Veeam Backup for Microsoft

Azure

Version 5.0
Integration with Veeam Backup & Replication Guide
April, 2023
© 2023 Veeam Software.

All rights reserved. All trademarks are the property of their respective owners.

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or
translated into any language in any form by any means, without written permission from Veeam Software
(Veeam). The information contained in this document represents the current view of Veeam on the issue
discussed as of the date of publication and is subject to change without notice. Veeam shall not be liable for
technical or editorial errors or omissions contained herein. Veeam makes no warranties, express or implied, in
this document. Veeam may have patents, patent applications, trademark, copyright, or other intel lectual
property rights covering the subject matter of this document. All other trademarks mentioned herein are the
property of their respective owners. Except as expressly provided in any written license agreement from Veeam,
the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other
intellectual property.

NOTE
Read the End User Software License Agreement before using the accompanying software programs. Using
any part of the software indicates that you accept the terms of the End User Software License Agreement.

2 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Contents
CONTACTING VEEAM SOF TWARE ................................ ................................ ........................... 5
ABOUT THIS DOCUMENT ................................ ................................ ................................ ..... 6
WELCOME TO MICROSOFT AZURE PLUG-IN FOR VEEAM BACKUP & REPLICATION ................................ .. 7
PLANNING AND P REPARATION ................................ ................................ .............................. 8
System Requirements ........................................................................................................................... 9
Ports .................................................................................................................................................. 10
Permissions ......................................................................................................................................... 11
LICENSING ................................ ................................ ................................ ..................... 16
Limitations .......................................................................................................................................... 17
Scenarios .............................................................................................................................................18
Viewing License Details ........................................................................................................................19
Managing Licensed W orkloads............................................................................................................. 20
ARCHITECTURE OVERVIEW ................................ ................................ ................................ . 22
DEPLOY MENT ................................ ................................ ................................ ................. 23
Installing Plug -In ................................................................................................................................ 24
Installing and Uninstalling Plug-In in Unattended Mode ....................................................................... 25
Upgrading Plug-In .............................................................................................................................. 27
Uninstalling Plug-In ............................................................................................................................ 28
ACCESSING PLUG -IN ................................ ................................ ................................ .........29
Accessing Veeam Backup & Replication Console ................................................................................... 30
Accessing Veeam Backup for Microsoft Azure Web UI ............................................................................ 31
CONFIGURATION................................ ................................ ................................ .............. 32
Managing Veeam Backup for Microsoft Azure Appliances ...................................................................... 33
Adding Veeam Backup for Microsoft Azure Appliances ................................................................ 34
Editing Appliance Settings......................................................................................................... 58
Upgrading Appliances ...............................................................................................................60
Rescanning Appliances ...............................................................................................................61
Removing Appliances ................................................................................................................ 62
Managing Repositories ........................................................................................................................ 64
Adding Repositories .................................................................................................................. 65
Editing Repositories .................................................................................................................. 76
Rescanning Rep ositories ............................................................................................................ 77
Removing Rep ositories .............................................................................................................. 78
Performing Configuration Backup and Restore ..................................................................................... 79
Configuration Backup ................................................................................................................80
Configuration Restore ............................................................................................................... 82

3 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
DATA PROTECTION ................................ ................................ ................................ ...........92
Performing Backup ............................................................................................................................. 93
Creating Backup P olicies............................................................................................................ 94
Editing Backup P olicy Settings ................................................................................................... 95
Enabling and Disabling Backup P olicies ...................................................................................... 96
Starting and Stopping Backup P olicies ........................................................................................ 97
Deleting Backup Policies ........................................................................................................... 98
Creating Backup Copy Jobs ................................................................................................................. 99
Copying Backups to Tapes ................................................................................................................. 100
MANAGING BACKED -UP DATA ................................ ................................ ............................. 101
Decrypting Back ups ...........................................................................................................................103
DATA RECOVERY................................ ................................ ................................ ............ 104
Performing Azure VM Restore ............................................................................................................105
Performing E ntire VM Restore ................................................................................................. 106
Performing Disk Restore ...........................................................................................................120
Performing Guest OS File Recovery ............................................................................................121
Performing Application Restore ................................................................................................ 123
Performing SQL Restore ..................................................................................................................... 125
Step 1. La unch Restore to Microsoft Azure SQL Wizard ............................................................... 126
Step 2. Select SQL Database and Restore P oint .......................................................................... 127
Step 3. Choose Restore Mode ................................................................................................... 128
Step 4. Specify Target SQL Server Settings ................................................................................130
Step 5. Specify SQL Database Name ...........................................................................................131
Step 6. Specify Restore Reason................................................................................................. 132
Step 7. Finish Working with Wizard ........................................................................................... 133
Performing Azure Files Restore .......................................................................................................... 134
Performing Instant Recovery .............................................................................................................. 135
Exporting Disks ................................................................................................................................. 137
Restoring to AWS............................................................................................................................... 138
Restoring to Google Cloud ................................................................................................................. 139
Restoring to Nutanix AHV ................................................................................................................. 140
VIEWING SESSION STATISTICS ................................ ................................ ............................ 142
GETTING TECHNICAL SUPPORT................................ ................................ ........................... 143
FE ATURES AND P LUG-IN VERSIONS ................................ ................................ ..................... 144

4 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Contacting Veeam Software
At Veeam Software we value feedback from our customers. It is important not only to help you quickly with your
technical issues, but it is our mission to listen to your input and build products tha t incorporate your
suggestions.

Customer Support
Should you have a technical concern, suggestion or question, visit the Veeam Customer Support Portal to open a
case, search our knowledge base, reference documentation, manage your license or obtain the latest product
release.

Company Contacts
For the most up-to-date information about company contacts and office locations, visit the Veeam Contacts
Webpage.

Online Support
If you have any questions about Veeam products, you can use the following resources:

• Full documentation set: veeam.com/documentation-guides-datasheets.html

• Veeam R&D Forums: forums.veeam.com

5 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
About This Document
This guide provides information on integration of Veeam Backup & Replication and Veeam Backup for Microsoft
Azure. The document describes how to install Microsoft Azure Plug -in for Veeam Backup & Replication, how to
add Veeam Backup for Microsoft Azure to the backup infrastructure, and gives instructions on how to monitor
Veeam Backup for Microsoft Azure sessions and perform restore of Azure VMs, databases and other resources
from the Veeam Backup & Replication console.

Intended Audience
This guide is designed for backup administrators who plan to use the Veeam Backup & Replication console to
manage backup and restore operations.

Microsoft Azure Plug-in for Veeam Backup & Replication is built on top of Veeam Backup & Replication, and this
guide assumes that you have a good understanding of this solution.

6 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Welcome to Microsoft Azure Plug-In for
Veeam Backup & Replication
Microsoft Azure Plug-in for Veeam Backup & Replication is a solution developed for data protection and disaster
recovery tasks for Microsoft Azure environments. Microsoft Azure Plug -in for Veeam Backup & Replication
extends the Veeam Backup & Replication functionality and provides access to Veeam Backup for Microsoft Azure
in the Veeam Backup & Replication console.

NOTE

Microsoft Azure Plug-in for Veeam Backup & Replication is built on top of Veeam Backup & Replication.
This guide assumes that you have a good understanding of the Veeam Backup & Replication solution.

With Microsoft Azure Plug-in for Veeam Backup & Replication, you can add Veeam Backup for Microsoft Azure
appliances to the backup infrastructure and perform the following operations from the Veeam Backup &
Replication console:

• Start and stop backup policies.

• Monitor session statistics.

• View created snapshots and image-level backups.

• Restore entire Azure VMs, individual virtual disks, and guest OS files and folders.

• Restore entire Azure VMs to AWS, Google Cloud and Nutanix AHV.

• Perform Instant Recovery of Azure VMs to VMware vSphere or Hyper -V environments, and to Nutanix AHV
clusters.

• Restore SQL databases to Microsoft Azure.

• Restore Azure file shares.

• Perform configuration backup and restore.

7 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Planning and Preparation
Before you start using Microsoft Azure Plug-in for Veeam Backup & Replication, consider the following:

• Hardware and software requirements

• Network ports that must be open for data transmission

• Permissions that must be granted to accounts used for data protection and disas ter recovery operations

8 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
System Requirements
When you plan to install Microsoft Azure Plug-in for Veeam Backup & Replication, consider the following
hardware and software requirements.

Backup Server
The machine where Microsoft Azure Plug-in for Veeam Backup & Replication will run must meet system
requirements described in the Veeam Backup & Replication User Guide, section System Requirements.
Additionally, the following software must be installed:

• Microsoft .NET Core Runtime 6.0 or later

• Microsoft ASP.NET Core Shared Framework 6.0 or later

Veeam Backup & Replication

Microsoft Azure Plug-in for Veeam Backup & Replication version 5.0 (build 12.0.5.740) supports integration
with Veeam Backup & Replication version 12 (build 12.0.0.1420).

Veeam Backup for Microsoft Azure

Microsoft Azure Plug-in for Veeam Backup & Replication version 5.0 (build 12.0.5.740) supports integration
with Veeam Backup for Microsoft Azure version 5.x.

Requirements for Azure Services

The Veeam Backup for Microsoft Azure appliance and worker instances must have outbound internet access to a
number of Microsoft Azure services. For the list of services, see the Veeam Backup for Microsoft Azure User
Guide, section Azure Services.

