management>Production Servers>Add.

   

2. Select VMware Servers, and select Next.

   

3. Specify the IP address of the vCenter Server.

   

4. In the SSL Port box, enter the port used to communicate with the vCenter Server.

   Подсказка

   Port 443 is the default port, but you can change it if your vCenter Server listens on a different port.

5. In the Specify Credential box, select the credential that you created in the previous section.

6. Select Add to add the vCenter Server to the servers list, and select Next.

   

7. On the Summary page, select Add to add the vCenter Server to Azure Backup Server.

   The new vCenter Server gets added immediately. vCenter Server doesn't need an agent.

   

8. On the Finish page, review the settings, and then select Close.

   

   You see the vCenter Server listed under Production Server with:

   • Type as VMware Server

   • Agent Status as OK

     If you see Agent Status as Unknown, select Refresh.

Настройка группы защиты

Protection groups gather multiple VMs and apply the same data retention and backup settings to all VMs in the group.

1. In the Azure Backup Server console, select Protection>New.

   

2. На странице приветствия мастера создания группы защиты нажмите кнопку "Далее".

   

3. On the Select Protection Group Type page, select Servers, and then select Next. The Select Group Members page appears.

4. On the Select Group Members page, select the VMs (or VM folders) that you want to back up, and then select Next.

   Примечание.

   When you select a folder or VMs, folders inside that folder are also selected for backup. Вы можете снять отметку с папок или виртуальных машин, которые вы не хотите включать в резервное копирование. If a VM or folder is already being backed up, you can't select it, which ensures duplicate recovery points aren't created for a VM.

   

5. On the Select Data Protection Method page, enter a name for the protection group and protection settings.

6. Set the short-term protection to Disk, enable online protection, and then select Next.

   

7. Specify how long you want to keep data backed up to disk.

   • Retention range: The number of days that disk recovery points are kept.
   • Express Full Backup: How often disk recovery points are taken. To change the times or dates when short-term backups occur, select Modify.

   

8. On the Review Disk Storage Allocation page, review the disk space provided for the VM backups.

   • The recommended disk allocations are based on the retention range you specified, the workload type, and the protected data size. Make any changes that are required, then select Next.
   • Размер данных: Размер данных в группе защиты.
   • Disk space: Recommended amount of disk space for the protection group. If you want to modify this setting, select space lightly larger than the amount you estimate each data source grows.
   • Storage pool details: Shows the status of the storage pool, which includes total and remaining disk size.

   

   Примечание.

   In some scenarios, the data size reported is higher than the actual VM size. We're aware of the issue and currently investigating it.

9. On the Choose Replica Creation Method page, indicate how you want to take the initial backup, and select Next.

   • Значение по умолчанию: автоматически по сети и сейчас. If you use the default, specify an off-peak time. If you choose Later, specify a day and time.
   • Для больших объемов данных или менее оптимальных сетевых условий рассмотрите возможность репликации данных в автономном режиме с помощью съемных носителей.

   

10. For Consistency check options, select how and when to automate the consistency checks and select Next.

    • Вы можете выполнять проверки согласованности, когда данные реплики становятся несогласованными или по заданному расписанию.
    • If you don't want to configure automatic consistency checks, you can run a manual check by right-clicking the protection group Perform Consistency Check.

11. On the Specify Online Protection Data page, select the VMs or VM folders that you want to back up, and then select Next.

    Подсказка

    You can select the members individually or choose Select All to choose all members.

    

12. On the Specify Online Backup Schedule page, indicate how often you want to back up data from local storage to Azure.

    • Cloud recovery points for the data to get generated according to the schedule.
    • After the recovery point gets generated, it gets transferred to the Recovery Services vault in Azure.

    

13. On the Specify Online Retention Policy page, indicate how long you want to keep the recovery points created from the backups to Azure.

    • Срок хранения данных в Azure не ограничен.
    • The only limit is that you can't have more than 9,999 recovery points per protected instance. In this example, the protected instance is the VMware vCenter Server.

    

14. On the Summary page, review the settings and then select Create Group.

    

Monitor with the Azure Backup Server console

After you configure the protection group to back up Azure VMware Solution VMs, you can monitor the backup job status and alert by using the Azure Backup Server console. Here's what you can monitor.

• In the Monitoring task area:
  • Under Alerts, you can monitor errors, warnings, and general information. You can view active and inactive alerts and set up email notifications.
  • Under Jobs, you can view jobs started by Azure Backup Server for a specific protected data source or protection group. Можно следить за ходом выполнения задания или проверить ресурсы, используемые заданием.
• In the Protection task area, you can check the status of volumes and shares in the protection group. You can also check configuration settings such as recovery settings, disk allocation, and the backup schedule.
• In the Management task area, you can view the Disks, Online, and Agents tabs to check the status of disks in the storage pool, registration to Azure, and deployed DPM agent status.

