> Commvault Cloud > Virtualization > Azure

Restores for Azure VMs

For Azure, you can restore full VMs, restore guest files and folders, and restore a disk and attach it to an existing VM.

End User Restores

End users can restore VMs either in place or out of place. For this scenario, the VM display name option is the only value the user can change on the Restore options dialog box.

Users can also restore a virtual machine disk to an existing VM. The disks are restored and attached to the destination VM.

If the VM display name is the same as an existing VM on the destination, the restore fails.

Considerations

  • An application security group (ASG) is retained on a restored VM only if the VM is restored to the same network. If the VM is restored to a different region or a different network, then the ASG is not retained.

  • For Azure managed disks that have virtual machines configured with Availability Zones in their Azure regions:

    • If the selected region of the destination VM supports Availability Zones, the Availability Zone information will be restored to the destination VM. The restore completes successfully.

    • If the selected region of the destination VM does not support Availability Zones, the Availability Zone information will not be restored to the destination VM. The restore completes successfully.

  • You can back up and restore Azure managed disks that are enabled with encryption at the host. Encryption at the host applies to Azure managed disks that reside on Windows or Linux VMs, but only to data at rest, with no effect on guest files restores.

  • Restores to different hypervisors are supported when a VM is encrypted with customer-managed encryption keys.

  • If a virtual machine is encrypted using Azure Key Vault:

    • Full VM restores are supported per source subscription. However, restores of encrypted VMs to a different subscription are not supported due to a Microsoft Azure limitation with restoring Key Vault across subscriptions.

    • Restoring to a different region under the same subscription will create a new key vault automatically, and the restore job will complete successfully.

    • Keys and secrets are not accessible to subscription users by default when the Key Vault itself is restored. The restore operation will add only the application's service principal in the Key Vault access control as an authorized user. If necessary, the subscription administrator can make changes to these permissions using the Azure portal.

    • Microsoft restrictions for virtual machines encrypted using Azure Key Vault also apply to encrypted Azure virtual machines in your Commvault Cloud environment for restoring your virtual machine and Key Vault. For more information, see Azure Key Vault.

  • For full VM restores, you must have a storage account (Azure Standard or Premium general-purpose storage account) in a region, and the storage account must be within the specific subscription where you plan to restore the VM. This storage account acts as a staging location when a VM is restored as a managed VM.

For information about restoring Azure VMs to a different hypervisor, see Cross-Hypervisor Restores (VM Conversion).

Loading...