9 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Ports
As Microsoft Azure Plug-in for Veeam Backup & Replication is installed on the same machine where Veeam
Backup & Replication runs, it uses the same ports as those described in the Veeam Backup & Replication User
Guide, section Ports. In addition, Microsoft Azure Plug-in for Veeam Backup & Replication also uses ports listed
in the following table.

From To P rotocol P ort Notes

Backup server Veeam TCP 443 Port used for communication with Azure
Backup for and Veeam Backup for Microsoft Azure.
Microsoft
Azure For the list of required Azure services, see
appliance, the Veeam Backup for Microsoft Azure
Azure User Guide, section Azure Services.
services

Microsoft TCP 6172 Port used by Microsoft Azure Plug-in for

Azure Plug-in Veeam Backup & Replication to connect
for Veeam to a component that enables
Backup & communication with the Veeam Backup &
Replication Replication database.

Veeam Backup server TCP 20443 Port used to connect to Microsoft Azure
Ba ckup & Plug-in for Veeam Backup & Replication.
Rep lication
console and
Veeam ONE
server

NOTE

When you deploy a Veeam Backup for Microsoft Azure appliance from the Veeam Backup & Replication
console, Veeam Backup & Replication automatically creates firewall rules for the required ports to allow
communication between the backup server and the appliance components.

In addition, a number of ports must be open on the Veeam Backup for Microsoft Azure appliance to ensure
proper communication of components in your infrastructure. For more information, see the Veeam Backup for
Microsoft Azure User Guide, section Ports.

10 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Permissions
To perform backup and restore operations, accounts that Microsoft Azure Plug -in for Veeam Backup &
Replication uses to perform data protection and disaster recovery operations must be granted the following
permissions.

Veeam Backup & Replication User Account Permissions

A user account that you plan to use when installing and working with Veeam Backup & Replication must have
permissions described in the Veeam Backup & Replication User Guide, section Installing and Using Veeam
Backup & Replication.

If you plan to connect to a Microsoft Azure Active Directory using Remote Access Console, you must run the
console as administrator.

Veeam Backup for Microsoft Azure User Account Permissions

To get access to Veeam Backup for Microsoft Azure functionality, Veeam Backup & Replication uses user
accounts of Veeam Backup for Microsoft Azure appliances.

A user account that will be used by Veeam Backup & Replication to authenticate against the Veeam Backup for
Microsoft Azure appliance and get access to the appliance functionality must be assigned the Portal
Administrator role. For more information on user roles, see the Veeam Backup for Microsoft Azure User Guide,
section Managing Permissions.

NOTE

If you deploy a Veeam Backup for Microsoft Azure appliance from the Veeam Backup & Replication console,
Veeam Backup & Replication will automatically create the necessary user account that will be assigned all
the required permissions.

Service Account Permissions

Microsoft Azure Plug-in for Veeam Backup & Replication requires a Microsoft Azure compute account (Azure AD
application) whose permissions are used to create, connect and manage Veeam Backup for Microsoft Azure
appliances, and to perform data protection and disaster recovery operations with Microsoft Azure r esources.

You can specify an existing account or instruct Veeam Backup & Replication to create a new account:

• If you instruct Veeam Backup & Replication to create a new account, Veeam Backup & Replication creates
an Azure AD application in Microsoft Azure, and automatically assigns the Owner and Key Vault Crypto
User roles to the application.

11 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
 • If you specify an existing account, Veeam Backup & Replication connects to an existing Azure AD
application that must be assigned the following set of permissions:

List of Permissions

12 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
 {
"permissions": [
{
"actions": [
"Microsoft.Authorization/roleAssignments/read",
"Microsoft.Commerce/RateCard/read",
"Microsoft.Compute/diskEncryptionSets/read",
"Microsoft.Compute/disks/beginGetAccess/action",
"Microsoft.Compute/disks/delete",
"Microsoft.Compute/disks/endGetAccess/action",
"Microsoft.Compute/disks/read",
"Microsoft.Compute/disks/write",
"Microsoft.Compute/snapshots/beginGetAccess/action",
"Microsoft.Compute/snapshots/delete",
"Microsoft.Compute/snapshots/endGetAccess/action",
"Microsoft.Compute/snapshots/read",
"Microsoft.Compute/snapshots/write",
"Microsoft.Compute/virtualMachines/deallocate/action",
"Microsoft.Compute/virtualMachines/delete",
"Microsoft.Compute/virtualMachines/extensions/read",
"Microsoft.Compute/virtualMachines/extensions/write",
"Microsoft.Compute/virtualMachines/read",
"Microsoft.Compute/virtualMachines/runCommand/action",
"Microsoft.Compute/virtualMachines/start/action",
"Microsoft.Compute/virtualMachines/write",
"Microsoft.DevTestLab/Schedules/write",
"Microsoft.Insights/MetricDefinitions/Read",
"Microsoft.Insights/Metrics/Read",
"Microsoft.KeyVault/vaults/deploy/action",
"Microsoft.KeyVault/vaults/keys/versions/read",
"Microsoft.KeyVault/vaults/read",
"Microsoft.Network/loadBalancers/read",
"Microsoft.Network/networkInterfaces/delete",
"Microsoft.Network/networkInterfaces/join/action",
"Microsoft.Network/networkInterfaces/read",
"Microsoft.Network/networkInterfaces/write",
"Microsoft.Network/networkSecurityGroups/join/action",
"Microsoft.Network/networkSecurityGroups/read",
"Microsoft.Network/privateEndpoints/delete",
"Microsoft.Network/privateEndpoints/read",
"Microsoft.Network/privateEndpoints/write",
"Microsoft.Network/privateLinkServices/privateEndpointCon
nections/read",
"Microsoft.Network/privateLinkServices/privateEndpointCon
nections/write",
"Microsoft.Network/privateLinkServices/privateEndpointCon
nections/delete",
"Microsoft.Network/publicIPAddresses/delete",
"Microsoft.Network/publicIPAddresses/join/action",
"Microsoft.Network/publicIPAddresses/read",
"Microsoft.Network/publicIPAddresses/write",
"Microsoft.Network/routeTables/join/action",
"Microsoft.Network/virtualNetworks/checkIpAddressAvailabi
lity/read",
"Microsoft.Network/virtualNetworks/delete",
"Microsoft.Network/virtualNetworks/read",
"Microsoft.Network/virtualNetworks/subnets/join/action",
"Microsoft.Network/virtualNetworks/write",
"Microsoft.Resources/subscriptions/resourceGroups/delete"
,

13 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
 "Microsoft.Resources/subscriptions/resourceGroups/moveRes
ources/action",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Resources/subscriptions/resourceGroups/write",
"Microsoft.ServiceBus/namespaces/delete",
"Microsoft.ServiceBus/namespaces/networkrulesets/delete",
"Microsoft.ServiceBus/namespaces/networkrulesets/read",
"Microsoft.ServiceBus/namespaces/networkrulesets/write",
"Microsoft.ServiceBus/namespaces/operationresults/read",
"Microsoft.ServiceBus/namespaces/queues/authorizationRule
s/ListKeys/action",
"Microsoft.ServiceBus/namespaces/queues/authorizationRule
s/read",
"Microsoft.ServiceBus/namespaces/queues/authorizationRule
s/write",
"Microsoft.ServiceBus/namespaces/queues/delete",
"Microsoft.ServiceBus/namespaces/queues/read",
"Microsoft.ServiceBus/namespaces/queues/write",
"Microsoft.ServiceBus/namespaces/read",
"Microsoft.ServiceBus/namespaces/write",
"Microsoft.ServiceBus/register/action",
"Microsoft.Sql/locations/*",
"Microsoft.Sql/managedInstances/databases/delete",
"Microsoft.Sql/managedInstances/databases/read",
"Microsoft.Sql/managedInstances/databases/write",
"Microsoft.Sql/managedInstances/encryptionProtector/read"
,
"Microsoft.Sql/managedInstances/read",
"Microsoft.Sql/servers/databases/azureAsyncOperation/read
",
"Microsoft.Sql/servers/databases/delete",
"Microsoft.Sql/servers/databases/read",
"Microsoft.Sql/servers/databases/syncGroups/read",
"Microsoft.Sql/servers/databases/transparentDataEncryptio
n/read",
"Microsoft.Sql/servers/databases/usages/read",
"Microsoft.Sql/servers/databases/write",
"Microsoft.Sql/servers/elasticPools/read",
"Microsoft.Sql/servers/encryptionProtector/read",
"Microsoft.Sql/servers/read",
"Microsoft.Storage/storageAccounts/blobServices/read",
"Microsoft.Storage/storageAccounts/listKeys/action",
"Microsoft.Storage/storageAccounts/managementPolicies/wri
te",
"Microsoft.Storage/storageAccounts/privateEndpointConnect
ions/write",
"Microsoft.Storage/storageAccounts/PrivateEndpointConnect
ionsApproval/action",
"Microsoft.Storage/storageAccounts/read",
"Microsoft.Storage/storageAccounts/write"
],
"notActions": [],
"dataActions": [
"Microsoft.KeyVault/vaults/keys/encrypt/action",
"Microsoft.KeyVault/vaults/keys/decrypt/action",
"Microsoft.KeyVault/vaults/keys/read"
],
"notDataActions": []
}
]

14 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
 }

Azure SQL Account

An Azure SQL account that you plan to use to restore Microsoft Azure databases must be assigned full
administrative permissions on Azure SQL servers and Azure SQL Managed Instances to which you restore
databases.

