The Venusian: How To Backup & Recover Hyper-V Virtual Machines Using Microsoft Azure Backup Server? #HyperV #Azure #DPM

 

Venus is at its best right now  Smile

The basic Azure online Backup service just went to the next level. On October 7th, 2015 Microsoft announced the evolution of Azure Backup with the introduction of a customized version of System Center Data Protection Manager which is referred to Azure Backup Server. With the introduction of Microsoft Azure Backup Server (MABS), codenamed “Venus”, you can perform on-premises backups of files & folders as before, but now it adds capabilities to protect Hyper-V Virtual Machines, SQL Server, SharePoint Server, Exchange, and Windows clients as well, then you configure a policy to send an encrypted copy of subset or all of your data to Microsoft Azure. The Azure Backup server keeps short-term retention on-premises and the Azure Backup vault keeps long term retention. This is fantastic!

As Microsoft mentioned clearly, the Microsoft Azure Backup server inherits the functionality of Data Protection Manager (DPM) for workload backup, so if you are familiar with DPM, MABS looks similar. However Microsoft Azure Backup Server does not provide protection on tape or integrate with System Center suite, so you’ll need the full DPM license for that. I believe the vast majority of customer will go that way, saving on System center licensing.

With the introduction of Microsoft Azure Backup Server (MABS), you can protect application workloads such as Hyper-V VMs, Microsoft SQL Server, SharePoint Server, Microsoft Exchange and Windows clients to:

  • Disk (D2D), giving high RTOs for tier 1 workloads, short-term retention.
  • Azure (D2D2C) for long term retention.

You can manage the protection of various protected entities (servers and clients) from a single on-premises user interface.

In this article, I will show you how to deploy Microsoft Azure Backup Server, so you can back up and recover your Hyper-V Virtual Machines on-premises and to Azure.

Download Microsoft Azure Backup Server

You can download MABS directly from here (3GB) or using a link from Azure backup vault.

 AzureBackup-ProjectVenus02

You can deploy Microsoft Azure Backup server as:

  • A physical standalone server.
  • A Hyper-V virtual machine hosted on an on-premises Hyper-V host server to back up on-premises data.
  • A Windows virtual machine in VMware – In this scenario Microsoft Azure Backup Server can be deployed as a physical standalone server, as a Hyper-V virtual machine, or as a Windows virtual machine in VMware.
  • An Azure virtual machine – You can run Microsoft Azure Backup Server as a virtual machine in Azure to back up cloud workloads running as Azure virtual machines.

Microsoft Azure Backup Requirements

Microsoft Azure Backup Server can only be used by Azure customers, and the setup requires you to provide backup vault credentials. Although the Microsoft Azure Backup Server licensing is free, so you’ll need a Windows Server license to run it on.

  • Microsoft Azure Backup can be installed on Windows Server 2008 R2 SP1, 2012 and 2012 R2.
  • Microsoft Azure Backup server cannot be installed on a machine which has the SCDPM or SCDPM RA agent installed.
  • Microsoft Azure Backup server cannot be installed on a machine that has Microsoft Azure Backup agent installed and registered with an Azure Backup vault.

Microsoft Azure Backup Prerequisites

  • Processor: Minimum: 1 GHz, dual-core CPU, Recommended: 2.33 GHz quad-core CPU.
  • RAM: Minimum: 4GB, Recommended: 8GB.
  • Hard Drive Space: Minimum: 3GB Recommended: 3GB.
  • Disks for backup storage pool: The recommended storage pool size is 1.5 times the size of protected data.
  • MABS require space for a scratch location; which is a folder that have at least 5% free space of the data backed-up to cloud.
  • The server should have connectivity to Internet. Microsoft Azure should be accessible by the Azure Backup server.
  • Microsoft Azure Backup server must be domain joined.
  • Microsoft Azure Backup server must have .Net 3.5, .Net 4.0, .Net 3.5 SP1 features installed.
  • Microsoft Azure Backup server should have Windows Management Framework 4.0 installed.
  • Active Directory Domain Service.

Create a Backup Vault

  1. Sign in to Azure Management Portal
  2. Click New > Data Services > Recovery Services > Backup Vault and choose Quick Create.

AzureBackup-ProjectVenus04

Azure Backup – Storage Redundancy

By default when you crate the Vault, the storage redundancy is set to GEO REDUNDANT. The best time to identify your storage redundancy option is right after vault creation, and before any machines are registered to the vault. Once an item has been registered to the vault, the storage redundancy option is locked and cannot be modified.