Restore VMware vSphere virtual machines

In the Azure Backup Server Administrator Console, there are two ways to find recoverable data. You can search or browse. When you recover data, you might or might not want to restore data or a VM to the same location. For this reason, Azure Backup Server supports three recovery options for VMware VM backups:

• Original location recovery (OLR): Use OLR to restore a protected VM to its original location. You can restore a VM to its original location only if no disks were added or deleted since the backup occurred. If disks were added or deleted, you must use alternate location recovery.
• Alternate location recovery (ALR): Use when the original VM is missing, or you don't want to disturb the original VM. Provide the location of an ESXi host, resource pool, folder, and the storage datastore and path. To help differentiate the restored VM from the original VM, Azure Backup Server appends "-Recovered" to the name of the VM.
• Individual file location recovery (ILR): If the protected VM is a Windows Server VM, individual files or folders inside the VM can be recovered by using the ILR capability of Azure Backup Server. Чтобы восстановить отдельные файлы, используйте процедуру, описанную далее в этой статье. Restoring an individual file from a VM is available only for Windows VM and disk recovery points.

Восстановить точку восстановления

1. In the Azure Backup Server Administrator Console, select the Recovery view.

2. Use the Browse pane and browse or filter to find the VM you want to recover. After you select a VM or folder, the **Recovery points for pane display the available recovery points.

   

3. In the Recovery points for pane, select a date when a recovery point was taken. For example, calendar dates in bold have available recovery points. Alternately, you can right-click the VM, select Show all recovery points, and then select the recovery point from the list.

   Примечание.

   For short-term protection, select a disk-based recovery point for faster recovery. After short-term recovery points expire, you see only Online recovery points to recover.

4. Before recovering from an online recovery point, ensure the staging location contains enough free space to house the full uncompressed size of the VM you want to recover. The staging location can be viewed or changed by running the Configure Subscription Settings Wizard.

   

5. Select Recover to open the Recovery Wizard.

   

6. Select Next to go to the Specify Recovery Options screen. Select Next again to go to the Select Recovery Type screen.

   Примечание.

   VMware vSphere workloads don't support enabling network bandwidth throttling.

7. On the Select Recovery Type page, either recover to the original instance or a new location.

   • If you choose Recover to original instance, you don't need to make any more choices in the wizard. The data for the original instance is used.
   • Если вы выбрали "Восстановить как виртуальную машину" на любом узле, на экране "Указать назначение" укажите сведения для узла ESXi, пула ресурсов, папки и пути.

   

8. On the Summary page, review your settings and select Recover to start the recovery process.

   На экране Состояния восстановления отображается ход восстановления.

Восстановление отдельного файла с виртуальной машины

Вы можете восстановить отдельные файлы из точки восстановления, созданной для защищенной виртуальной машины. Эта функция доступна только для виртуальных машин под управлением Windows Server. Restoring individual files is similar to restoring the entire VM, except you browse in the VMDK and find the files you want before you start the recovery process.

1. In the Azure Backup Server Administrator Console, select the Recovery view.

2. In the Browse pane, browse or filter to find the VM you want to recover. After you select a VM or folder, the **Recovery points for pane display the available recovery points.

   

3. In the Recovery points for pane, use the calendar to select the wanted recovery points' date. Depending on how the backup policy was configured, dates can have more than one recovery point.

4. After you select the day when the recovery point was taken, make sure you choose the correct Recovery time.

   Примечание.

   If the selected date has multiple recovery points, choose your recovery point by selecting it in the Recovery time drop-down menu.

   After you choose the recovery point, the list of recoverable items appears in the Path pane.

5. To find the files you want to recover, in the Path pane, double-click the item in the Recoverable Item column to open it. Then select the file or folders you want to recover. To select multiple items, select the Ctrl key while you select each item. Use the Path pane to search the list of files or folders that appear in the Recoverable Item column.

   Примечание.

   The option, Search list below doesn't search into subfolders. Чтобы просмотреть вложенные папки, дважды щелкните нужную папку. Кнопка Вверх позволяет перейти из дочерней папки в родительскую папку. Вы можете выбрать сразу несколько элементов (файлов и папок), но только расположенных в одной родительской папке. Невозможно восстановить элементы из нескольких папок одним заданием восстановления.

   

6. After selecting the items for recovery, in the Administrator Console tool ribbon, select Recover to open the Recovery Wizard. In the Recovery Wizard, the Review Recovery Selection screen shows the selected items to be recovered.

7. On the Specify Recovery Options screen, do one of the following steps:

   • Select Modify to enable network bandwidth throttling. In the Throttle dialog box, select Enable network bandwidth usage throttling to turn it on. После этого настройте параметры и расписание работы.
   • Select Next to leave network throttling disabled.

8. На экране Выбор типа восстановления нажмите кнопку Далее. You can only recover your files or folders to a network folder.

9. На экране Указание назначения выберите Обзор, чтобы найти сетевое расположение для ваших файлов или папок. Azure Backup Server creates a folder where all recovered items are copied. The folder name has the prefix MABS_day-month-year. When you select a location for the recovered files or folder, the details for that location are provided.

   

10. На экране Определение параметров восстановления выберите параметр безопасности, который вы хотите применить. Вы можете изменить регулирование использования полосы пропускания сети, но по умолчанию оно отключено. Кроме того, параметры Восстановление SAN и Уведомления также отключены.

11. На экране Сводка проверьте выбранные параметры и щелкните Восстановить, чтобы начать процесс восстановления. На экране Состояния восстановления отображается ход восстановления.

Дальнейшие действия

Now that you know how to back up your Azure VMware Solution VMs with Azure Backup Server, expand your knowledge and learn more about:

• Troubleshooting when setting up backups in Azure Backup Server.
• Lifecycle management of Azure VMware Solution VMs.