Virtualization Servers and Hosts Service Account Permissions

If you plan to copy backups to on-premises repositories, to perform restore to VMware vSphere and Microsoft
Hyper-V environments, or to perform other tasks related to virtualization servers and hosts, you must check
whether the service account specified for these servers and hosts has the required permissions described in the
Veeam Backup & Replication User Guide for VMware vSphere and Veeam Backup & Replication User Guide for
Microsoft Hyper-V, section Using Virtualization Servers and Hosts .

Google Cloud Service Account Permissions

A service account that you plan to use to restore Azure VMs to Google Cloud must have permissions described in
the Veeam Backup & Replication User Guide, section Google Compute Engine IAM User Permissions.

AWS IAM User Permissions

An IAM user whose one-time access keys you plan to use to restore Azure VMs to AWS must have permissions
described in the Veeam Backup & Replication User Guide, section AWS IAM User Permissions.

15 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Licensing
This section describes how Microsoft Azure Plug-in for Veeam Backup & Replication is licensed, how to manage
license workloads, and what licensing limitations and scenarios can apply.

To learn what types of licenses and licensing models are incorporated in Veeam solutions, see:

• The Veeam Backup & Replication User Guide, section Licensing.

• The Veeam Backup & Replication Veeam Cloud Connect Guide, section Licensing for Service Providers.

• The Veeam Backup for Microsoft Azure User Guide, section Licensing.

16 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Limitations
Keep in mind the following limitations and considerations:

• If you use the Veeam Cloud Connect service provider license, the Microsoft Azure Plug-in for Veeam
Backup & Replication functionality is available only from Veeam Service Provider Console. For more
information, see the Veeam Service Provider Console Guide for Service Providers.

• If you use a Perpetual per-socket license installed on the backup server, and you want to connect a Veeam
Backup for Microsoft Azure appliance to the backup infrastructure, you must install an additional
Perpetual per-instance license or a subscription license. When you install an additional license, the new
license merged with the existing Perpetual per-socket license. For details on the merging process, see the
Veeam Backup & Replication User Guide, section Merging Licenses.

If you do not install an additional Perpetual per-instance license or a subscription license, you will be able
to use one free license instance per each socket (maximum 6 free instances per instance). After you
exceed the limit of free instances, Microsoft Azure Plug-in for Veeam Backup & Replication backup policies
protecting resources that are not covered by the license will fail.

To obtain an additional license, contact a Veeam sales representative at Sales Inquiry.

17 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Scenarios
A workload (Azure VM, SQL database, file share) is considered to be protected if it has a restore point (backup or
snapshot) created by a backup policy during the past 31 days. The number of license units that a protected
workload consumes depends on the workload type and product edition. For details, see Veeam Licensing Policy.

NOTE

If a workload has snapshots and backups created manually, it does not consume any license units. To learn
how to create cloud-native snapshots of Azure VMs and file shares manually, see the Veeam Backup for
Microsoft Azure User Guide, sections Creating VM Snapshots Manually and Creating File Share Snapshots
Manually. To learn how to create image-level backups of SQL databases manually, see the Veeam Backup
for Microsoft Azure User Guide, section Creating SQL Backups Manually.

When you add a Veeam Backup for Microsoft Azure appliance to the backup infrastructure, the following
scenarios are applied:

• If you connect to an existing Veeam Backup for Microsoft Azure appliance, the BYOL license installed on
the Veeam Backup for Microsoft Azure appliance becomes invalid. Protected workloads start consuming
license units from the license installed on the backup server after the backup policy sessions run on the
connected appliance.

When you remove the Veeam Backup for Microsoft Azure appliance from the backup infrastructure, Veeam
Backup & Replication stops counting backed-up workloads. Veeam Backup for Microsoft Azure continues
using the license that had been used before you ad ded Veeam Backup for Microsoft Azure appliance to the
backup infrastructure.

• If you deploy a new Veeam Backup for Microsoft Azure appliance from the Veeam Backup & Replication
console, workloads start consuming license units from the license installed on the backup server after you
create and run backup policies.

When you remove the Veeam Backup for Microsoft Azure appliance from the backup infrastructure, Veeam
Backup & Replication stops counting backed-up workloads and Veeam Backup for Microsoft Azure
switches to the Free edition that allows you to protect up to 10 instances free of charge. To back up more
than 10 instances, you must install a BYOL license on the Veeam Backup for Microsoft Azure appliance. To
learn how to install a new BYOL license, see the Veeam Backup for Microsoft Azure User Guide, section
Licensing.

Licensing When Connection to Veeam Backup & Replication is

Lost
Veeam Backup for Microsoft Azure stores information on protected workloads licensed by Veeam Backup &
Replication. This information allows you to back up workloads even if the connection between the Veeam
Backup for Microsoft Azure appliance and backup server is lost. However, the following conditions must be met:

• The workload must have already been licensed by the backup server.

• The workload must be listed as licensed on the Veeam Backup for Microsoft Azure appliance side. For
more information, see the Veeam Backup for Microsoft Azure User Guide, section Revoking License Units.

• The connection must be lost not more than 31 days ago.

Note that the loss of connection with Veeam Backup & Replication does not affect restore processes and
creating of snapshots manually.

18 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Viewing License Details
To view Microsoft Azure Plug-in for Veeam Backup & Replication license details, open the main menu and select
License.

The License tab of the License Information window provides general information on the currently installed
Microsoft Azure Plug-in for Veeam Backup & Replication license:

• Sta tus — the license status. The status will depend on the license type, the number of days remaining until
license expiration, the number of days remaining in the grace period (if any), and the number of workloads
that exceeded the allowed increase limit (if any).

• Ty p e — the license type ( Perpetual, Subscription, Rental, Evaluation, NFR, Free).

• E d ition — the license edition ( Community , Standard , Enterprise, Enterprise Plus ).

• Sup port ID — the ID of the contract (required for contacting Veeam Customer Support).

• Licensed to — the name of an organization to which the license was issued.

• P a ckage — the software product for which the license was issued.

• Instances — the total number of license units included in the license file and the number of units
consumed by protected workloads.

• Sup port expiration date — the date when the license will expire.

19 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Managing Licensed Workloads
After you add a Veeam Backup for Microsoft Azure appliance to the backup infrastructure, you can view the
number of protected workloads in the Veeam Backup & Replication console. You can also revoke license units
from protected workloads — this can be helpful, for example, if you remove a number of workloads from a
backup policy and do not want to protect them anymore.

Monitoring Licensed Workloads

To view protected workloads, do the following:

1. In the Veeam Backup & Replication console, open the main menu and select License.

2. In the License Information window, switch to the Instances tab.

The Instances tab displays the following information:

• Ty p e — the type of protected workloads.

o Cloud VMs — protected Azure VMs.

o Cloud File Shares — protect Azure files shares.

o Cloud Databases — protected SQL servers.

• Count — the number of workloads.

• Multiplier — the number of license units one workload consumes.

• Instances — the total number of the consumed license units.

20 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Revoking License Units
You can revoke license units from protected workloads and reapply them to other objects that you plan to
protect:

1. In the Veeam Backup & Replication console, open the main menu and select License.

2. In the License Information window, switch to the Instances tab and click Ma nage.

3. In the Licensed Instances window, select a protected workload and click Revoke. Veeam Backup &
Replication will revoke a license unit from the selected workload.

21 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Architecture Overview
If you have Microsoft Azure Plug-in for Veeam Backup & Replication installed on a backup server, the backup
infrastructure includes the following components:

• Ba ckup server — is a Windows-based physical or virtual machine on which Veeam Backup & Replication is
installed. It is the core component of the backup infrastructure. For more information, see the Veeam
Backup & Replication User Guide, section Backup Server.

• Azure P lug-in for Veeam Backup & Replication — is an architecture component that enables integration
between Veeam Backup & Replication and Veeam Backup for Microsoft Azure.

• Veeam Backup for Microsoft Azure appliances — Linux-based VM instances where Veeam Backup for
Microsoft Azure is installed. The appliances perform backup and recovery tasks, control backup policy
scheduling, generate daily reports and email notifications. For more information, see the Veeam Backup
for Microsoft Azure User Guide, section Architecture Overview.

• W orker instances — temporary Linux-based VM instances that are created by Veeam Backup for Microsoft
Azure to perform backup and restore operations. Worker instances process backup workload and
distribute backup traffic when transferring data to and from repositories. For more information, see the
Veeam Backup for Microsoft Azure User Guide, section Architecture Overview.

• Sta ndard and archive repositories — folders created in blob containers where Veeam Backup for Microsoft
Azure stores backups of protected Azure VMs and SQL databases. For more information, see section
Managing Repositories.

• Ad d itional repositories a nd tape devices — any repositories where Veeam Backup & Replication keeps and
stores copies of Azure VMs backups. For more information, see the Veeam Backup & Replication User
Guide, sections Backup Repository and Machines Backup to Tape.

• Ga teway servers — auxiliary backup infrastructure components that provide access from the back up server
to repositories. By default, the role of a gateway server is assigned to the backup server.

Gateway servers cache data when you copy backups and restore application items, which helps you
decrease the amount of traffic being sent over the network and reduce data transfer costs. For more
information on caching data, see the Veeam Backup & Replication User Guide, section Cache.

22 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Deployment
To deploy Microsoft Azure Plug-in for Veeam Backup & Replication, do the following:

1. Deploy the backup server as described in the Veeam Backup & Replication User Guide, section Installing
Veeam Backup & Replication.

Alternatively, you can use a backup server that already exists in your backup infrastructure if it meets the
Microsoft Azure Plug-in for Veeam Backup & Replication system requirements.