AzureBackup-ProjectVenus05

Download the vault credential file
  1. Sign in to Azure Management Portal
  2. Click on Recovery Services in the left navigation pane and select the backup vault which you have created above. Click on the cloud icon to get to the Quick Start view of the backup vault.
  3. The portal will generate a vault credential using a combination of the vault name and the current date. Click Save to download the vault credentials to the local account’s downloads folder, or select Save As from the Save menu to specify a location for the vault credentials. The vault credential file is required when we install Azure Backup Server later on.

AzureBackup-ProjectVenus06

Install Microsoft Azure Backup server on-premises

After you’ve downloaded all MABS files, click MicrosoftAzureBackupInstaller.exe. The Microsoft Azure Backup Setup Wizard will appear.

AzureBackup-ProjectVenus07

Follow the wizard…

AzureBackup-ProjectVenus08

Click on Extract to begin extracting the setup files.

AzureBackup-ProjectVenus09

Select Execute setup.exe to begin installing Microsoft Azure Backup server and click Finish.

AzureBackup-ProjectVenus10

Click Microsoft Azure Backup to launch the setup wizard.

AzureBackup-ProjectVenus11

Click Next.

AzureBackup-ProjectVenus12

Click Check to determine if your hardware and software prerequisites for Microsoft Azure Backup server are have been met.

AzureBackup-ProjectVenus13

If all of the prerequisites are have been met successfully, you will see a message as the following indicating that the computer meets the requirements.

Click Next.

AzureBackup-ProjectVenus14

Microsoft Azure Backup server requires SQL Server Standard. Select an existing SQL Server 2014 Standard local instance or let the wizard install SQL Server Standard. In my demo, I will select to install new Instance.

Click Check and Install to make sure server has required SQL prerequisites installed.

AzureBackup-ProjectVenus15

You might encounter the following error messages. Make sure .Net 3.5 SP1 features are installed, and then restart the machine.

AzureBackup-ProjectVenus16

Once the prerequisites are successfully installed, click Next.

AzureBackup-ProjectVenus17

Provide a location for the installation of Microsoft Azure Backup server files (Application, Scratch location and Database).

Note: You need to ensure the scratch location is at least 5% of the data planned to be backed up to the cloud.

Click Next.

AzureBackup-ProjectVenus18

Provide a strong password for restricted local user accounts, this password does not expire.

Click Next.

AzureBackup-ProjectVenus19

Select whether you want to use Microsoft Update to check for updates and click Next. I strongly recommend to select the update which offers security and important updates for Windows and other products like Microsoft Azure Backup server.

AzureBackup-ProjectVenus20

Review the Summary of Settings and click Install.

AzureBackup-ProjectVenus21

Click Next to launch the installation phase of the Microsoft Azure Recovery Services Agent (The wizard will check for direct Internet connectivity).

AzureBackup-ProjectVenus22

Click Install. (The wizard checks for prerequisites and installs them if it finds any missing).

AzureBackup-ProjectVenus23

The wizard will install Azure Recovery Services Agent locally on the server.

AzureBackup-ProjectVenus24

When the installation of the agent completes, click Next to register this server with Azure Backup vault.

Provide your Azure Backup vault credentials to register the server and click Next.

AzureBackup-ProjectVenus25

Provide a passphrase minimum 16-character used to encrypt/decrypt the data sent to Azure and provide a location to store this passphrase. Or you can automatically generate a passphrase. Click Next.

Note: Microsoft Azure Backup server does not send this passphrase along with your data to Azure. You need to store this passphrase, which will be needed when you restore data from Azure, in a secure location

AzureBackup-ProjectVenus26

The installation proceeds to the installation and configuration of SQL Server Standard 2014, this will take several minutes to complete.

Have a break and then come back!

AzureBackup-ProjectVenus27

Once SQL installation completes, then Microsoft Azure Backup server components are installed.

AzureBackup-ProjectVenus28

Congrats! The product has been installed successfully.

Click Close.

AzureBackup-ProjectVenus29

Double-click the icon to launch Microsoft Azure Backup Server.

AzureBackup-ProjectVenus30

Add a disk to the storage pool

To back up workloads to disk and Azure, you first need to add a disk to the storage pool on-premises.

The same Disk storage DMP prerequisites will apply. For more information about adding disks, see Configure storage pools and disk storage.

I will a 100GB Virtual Hard Disk to the Storage Pool.

AzureBackup-ProjectVenus31

Deploy Microsoft Azure Backup Agent

Click Management> Data Services > Agents > Install Agents

AzureBackup-ProjectVenus32

I will install the agent on my Hyper-V two nodes Cluster.

AzureBackup-ProjectVenus33

Specify a username and password with enough admin rights to install agents.

Click Next.

AzureBackup-ProjectVenus34

I prefer to restart my Hyper-V cluster manually.

Click Next.

AzureBackup-ProjectVenus35

Review the summary and click Install.

AzureBackup-ProjectVenus36

If you hit the following error (Error 347: An error occurred when the agent operation attempted to create the DPM Agent Coordinator service), then make sure you don’t have any previous Microsoft Azure Recovery Services Agent installed, because it’s conflicting with the updated one.

In my demo, I had the previous Azure Recovery Services Agent installed on each Hyper-V node.

AzureBackup-ProjectVenus38 AzureBackup-ProjectVenus37

Uninstall the previous agent and you are good to go…

AzureBackup-ProjectVenus39

Short-Term Protection (D2D), and Long Term Protection (D2D2C)

Open Microsoft Azure Backup console > Click Protection > New >

Click Next.

AzureBackup-ProjectVenus40

Select Servers and click Next.

AzureBackup-ProjectVenus41

Select the Virtual Machine(s) you want to protect, and click Next.

For this demo, I will select clustered VM-T01

AzureBackup-ProjectVenus42

Here you can select the protection method you like, either short-term protection (D2D), long-term protection (D2D2C) or both.

I will choose both protection methods, and click Next.

AzureBackup-ProjectVenus43

Specify Short-Term Goals on-prem recovery option.

I will specify 15 days as retention range, and click Next.

AzureBackup-ProjectVenus44

Review the default Disk Allocation. I strongly recommend to select Automatically grow the volumes when more disk space is required.

Click Next.

AzureBackup-ProjectVenus45

Choose when and how you want to create the replica.

For this demo, I will select now… Click Next.

AzureBackup-ProjectVenus46

Select Run a consistency check if a replica becomes inconsistent.

Click Next.

AzureBackup-ProjectVenus47

The remaining wizard options are dedicated to Azure online protection.

Select the members that you want to protect online (long term protection).

Click Next.

AzureBackup-ProjectVenus48

Define the schedule when you wan to create a backup copy.

I will select one time daily @ 10.00 PM (maximum allowed is two times a day).

Click Next.

AzureBackup-ProjectVenus49

Here the interesting online retention policy and the power of Azure.

Daily for 180 Days, Weekly for 104 Weeks, Monthly for 60 Months and Yearly for 10 Years! 

AzureBackup-ProjectVenus50

Choose the Online or Offline Replication, if you have a lot of data to protect online and your bandwidth is limited, then you can create offline backup by filling the workflow below and then ship the disk to Azure Datacenter.

For more information about Offline Backup, please read here.

AzureBackup-ProjectVenus51

Here you can review the complete summary for Short-term and long term protection.

Click Create Group.

AzureBackup-ProjectVenus52

Review the status, and click Close.

AzureBackup-ProjectVenus53

Sit back and relax while your data is being replicated to Azure.

Recovery from Azure

Open Microsoft Azure Backup console > Click Recovery > Local DPM Data > Expand protected data

AzureBackup-ProjectVenus54

Right Click Online\… Recoverable Item and select Show all recovery points.

Select Online and click Recover. (You can recover from Disk as well which is on-premises).

AzureBackup-ProjectVenus55

The Recovery Wizard will open… Review the recovery selection and click Next.

AzureBackup-ProjectVenus56

Select Recovery Type…

Recover to original instance which will overwrite the current files, Recover as virtual machine to any Hyper-V host or Copy to a network folder.

For this demo, I will copy the VM to a network folder.

Click Next.

AzureBackup-ProjectVenus57

Select Destination path where you want to recover the virtual machine and click OK.

AzureBackup-ProjectVenus58

Review the destination path and space available.

Click Next.

AzureBackup-ProjectVenus59

Here you can specify the recovery options such as (Restore security permissions, Network bandwidth usage throttling, SAN Recovery and email Notification).