2. Install Microsoft Azure Plug-in for Veeam Backup & Replication on the backup server.

23 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Installing Plug-In
The default installation package of Veeam Backup & Replication does not provide features that allow you to
protect Microsoft Azure resources. To be able to add your Veeam Backup for Microsoft Azure appliances to the
backup infrastructure, you must install Microsoft Azure Plug-in for Veeam Backup & Replication on the backup
server.

NOTE

Before you install Microsoft Azure Plug-in for Veeam Backup & Replication, stop all running policies,
disable all jobs, and close the Veeam Backup & Replication console.

To install Microsoft Azure Plug-in for Veeam Backup & Replication, do the following:

1. Log in to the backup server using an account with the local Administrator permissions.

2. In a web browser, navigate to the Veeam Backup & Replication: Download page, switch to the Cloud Plug-
ins in the Ad d itional Downloads section, and click the Download icon to download Microsoft Azure Plug-in
for Veeam Backup & Replication.

3. Open the downloaded MicrosoftAzurePlugin_12.0.5.740.zip file and launch the

MicrosoftAzurePlugin_12.0.5.740.exe installation file.

4. Complete the Microsoft Azure Plug-in for Veeam Backup & Replication wizard:

a. At the License Agreement step, read and accept both the Veeam license agreement and the 3rd party
components license agreement. If you reject the agreements, you will not be able to continue
installation.

To read the terms of the license agreement for the 3rd party components, click View.

b. At the Installation Path step, you can specify the installation directory. To do that, click Browse. In the
Browse for folder window, select the installation directory for the product or create a new one, and
click OK.

c. At the Rea dy to Install step, click Install to begin installation.

24 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Installing and Uninstalling Plug-In in
Unattended Mode
You can install or uninstall Microsoft Azure Plug-in for Veeam Backup & Replication in the unattended mode
using the command line interface. The unattended mode does not require user interaction — the installation
runs automatically in the background, and you do not have to respond to the installation wizard prompts. You
can use it to automate processes in large-scale environments.

To install Microsoft Azure Plug-in for Veeam Backup & Replication in unattended mode, use either of the
following options:

• If Microsoft Azure Plug-in for Veeam Backup & Replication is a part of Veeam Backup & Replication
installation package, follow the instructions provided in the Veeam Backup & Replication User Guide,
section Installing Veeam Backup & Replication in Unattended Mode.

• If Microsoft Azure Plug-in for Veeam Backup & Replication is delivered as a separate .EXE file, use the
instructions from this subsection.

Before You Begin

Before you start unattended installation, do the following:

1. Download the Microsoft Azure Plug-in for Veeam Backup & Replication .EXE file as described in Installing
Plug-In (steps 1–4).

2. Check compatibility of Microsoft Azure Plug-in for Veeam Backup & Replication and Veeam Backup &
Replication versions. For more information, see System Requirements.

Installation Command-Line Syntax

Open the command prompt and run the .EXE file using the following parameters:

%path% /silent /accepteula /acceptthirdpartylicenses [/uninstall]

The following command-line parameters are used to run the setup file:

P a rameter Required Description

%path% Yes Specifies a path to the installation .EXE file on the backup server
or in a network shared folder.

/silent Yes Sets the user interface level to None, which means no user
interaction is needed during installation.

/accepteula Yes Confirms that you accept the terms of the Veeam license
agreement.

25 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
 P a rameter Required Description

/acceptthirdpartylicenses Yes Confirms that you accept the license agreement for 3rd party
components that Veeam incorporates.

/uninstall No Uninstalls the plug-in.

E x ample: ”AzurePlugin_12.0.5.740.exe /silent

/accepteula /acceptthirdpartylicenses /uninstall”

/repair No Replaces missing files and firewall rules.

E x ample: ”AzurePlugin_12.0.5.740.exe /silent

/accepteula /acceptthirdpartylicenses /repair”

26 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Upgrading Plug-In
To upgrade Microsoft Azure Plug-in for Veeam Backup & Replication, do the following:

1. Install the new version of Microsoft Azure Plug-in for Veeam Backup & Replication as described in section
Installing Plug-In.

2. Upgrade Veeam Backup for Microsoft Azure appliances from the Veeam Backup & Replication console as
described in section Upgrading Appliances.

27 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Uninstalling Plug-In
Before you uninstall Microsoft Azure Plug-in for Veeam Backup & Replication, it is recommended to remove all
connected Veeam Backup for Microsoft Azure appliances from the backup infrastructure. If you keep the
appliances in the backup infrastructure, the following will happen:

• You will be able to see information on snapshots of Azure VMs and file shares in the Veeam Backup &
Replication console. However, you will not be able to perform any operations with these snapshots.

• You will be able to see information on image-level backups of Azure SQL databases. However, you will not
be able to perform any operations with these backups.

• You will be able to see information on image-level backups of Azure VMs and perform data recovery
operations using these backups. However, restore of entire VMs to Microsoft Azure will start working as
described in the Veeam Backup & Replication User Guide, section How Restore to Microsoft Azure Works.

• You will be able to see information on backup policies. However, you will only be able to remove these
policies from the Veeam Backup & Replication console.

To uninstall Microsoft Azure Plug-in for Veeam Backup & Replication, do the following:

1. Log in to the backup server using an account with the local Administrator permissions.

2. Open the Sta rt menu, navigate to Control Panel > Programs > Programs and Features.

3. In the program list, click Microsoft Azure P lug-in for Veeam Backup & Replication and click Uninstall.

4. In the opened window, click Remove.

NOTE

After you uninstall Microsoft Azure Plug-in for Veeam Backup & Replication, you will be no longer able to
add Veeam Backup for Microsoft Azure appliances and new external repositories to the backup
infrastructure.

28 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Accessing Plug-In
After you install Veeam Backup for Microsoft Azure and add Veeam Backup for Microsoft Azure appliances to
the backup infrastructure, you will be able to back up and restore Microsoft Azure resources using both the
Veeam Backup & Replication console and the Veeam Backup for Microsoft Azure Web UI.

In This Section
• Accessing Veeam Backup & Replication Console

• Accessing Veeam Backup for Microsoft Azure Appliance Web UI

29 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Accessing Veeam Backup & Replication
Console
The Veeam Backup & Replication console is a client-side component of the backup infrastructure that provides
access to the backup server. The console allows you to log in to Veeam Backup & Replication and to perform
data protection and disaster recovery operations on the server. To learn how to access the Veeam Backup &
Replication console, see the Veeam Backup & Replication User Guide, section Logging in to Veeam Backup &
Replication.

By default, the Veeam Backup & Replication console is installed on the backup server automatically when you
install Veeam Backup & Replication. However, in addition to the default console, you can install the Veeam
Backup & Replication console on a dedicated machine to access the backup server remotely. To learn how to
install Veeam Backup & Replication console, see the Veeam Backup & Replication User Guide, section Installing
Veeam Backup & Replication Console.

30 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Accessing Veeam Backup for Microsoft
Azure Web UI
To access the Veeam Backup for Microsoft Azure Web UI from the Veeam Backup & Replication console, do the
following:

1. Open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers.

3. Select the Veeam Backup for Microsoft Azure appliance whose Web UI you want to open, and click Op en
Console on the ribbon.

Alternatively, you can right-click the appliance and select Op en console.

Veeam Backup & Replication will open the Veeam Backup for Microsoft Azure Web UI in your default web
browser.

31 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Configuration
To start working with Veeam Backup & Replication, perform a number of steps:

1. Add Veeam Backup for Microsoft Azure appliances to the backup infrastructure.

2. Add repositories that will be used to store backed-up data.

3. Configure the added Veeam Backup for Microsoft Azure appliances:

a. Add Azure accounts to get access to Azure services and resources. For more information, see the
Veeam Backup for Microsoft Azure User Guide, section Managing Accounts.

b. Add user accounts to control access to Veeam Backup for Microsoft Azure. For more information, see
the Veeam Backup for Microsoft Azure User Guide, section Managing User Accounts.

c. Create worker configurations. For more information, see the Veeam Backup for Microsoft Azure User
Guide, section Managing Worker Instances.

d. Configure global retention, email notification and single sign-on settings. For more information, see
the Veeam Backup for Microsoft Azure User Guide, section Configuring General Settings.

32 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Managing Veeam Backup for Microsoft
Azure Appliances
Microsoft Azure Plug-in for Veeam Backup & Replication allows you to add Veeam Backup for Microsoft Azure
appliances to the backup infrastructure, and to view and manage all the added appliances from the Veeam
Backup & Replication console.

33 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Adding Veeam Backup for Microsoft Azure
Appliances
After you install Microsoft Azure Plug-in for Veeam Backup & Replication, you must add Veeam Backup for
Microsoft Azure appliances to the backup infrastructure. To do that, use either of the following options:

• Deploy new Veeam Backup for Microsoft Azure appliances from the Veeam Backup & Replication console.

• Connect to existing Veeam Backup for Microsoft Azure appliances if you have already deployed them from
Microsoft Azure Marketplace as described in the Veeam Backup for Microsoft Azure User Guide, section
Deployment.

NOTE

One Veeam Backup for Microsoft Azure appliance can be managed by one backup server only. If you add an
appliance to the backup infrastructure of another backup server, the synchronization between the
appliance and the previous backup server will be terminated, and the appliance will be displayed as
unavailable.

Deploying New Veeam Backup for Microsoft Azure Appliances

To deploy a new Veeam Backup for Microsoft Azure appliance, do the following:

1. Launch the New Veeam Backup for Microsoft Azure Appliance wizard .

2. Choose a deployment mode.

3. Specify Azure account settings.

4. Specify a Microsoft Azure subscription.

5. Specify a name and description for the appliance.

6. Specify network settings for the appliance.

7. Specify IP address settings.

8. Specify credentials for the Default Admin account.

9. Wait for the appliance to be added to the backup infrastructure.

10. Finish working with the wizard.

34 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 1. Launch New Veeam Backup for Microsoft Azure Appliance Wizard
To launch the New Veeam Backup for Microsoft Azure Appliance wizard, do the following:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers and click Ad d Server on the ribbon.

Alternatively, you can right-click the Ma nged Servers node and select Ad d Server.

3. In the Ad d Server window:

a. [Applies only if you have several cloud plug-ins installed] Click Veeam cloud-native backup appliance.

b. Choose Veeam Backup for Microsoft Azure.

35 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 2. Choose Deployment Mode
At the Dep loyment Mode step of the wizard, select the Dep loy a new appliance option.

36 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 3. Specify Azure Account Settings
At the Account step of the wizard, select a Microsoft Azure compute account whose permissions will be used to
deploy the new Veeam Backup for Microsoft Azure appliance.

For a Microsoft Azure compute account to be displayed in the Microsoft Azure compute account drop-down list,
it must be added to the Cloud Credentials Manager. If you have not added the credentials to the Cloud
Credentials Manager beforehand, you can do it without closing the wizard. To do that, click either the Ma nage
cloud accounts link or the Ad d button, and complete the Microsoft Azure Compute Account wizard as described
in the Veeam Backup & Replication User Guide, section Microsoft Azure Compute Accounts.

For each newly created account, Veeam Backup & Replication creates a new Azure AD application in your
Microsoft Azure Active Directory. The application is automatically assigned the following built-in roles:

• Key Vault Crypto User role

• Owner role

For more information on Microsoft Azure built-in roles, see Microsoft Docs.

Note that the Owner role has a wide scope of permissions and capabilities. If you want the AD application to be
assigned a limited list of permissions, create an AD application manually in Microsoft Azure. For more
information on the required permissions that must be assigned to the AD application, see section Permissions.
For more information on roles, see Microsoft Docs.

IMP ORTANT

Consider the following:

• Microsoft Azure Stack Hub accounts are not supported. For more information, see Microsoft Docs.
• Microsoft Azure accounts with certificate-based authentication are not supported. For more
information, see Microsoft Docs.

37 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 4. Specify Subscription
At the Sub scription step of the wizard, do the following:

1. From the Sub scription drop-down list, select a Microsoft Azure subscription that will be used to manage
costs of the Veeam Backup for Microsoft Azure appliance.

For a subscription to be displayed in the list of available subscriptions, it must be created in Microsoft
Azure and assigned to the tenant to which the specified Azure compute account belongs, as described in
Microsoft Docs.

2. From the Da ta center drop-down list, select a Microsoft Azure region in which the Veeam Backup for
Microsoft Azure appliance will operate.

For more information on Azure regions, see Microsoft Docs.

3. Choose a resource group that will hold resources related to the appliance.

You can create a new resource group or specify an existing one:

o To create a new resource group, select the ( create new) option from the Resource group drop-down
list. Veeam Backup & Replication will automatically create the veeam-<VMname>-rg<GUID> resource
group.

o To specify an existing resource group, select it from the Resource group drop-down list. For a
resource group to be displayed in the list of available resource groups, it must be created in Microsoft
Azure as described in Microsoft Docs.

38 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 5. Specify VM Instance Name and Description
At the Virtual Machine step of the wizard, specify a name and description for the Azure VM where Veeam
Backup for Microsoft Azure will be deployed. Note that the name must meet the Microsoft Azure resource name
rules.

39 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 6. Specify Network Settings
At the Networking step of the wizard, do the following:

1. Choose a virtual network to which the Veeam Backup for Microsoft Azure appliance will be connected.

You can create a new network or specify an existing one:

o To create a new virtual network, select the ( create new) option from the Virtual network drop-down
list. Veeam Backup & Replication automatically create a network with a set of predefined security
rules.

o To specify an existing virtual network, select it from the Virtual network drop-down list. For a virtual
network network to be displayed in the list of available networks, it must be created in Microsoft
Azure for the region specified at step 4 of the wizard as described in Microsoft Docs.

2. Choose a subnet to which the Veeam Backup for Microsoft Azure appliance will be connected.

You can create a new subnet or specify an existing one:

o [Applies only if you have selected the create new option from the Virtual network drop-down list] To
create a new subnet, select the ( create new) option from the Sub net drop-down list. Veeam Backup &
Replication will automatically create a subnet in the specified virtual network.

o To specify an existing subnet, select it from the Sub net drop-down list. For a subnet to be displayed
in the list of available subnets, it must be created in the specified virtual network as described in
Microsoft Docs.

3. Choose a network security group that will be associated with the Veeam Backup for Microsoft Azure
appliance.

You can create a new security group or specify an existing one:

o To create a new security group, select the ( create new) option from the Network security group drop-
down list. Veeam Backup & Replication will automatically create a group.

o To specify an existing security group, select it from the Network security group drop-down list. For a
security group to be displayed in the list of available groups, it must be created in Microsoft Azure as
described in Microsoft Docs.

IMP ORTANT

If you select an existing security group, consider that security rules added to the group must allow inbound
internet access from both the backup server and a local machine that you plan to use to work with Veeam
Backup for Microsoft Azure. To learn how to create security rules, see Microsoft Docs.

4. [Applies only if you have chosen to create a new security group] In the Ba ckup server public IP address
field, specify a public IP address or a scope of public IP addresses that will be allowed to access the Veeam
Backup for Microsoft Azure appliance. Veeam Backup & Replication will create a security rule for the
specified IP addresses. Note that the IP address of the backup server must fall into the specified IP address
range.

40 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
 TIP

The IPv4 address ranges must be specified in the CIDR notation (for example, 12.23.34.0/24). To
specify multiple IP addresses or multiple scopes of IP addresses, use a comma-separated list.

41 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Step 7. Specify IP Settings
At the IP Assignment step of the wizard, choose whether you want to assign a dynamic or static IP address to
the Veeam Backup for Microsoft Azure appliance.

To assign an IP address, you can either reserve a new address or specify an existing one:

• To reserve a new IP address, select the ( create new) option from the drop-down list.

• To assign an existing IP address, select it from the drop -down list. For an IP address to be displayed in the
list of available IP addresses, it must be reserved in Microsoft Azure as described in Microsoft Docs.

42 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 8. Specify User Credentials
At the Guest OS step of the wizard, do the following:

1. From the Create the following administrator credentials drop-down list, select a user whose credentials
will be used by Veeam Backup & Replication to create the Default Admin account on the Veeam Backup for
Microsoft Azure appliance.

For a user to be displayed in the Create the following administrator credentials drop-down list, it must be
added to the Credentials Manager. If you have not added a user to the Credential Manager beforehand,
you can do it without closing the New Veeam Backup for Microsoft Azure Appliance wizard. To add a new
user, click either the Ma nage accounts link or the Ad d button, and then specify a user name, password and
description in the Credentials window.

2. In the Use the following key pair field, select a key pair that will be used to authenticate against the
Veeam Backup for Microsoft Azure appliance.

For a key pair to be displayed in the list of available key pairs, it must be created in Microsoft Azure as
described in Microsoft Docs. If you have not created a key pair beforehand, you can do it without closing
the New Veeam Backup for Microsoft Azure wizard. To do that, click Ad d and, in the New Key Pair window,
specify a name for the key pair and the path to a folder where the pair will be located.

NOTE

If you choose to create a new key pair, the key pair will be stored in the resource group that you have
specified at step 4 of the wizard. However, if you have selected the ( create new) option when specifying
the resource group, Veeam Backup & Replication will store the created key pair in the VeeamSSHKeys
resource group.

43 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 9. Track Progress
Veeam Backup & Replication will display the results of every step performed while deploying the Veeam Backup
for Microsoft Azure appliance. At the Ap p ly step of the wizard, wait for the process to complete and click Nex t.

44 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 10. Finish Working with Wizard
At the Summary step of the wizard, review summary information and click Finish. After the Veeam Backup for
Microsoft Azure appliance is deployed, you will be able to configure its settings in the Veeam Backup for
Microsoft Azure Web UI as described in section Configuration.

TIP

If you want to configure repositories immediately after the Veeam Backup for Microsoft Azure appliance is
deployed, select the Op en the Azure Blob backup repository creation wizard when I click Finish check box
and follow the instructions provided in section Adding Repositories.

Connecting to Existing Veeam Backup for Microsoft Azure

Appliances
To connect to an existing Veeam Backup for Microsoft Azure appliance, do the following:

1. Launch the New Veeam Backup for Microsoft Azure Appliance wizard .

2. Specify a deployment mode.

3. Specify Azure account settings.

4. Specify a Microsoft Azure subscription.

5. Choose the appliance that you want to connect to.

6. Specify the connection type.

7. Specify a user whose credentials will be used to connect to the appliance.

45 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
 8. Configure repository settings.

9. Wait for the appliance to be added to the backup infrastructure.

10. Finish working with the wizard.

NOTE

One Veeam Backup for Microsoft Azure can be managed by one backup server only. If you add the
appliance to the backup infrastructure of another backup server, the synchronization between the
appliance and the first backup server will be terminated, and the appliance will be displayed as unavailable.