AzureBackup-ProjectVenus60

The Network bandwidth usage throttling is very helpful, you can specify the amount of bandwidth you want to allow during work-hours and non-work hours.

 AzureBackup-ProjectVenus61

Review the summary of the recovery settings and click Recover.

AzureBackup-ProjectVenus62

You will hit the recovery staging error message that it has not been configured yet.

In order to recover from Azure, you have to configure the staging area.

AzureBackup-ProjectVenus63

The Azure Backup agent running on the Azure Backup Server needs temporary storage for data restored from the cloud (local staging area).

Launch Microsoft Azure Backup console > Click Management > Click Online > Click Configure

The Subscription Settings Wizard will open. If you are using a proxy server, please add it here.

Click Next.

AzureBackup-ProjectVenus64

Enable internet bandwidth usage throttling for online backup operations.

Click Next.

AzureBackup-ProjectVenus65

This is very important step, you need to enter a folder location with sufficient space to hold the recoverable items in parallel.

As mentioned in below screenshot, for example: if you want to recover 10 Virtual Machines from online protection in parallel and the size of each VM backup is up to 100GB, then select a folder which can hold 10 X 100GB = 1TB of data.

Click Next.

AzureBackup-ProjectVenus66

You must specify a minimum of 16 characters to encrypt all backups from Azure Backup Server to Azure online.

It’s very important to keep a copy of your passphrase in a safe location, because for any reason Azure customer support will not be able to assist you in recovering access to your backed up data.

Click Finish.

AzureBackup-ProjectVenus67

Review the configuration completed successfully.

Click Close.

AzureBackup-ProjectVenus68

Re-try the online recovery operation now as described in this section and it should work as expected.

AzureBackup-ProjectVenus69

Item Level Recovery (disk protection only)

The item level recovery for Hyper-V virtual machines is supported for disk protection (on-premises) based recovery point only and not from Azure. Item level recovery will work only if the base VHD and differencing VHDs are on the same volume.

Open Microsoft Azure Backup console > Click Recovery > Local DPM Data > Expand protected data > All Protected Hyper-V Data

Double Click Online\VM…

AzureBackup-ProjectVenus70

Keep double-clicking until you reach the Virtual Hard Disk.

AzureBackup-ProjectVenus71Select the single item that you wish to recover, right click and select Recover…

AzureBackup-ProjectVenus72

Review the Recovery Selection… As you noticed the Recovery option is from Disk only.

Click Next.

AzureBackup-ProjectVenus73

The Recovery Type for item level recovery is to a network folder.

Click Next.

AzureBackup-ProjectVenus74

Specify the destination path.

Click Next.

AzureBackup-ProjectVenus75

Specify the recovery options where needed and click Next.

AzureBackup-ProjectVenus76

Review Summary and click Recover…

AzureBackup-ProjectVenus77

And here you go 🙂

AzureBackup-ProjectVenus78

I hope this lengthy article gave you a solid foundation to start protecting your data on-premises and to Azure!

From Venus with Love… enjoy your weekend!

Cheers,
-Charbel

About Charbel Nemnom 311 Articles
Charbel Nemnom is a Microsoft Cloud Consultant and Technical Evangelist, totally fan of the latest's IT platform solutions, accomplished hands-on technical professional with over 15 years of broad IT Infrastructure experience serving on and guiding technical teams to optimize performance of mission-critical enterprise systems. Excellent communicator adept at identifying business needs and bridging the gap between functional groups and technology to foster targeted and innovative IT project development. Well respected by peers through demonstrating passion for technology and performance improvement. Extensive practical knowledge of complex systems builds, network design and virtualization.

1 Comment

  1. I get this error when I want to do item level recovery. Azure Backup Server installed on Windows Server 2008 R2.

    DPM cannot browse the contents of the virtual machine on the protected computer srevername. Item level recovery is not supported in the following scenarios.
    1. The VHD contains a dynamic disk inside the guest OS.
    2. The VHD has no volume.
    3. HyperV role is not installed on DPM server.
    4. Automatic mounting of volumes is disabled on the DPM server.

    1) Try enabling automatic mounting of volumes using mountvol on the DPM server to preform item level recovery.
    2) Otherwise perform a full restore of the virtual machine.

    ID: 958
    Details: Internal error code: 0x80990F4E

Leave a Reply