46 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 1. Launch New Veeam Backup for Microsoft Azure Appliance Wizard
To launch the New Veeam Backup for Microsoft Azure Appliance wizard, do the following:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers and click Ad d Server on the ribbon.

Alternatively, you can right-click the Ma naged Servers node and select Ad d Server.

3. In the Ad d Server window:

a. [Applies only if you have several cloud plug-ins installed] Click Veeam cloud-native backup appliance.

b. Choose Veeam Backup for Microsoft Azure.

47 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 2. Choose Deployment Mode
At the Dep loyment Mode step of the wizard, select the Connect to an existing appliance option.

48 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 3. Specify Azure Account Settings
At the Account step of the wizard, select a Microsoft Azure compute account whose permissions will be used to
connect the Veeam Backup for Microsoft Azure appliance.

For a Microsoft Azure compute account to be displayed in the Microsoft Azure compute account drop-down list,
it must be added to the Cloud Credentials Manager. If you have not added the credentials to the Cloud
Credentials Manager beforehand, you can do it without closing the wizard. To do that, click either the Ma nage
cloud accounts link or the Ad d button, and complete the Microsoft Azure Compute Account wizard as described
in the Veeam Backup & Replication User Guide, section Microsoft Azure Compute Accounts.

For each newly created account, Veeam Backup & Replication creates a new Azure AD application in your
Microsoft Azure Active Directory. The application is automatically assigned the following built-in roles:

• Key Vault Crypto User role

• Owner role

For more information on Microsoft Azure built-in roles, see Microsoft Docs.

Note that the Owner role has a wide scope of permissions and capabilities. If you want the AD application to be
assigned a limited list of permissions, create an AD application manually in Microsoft Azure. For more
information on the required permissions that must be assigned to the AD application, see section Permissions.
For more information on roles, see Microsoft Docs.

IMP ORTANT

Microsoft Azure Stack Hub accounts are not supported.

49 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 4. Specify Subscription and Region
At the Sub scription step of the wizard, do the following:

1. From the Sub scription drop-down list, select a Microsoft Azure subscription that is used to manage costs
of the Veeam Backup for Microsoft Azure appliance.

For a subscription to be displayed in the list of available subscriptions, it must be created in Microsoft
Azure and assigned to the tenant to which the specified Azure compute account belongs as described in
Microsoft Docs.

2. From the Da ta center drop-down list, select the Microsoft Azure region in which the Veeam Backup for
Microsoft Azure appliance resides.

For more information on regions and zones, see Microsoft Docs.

50 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 5. Specify Veeam Backup for Microsoft Azure Appliance
At the Virtual Machine step of the wizard, choose the Veeam Backup for Microsoft Azure appliance tha t you
want to add to the backup infrastructure:

1. Click Browse.

2. In the Select Virtual Machine window, select the necessary appliance and click OK.

3. In the Description field, specify a description for future reference.

51 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 6. Specify Connection Type
At the Connection Type step of the wizard, specify the way Veeam Backup & Replication will connect to the
Veeam Backup for Microsoft Azure appliance:

• Select the Direct connection option if the Veeam Backup for Microsoft Azure appliance is connected to a
virtual network with inbound internet access allowed and you want the backup server to connect to this
Veeam Backup for Microsoft Azure appliance over the internet. In this case, Veeam Backup & Replication
will detect the public IP address of the Veeam Backup for Microsoft Azure appliance automatically.

• Select the P rivate network option if the Veeam Backup for Microsoft Azure appliance and the backup
server are connected to the same private virtual network, or you want the backup server to connect to the
Veeam Backup for Microsoft Azure appliance over VPN. In this case, you must specify the private IP
address or the DNS hostname of the Veeam Backup for Microsoft Azure appliance in the Sp ecify the IP
a d dress or DNS name of the appliance field.

52 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Step 7. Specify Credentials
At the Credentials step of the wizard, specify a user whose credentials Veeam Backup & Replication will use to
connect to the Veeam Backup for Microsoft Azure appliance.

For a user to be displayed in the Credentials list, it must be added to the Credentials Manager. If you have not
added a user to the Credentials Manager beforehand, you can do it without closing the New Veeam Backup for
Microsoft Azure Appliance wizard. To add a new user, click either the Ma nage a ccounts link or the Ad d button
and specify a user name, password and description in the Credentials window.

IMP ORTANT

The specified user must have multi-factor authentication (MFA) disabled and the Portal Administrator role
assigned.

If you try to add to the backup infrastructure an appliance that runs a version of Veeam Backup for Microsoft
Azure that is not compatible with the version of Veeam Backup & Replication, Veeam Backup & Replication will
display a warning notifying that the appliance must be upgraded. To eliminate the warning, click Y es . Veeam
Backup & Replication will automatically upgrade the appliance to the necessary version.

When you add a Veeam Backup for Microsoft Azure appliance to the backup infrastructure, Veeam Bac kup &
Replication automatically verifies the TLS certificate installed on the appliance:

• If the certificate is trusted, Veeam Backup & Replication saves a thumbprint of the certificate in the
configuration database. When Veeam Backup & Replication connects to the appliance, it uses the saved
thumbprint to verify the appliance identity and to avoid the man-in-the-middle attack.

• If the certificate is not trusted, Veeam Backup & Replication does not save a thumbprint of the certificate
in the configuration database. When Veeam Backup & Replication connects to the appliance, the appliance
is shown in the Veeam Backup & Replication console as unavailable.

53 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 8. Configure Repositories
The Rep ositories step of the wizard, a list of all standard and archive repositories already configured on the
selected Veeam Backup for Microsoft Azure appliance will be displayed. After you complete the wizard, Veeam
Backup & Replication will automatically add these repositories to the backup infrastructure.

You will be able to use the Veeam Backup & Replication console to perform entire VM restore and SQL database
restore only — unless you specify the following configuration settings for each repository whose restore points
you want to use to recover backed-up data:

NOTE

The following procedure applies only to standard repositories. For archive repositories, there is no
possibility to specify any configuration settings.

1. In the Rep ositories list, select the necessary standard repository and click E d it.

2. In the Rep ository Settings window:

a. From the Credentials drop-down list, select credentials of a Microsoft Azure storage account where
the target blob container resides. Veeam Backup & Replication will use these credentials to access the
repository. For more information on supported types of storage accounts, see the Veeam Backup &
Replication User Guide, section Microsoft Azure Storage Accounts.

For credentials to be displayed in the list of available credentials, they must be added to the Cloud
Credentials Manager. If you have not added the credentials to the Cloud Credentials Manager
beforehand, you can do it without closing the wizard. To do that, click either the Ma nage cloud
a ccounts link or the Ad d button. Then, in the Credentials window, specify the storage account name
and the access key generated for the account.

b. From the Use the following gateway server for the Internet access drop-down list, select a gateway
server that will be used to provide access to the repository.

For a gateway server to be displayed in the Use the following gateway server for the Internet access
drop-down list, it must be added to the backup infrastructure. For more information on gateway
servers, see Architecture Overview.

c. If encryption is enabled for the repository, the following scenarios may apply:

▪ If data in the repository is encrypted using a password, select the Use the following password
for encrypted backups check box. From the drop-down list, select the password that is used to
encrypt data. Veeam Backup & Replication will use the specified password to decrypt backup
files stored in this repository.

For a password to be displayed in the Use the following password for encrypted backups drop-
down list, it must be added to the backup infrastructure as described in the Veeam Backup &
Replication User Guide, section Creating Passwords. If you have not added the necessary
password beforehand, you can do it without closing the Rep ository Settings window. To add the
password, click either the Ma nage cloud accounts link or the Ad d button and specify a hint and
the password in the P a ssword window.

NOTE

If you do not specify a password for a standard repository with encryption enabled, you will have to
decrypt data stored in this repository manually as described in section Decrypting Backups.

▪ If data in the standard repository is encrypted with an Azure Key Vault cryptographic key, Veeam
Backup & Replication will show the used key in the P erform Azure encryption with the following
k ey drop-down list, but will not allow to change it.

54 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
After you finish working with the wizard, all the added repositories will be displayed on the Ba ckup
Infrastructure view, under the E x ternal Repositories node.

NOTE

If some of the repositories are already added to the backup infrastructure of another backup server, you
will be prompted to claim the ownership of these repositories. To learn how to claim the ownership, see
the Veeam Backup & Replication User Guide, section Ownership.

55 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 9. Track Progress
Veeam Backup & Replication will display the results of every step performed while connecting the Veeam
Backup for Microsoft Azure appliance. At the Ap p ly step of the wizard, wait for the process to complete and
click Nex t.

56 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 10. Finish Working with Wizard
At the Summary step of the wizard, review summary information and click Finish.

After the Veeam Backup for Microsoft Azure appliance is added to the infrastructure, you can configure its
settings in the Veeam Backup for Microsoft Azure Web UI as described in section Configuration. If you want
Veeam Backup & Replication to open the Web UI of the added appliance immediately, click the b a ckup appliance
console link.

57 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Editing Appliance Settings
For each Veeam Backup for Microsoft Azure appliance managed by the backup server, you can modify the
settings configured while adding the appliance to the backup infrastructure:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers.

3. Select the necessary appliance and click E d it Appliance on the ribbon.

Alternatively, right-click the appliance and select P roperties.

4. Complete the E d it Veeam Backup for Microsoft Azure Appliance wizard:

a. To change the Microsoft Azure compute account that is used to connect to the Veeam Backup for
Microsoft Azure appliance, follow the instructions provided in section Connecting to Existing Veeam
Backup for Microsoft Azure Appliances (step 3).

b. To provide a new description for the Veeam Backup for Microsoft Azure appliance, follow the
instructions provided in section Connecting to Existing Veeam Backup for Microsoft Azure Appliances
(step 5).

c. To change the way Veeam Backup & Replication connects to the Veeam Backup for Microsoft Azure
appliance, follow the instructions provided in section Connecting to Existing Veeam Backup for
Microsoft Azure Appliances (step 6).

d. To change the user whose credentials Veeam Backup & Replication uses to connect to the Veeam
Backup for Microsoft Azure appliance, follow the instructions provided in section Connecting to
Existing Veeam Backup for Microsoft Azure Appliances (step 7).

e. To edit settings of the Veeam Backup for Microsoft Azure appliance repositories added to the backup
infrastructure, follow the instructions provided in section Connecting to Existing Veeam Backup for
Microsoft Azure Appliances (step 8).

58 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
 f. At the Summary step of the wizard, review summary information and click Finish.

59 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Upgrading Appliances
Microsoft Azure Plug-in for Veeam Backup & Replication allows you to check whether new Veeam Backup for
Microsoft Azure versions are available and to upgrade appliances managed by the backup server:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers.

3. Select the necessary Veeam Backup for Microsoft Azure appliance and click Up grade appliance on the
ribbon.

Alternatively, right-click the appliance and select Up grade.

NOTE

You can upgrade Veeam Backup for Microsoft Azure appliances only to the Veeam Backup for Microsoft
Azure version that is compatible with the current version of Microsoft Azure Plug-in for Veeam Backup &
Replication.

60 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Rescanning Appliances
If a Veeam Backup for Microsoft Azure appliance become unavailable, for example, due to connectivity
problems, you can rescan the appliance:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers.

3. Select the necessary Veeam Backup for Microsoft Azure appliance and click Rescan appliance on the
ribbon.

Alternatively, you can right-click the appliance and select Rescan.

4. In the opened window, click Y es .

Veeam Backup & Replication will remove all data collected from the appliance configuration database. Then,
Veeam Backup & Replication will recollect session results for the past 24 hours, as well as information on all
created snapshots, backups and policies.

NOTE

The rescan operation cannot be performed for available Veeam Backup for Microsoft Azure appliances and
appliances that require upgrade. To learn how to upgrade Veeam Backup for Microsoft Azure appliances,
see Upgrading Appliance.

61 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Removing Appliances
Microsoft Azure Plug-in for Veeam Backup & Replication allows you to permanently remove Veeam Backup for
Microsoft Azure appliances from the backup infrastructure.

NOTE

After you remove a Veeam Backup for Microsoft Azure appliance, the following limitations will apply:

• Repositories for which you have not specified credentials of a Microsoft Azure storage accounts will
be removed automatically from the backup infrastructure.
• Repositories for which you have specified credentials of a Microsoft Azure storage accounts will
remain in the backup infrastructure. However, you will have to rescan the repositories to collect
information on all newly created and recently deleted (both manually and by retention) restore
points.
• You will not be able to manage backup policies created on the appliance.
• You will not be able to restore Azure VMs from snapshots.
• Restore to Azure from image-level backups will start working as described in the Veeam Backup &
Replication User Guide, section How Restore to Microsoft Azure Works.
Also, the restore process will start taking more time to complete causing data transfer costs to
increase as Veeam Backup & Replication will not be able to use native Microsoft Azure capabilities
and will have to process more data.

To remove a Veeam Backup for Microsoft Azure appliance, do the following:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers.

3. Select the necessary Veeam Backup for Microsoft Azure appliance and click Remove Appliance on the
ribbon.

Alternatively, right-click the appliance and select Remove.

4. In the Veeam Backup & Replication window, click Y es to acknowledge the operation.

62 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
 TIP

If you want to remove an appliance from both the backup and the Microsoft Azure environment, select the
Delete cloud resources associated with the backup appliance? check box in the opened window. Veeam
Backup & Replication will remove all resources associated with this appliance in Microsoft Azure.

However, if an appliance has been deployed from the Microsoft Azure Marketplace or is running Veeam
Backup for Microsoft Azure version 2.x (or earlier), to remove resources from the Microsoft Azure
environment, you must follow the instructions provided in the Veeam Backup for Microsoft Azure User
Guide, section Uninstalling Veeam Backup for Microsoft Azure.

NOTE

If the selected appliance has been deployed from the Veeam Backup & Replication console and Veeam
Backup & Replication uses a newly created key pair to authenticate against the Veeam Backup for Microsoft
Azure appliance, you must remove the key pair from the resource group that holds resources related to the
appliance.

63 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Managing Repositories
Microsoft Azure Plug-in for Veeam Backup & Replication uses Microsoft Azure blob containers as target
locations for image-level backups of Azure VMs and Azure SQL databases. To store backups in Microsoft Azure
blob containers, you must configure repositories. A repository is a specific folder created by Veeam Backup for
Microsoft Azure in a container.

Depending on whether you want to store backups in a short-term storage or a long-term storage, you can
configure repositories of the following access tiers:

• Sta ndard repositories

Use repositories of the Hot access tier to store data that you plan to access frequently, and repositories of
the Cool access tier to store data that you plan to access infrequently. Backups stored in these repositories
are shown under the E x ternal Repository node.

To store backups of Azure VMs and Azure SQL databases in a standard repository, first add it to the backup
infrastructure and then enable image-level backup in the backup policy settings. For more information,
see the Veeam Backup for Microsoft Azure User Guide, sections Performing VM Backup and Performing
SQL Backup.

• Archive repositories

Use repositories of the Archive access tier to store data that you plan to access less than once a year.
Backups stored in these repositories are shown under the E x ternal Repository (Archive) node.

To store backups of Azure VMs and Azure SQL databases in an archive repository, first add it to the backup
infrastructure and then enable backup archiving for any backup policy that will store backups in this
repository. For more information, see the Veeam Backup for Microsoft Azure User Guide, sections
Performing VM Backup and Performing SQL Backup.

To learn how backup archiving works, see the Veeam Backup for Microsoft Azure User Guide, section
Enabling Backup Archiving.

IMP ORTANT

Note that you can perform a limited scope of operations with archive repositories from the Veeam Backup
& Replication console:

• You cannot edit and rescan archive repositories.

• You can only restore entire Azure VMs and entire Azure SQL databases from backups stored in
archive repositories. However, you can perform disk and file-level restore operations from these
backups using the Veeam Backup for Microsoft Azure appliance Web UI. For more information, see
the Veeam Backup for Microsoft Azure User Guide, sections Performing Disk Restore or Performing
File-Level Restore.

For more information on access tiers for blob storage, see Microsoft Docs.

64 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Adding Repositories
After you add a Veeam Backup for Microsoft Azure appliance to the backup infrastructure, you can configure
repositories that will be used to store backups. To do that, use either of the following options:

• Create new repositories.

• Add existing repositories to the backup infrastructure if you have already configured them on the Veeam
Backup for Microsoft Azure appliance.

Creating New Repositories

To add a new repository, do the following:

1. Launch the Add External Repository wizard.

2. Specify an appliance, and provide repository name and description.

3. Configure repository settings.

4. Specify a service account to access a blob container.

5. Select a blob container.

6. Enable data encryption.

7. Wait for the repository to be added to the backup infra structure.

8. Finish working with the wizard.

65 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 1. Launch Add External Repository Wizard
To launch the Ad d External Repository wizard, do the following:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to E x ternal Repositories and click Ad d Repository on the ribbon.

Alternatively, you can right-click the E x ternal Repositories node and select Ad d .

3. In the Ad d External Repository window:

a. [Applies only if you have several cloud plug-ins installed] Click Veeam Backup for Microsoft Azure.

b. Choose whether you want to create a standard or an archive repository:

▪ Select the Azure Blob Storage option if you want to create a repository with the Hot or Cool
access tier assigned. In this case, the repository will be assigned the access tier selected in
Microsoft Azure for the storage account that you will specify at step 3 of the wizard.

▪ Select the Azure Archive Storage option if you want to create a repository with the Archive
access tier assigned. Consider that to restore data from an archive repository, you first need to
retrieve data from it. For more information on how to retrieve data, see Retrieving Data from
Archive.

66 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 2. Specify Repository Details
At the Ba ckup Appliance step of the wizard, do the following:

1. From the Ap p liance drop-down list, select a Veeam Backup for Microsoft Azure appliance that will manage
the repository.

For an appliance to be displayed in the Ap p liance drop-down list, it must be added to the backup
infrastructure as described in section Adding Veeam Backup for Microsoft Azure Appliances.

2. Use the Rep ository name and Description fields to enter a name for the new repository and to provide a
description for future reference. The maximum length of the name is 127 characters; the following
characters are not supported: \ / " ' [ ] : | < > + = ; , ? * @ & _ .

Veeam Backup & Replication will create a folder with the specified name in the blob container that you
will specify at step 5 of the wizard. This folder will be used to store backed -up data.

67 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 3. Configure Repository Settings
At the Account step of the wizard, do the following:

1. From the Credentials drop-down list, select credentials of a Microsoft Azure storage account in which the
repository will reside. Veeam Backup & Replication will use these credentials to access the repository. For
more information on supported types of storage accounts, see the Veeam Backup & Replication User
Guide, section Microsoft Azure Storage Accounts.

IMP ORTANT

Note that the E na ble storage account key access option must be enabled in the storage account settings
for Shared Key authorization. For more information, see Microsoft Docs.

For credentials to be displayed in the list of available credentials, they must be added to the Cloud
Credentials Manager. If you have not added the credentials to the Cloud Credentials Manager beforehand,
you can do it without closing the wizard. To do that, click either the Ma nage cloud accounts link or the
Ad d button. Then, in the Credentials window, specify the storage account name and the access key
generated for the account.

NOTE

If you want to create the repository with immutability enabled, make sure that either version-level
immutability support or blob versioning is enabled on the specified storage account, and the default time-
based retention policy is not configured for the account. For more information, see the Veeam Backup for
Microsoft Azure User Guide, section How Immutability Works.

2. [Applies only if you have chosen to create a standard repository] From the Ga teway server drop-down list,
select a gateway server that will be used to access the repository.

For a server to be displayed in the Ga teway server list, it must be added to the backup infrastructure. For
more information on gateway servers, see Architecture Overview.

68 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 4. Specify Service Account
At the Service Account step of the wizard, specify a service account whose permissions Veeam Backup for
Microsoft Azure will use to access the Microsoft Azure storage account specified at step 3 of the wizard.

For a service account to be displayed in the Service account list, it must be added to the Veeam Backup for
Microsoft Azure appliance as described in the Veeam Backup for Microsoft Azure User Guide, section Managing
Accounts.

69 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 5. Specify Blob Container
At the Container step of the wizard, do the following:

1. Choose whether you want to use an existing blob container or to create a new one as the target location
for image-level backups of Azure VMs and Azure SQL databases:

o To specify an existing container, select it from the Container drop-down list.

For a container to be displayed in list of available containers, it must be created for the selected
storage account in Microsoft Azure as described in Microsoft Docs.

o To create a new container, click Ad d . In the New Container window, enter a name for the container.
Veeam Backup & Replication will automatically create a container in the same region where the
Veeam Backup for Microsoft Azure appliance resides.

NOTE

If you want to create the repository with immutability enabled, consider the following:

• Version-level immutability support must be enabled for the specified blob container. To learn how
to enable version-level immutability support for blob containers, see Microsoft Docs.
• If you choose to create a new container, note that Veeam Backup & Replication can create blob
containers with version-level immutability support enabled only in storage accounts with version-
level immutability support enabled.

2. If you want to protect backups stored in the repository from being lost as a result of malware,
ransomware, or any other malicious actions, you can create the repository with immutability settings
enabled. To do that, you must select a Microsoft Azure storage account with version-level immutability
support or blob versioning enabled at step 3 of the wizard and a blob container with version-level
immutability support enabled.

If the storage account and blob container meet the immutability requirements, the Ma k e backups
immutable for the entire duration of their retention policy check box will be automatically selected. For
more information on immutability, see the Veeam Backup for Microsoft Azure User Guide, section How
Immutability Works.

70 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
 IMP ORTANT

Consider the following:

• You cannot create standard repositories with the disabled immutability settings in blob containers
with version-level immutability support enabled.
• You cannot edit the configured immutability settings for the repository.

71 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Step 6. Enable Data Encryption
At the E ncryption step of the wizard, choose whether you want to encrypt backups stored in the created
repository.

IMP ORTANT

After you create a repository with encryption enabled, you can no longer disable encryption for this
repository. However, you will be able to change encryption settings as described in section Editing
Repositories.

If you select the E na ble backup file encryption check box, also choose whether you want to use a password or
an Azure Key Vault cryptographic key to encrypt the backed -up data:

• To encrypt data using a cryptographic key, select the P erform Azure encryption with the f ollowing key
option and do the following:

a. From the Sub scription drop-down list, select a Microsoft Azure subscription to which the Key Vault
belongs.

For a subscription to be displayed in the list of available subscriptions, it must be created in Microsoft
Azure and assigned to the tenant as described in Microsoft Docs.

b. From the Key vault drop-down list, select the Azure Key Vault where the encryption key is stored.

For an Azure Key Vault to be displayed in the list of available vaults, it must be created in Microsoft
Azure as described in Microsoft Docs.

IMP ORTANT

To list Azure Key Vaults and cryptographic keys and further to decrypt backups stored in the repository,
Veeam Backup & Replication uses permissions of the service account specified at step 4 of the wizard. For
more information on the required permissions, see Permissions.

c. From the E ncryption k ey drop-down list, select the necessary cryptographic key.

For a cryptographic key to be displayed in the list of available encryption keys, it must be created in
Microsoft Azure as described in Microsoft Docs.

• To encrypt data using a password, select the P erform Veeam encryption with the following password
option and choose the necessary password from the drop -down list.

For a password to be displayed in the list of available passwords, it must be added to the Veeam Backup &
Replication as described in the Veeam Backup & Replication User Guide, section Creating Passwords. If you
have not added the necessary password beforehand, you can do it without closing the wizard. To add the
password, click either the Ma nage passwords link or the Ad d button, and specify a hint and the password
in the P a ssword window.

72 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
 IMP ORTANT

If you want to use an Azure Key Vault cryptographic key for encryption at the repository level, consider the
following:

• Do not disable cryptographic keys specified in the repository settings. Otherwise, Veeam Backup for
Microsoft Azure will not be able to encrypt data, and backup policies that use the encrypted
repository for storing backups will fail.
• Do not delete cryptographic keys specified in the repository settings. Otherwise, Veeam Backup for
Microsoft Azure will not be able to decrypt data stored in the repository.

73 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 7. Track Progress
Veeam Backup & Replication will display the results of every step performed while creating the repository. At
the Ap p ly step of the wizard, wait for the process to complete and click Nex t.

74 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 8. Finish Working with Wizard
At the Summary step of the wizard, review summary information and click Finish.

Connecting to Existing Repositories

When you connect to a Veeam Backup for Microsoft Azure appliance, all repositories that have already been
configured on the appliance are automatically added to the backup infrastructure.

If an existing repository is not displayed under the E x ternal Repositories node or if you have recently configured
a new repository on the appliance that is already connected to the backup server, do the following:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers.

3. Select a Veeam Backup for Microsoft Azure appliance that manages the necessary repository and click E d it
Ap p liance on the ribbon.

Alternatively, you can right-click the Veeam Backup for Microsoft Azure appliance and select P roperties.

4. In the E d it Veeam Backup for Microsoft Azure Appliance wizard, do the following:

a. Navigate to the Rep ositories step of the wizard and complete the step as described in section
Connecting to Existing Veeam Backup for Microsoft Azure Appliances (step 8).

b. Complete the E d it Veeam Backup for Microsoft Azure Appliance wizard as described in section
Connecting to Existing Veeam Backup for Microsoft Azure Appliances (steps 9-10).

Open the Ba ckup Infrastructure view to verify that the repository is displayed under the E x ternal Repositories
node.

75 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Editing Repositories
For each standard repository, you can modify settings configured while adding the repository to the backup
infrastructure:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to E x ternal Repositories.

3. Select the necessary repository and click E d it Repository on the ribbon.

Alternatively, you can right-click the repository and select P rop erties.

4. Complete the E d it External Repository wizard:

a. To specify a new name and description for the repository, follow the instructions provided in section
Creating New Repositories (step 2).

b. To change the credentials of the Microsoft Azure storage account and the gateway server used to
access the repository, follow the instructions provided in section Creating New Repositories (step 3).

c. To enable encryption or change the encryption settings of the repository, follow the instructions
provided in section Creating New Repositories (step 6).

d. At the Ap p ly step of the wizard, wait for the changes to be applied and click Nex t.

e. At the Summary step of the wizard, review summary information and click Finish.

76 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Rescanning Repositories
Veeam Backup & Replication periodically rescans standard repositories for newly created restore points and
metadata — the results of every rescan session are displayed in the History view under the Sy stem node. A
rescan operation is launched automatically every 24 hours or in the following cases:

• After you add a repository to the backup infrastructure.

• After a backup chain is modified in the object storage (for example, if a restore point is added or delet ed
from the chain).

However, you can perform a rescan operation for a repository manually:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to E x ternal Repositories.

3. Select the necessary repository and click Rescan on the ribbon.

Alternatively, you can right-click the repository and select Rescan.

If multiple repositories are present in the backup infrastructure, you can perform the rescan operation for all
repositories simultaneously. To do that, right-click the E x ternal Repositories node and select Rescan.

77 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Removing Repositories
Microsoft Azure Plug-in for Veeam Backup & Replication allows you to permanently remove repositories from
the backup infrastructure:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to E x ternal Repositories.

3. Select the necessary repository and click Remove Repository on the ribbon.

Alternatively, you can right-click the repository and select Remove.

Note that the repository will not be removed from the Veeam Backup for Microsoft Azure appliance. To learn
how to remove repositories from Veeam Backup for Microsoft Azure appliances, see the Veeam Backup for
Microsoft Azure User Guide, section Removing Repositories.

78 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Performing Configuration Backup and
Restore
You can back up and restore the configuration database that stores data collected from a Veeam Backup for
Microsoft Azure appliance configuration for the existing backup policies, protected Azure VMs, Azure SQL
databases, Azure file shares, worker instance configurations, logged session records and so on. If the Veeam
Backup for Microsoft Azure goes down for some reason, you can reinstall it and quickly r estore its configuration
from a configuration backup. You can also use a configuration backup to migrate the configuration of one Veeam
Backup for Microsoft Azure appliance to another appliance in Microsoft Azure.

It is recommended that you regularly perform configuration backup for every Veeam Backup for Microsoft Azure
appliance added to the backup infrastructure. Periodic configuration backups reduce the risk of data loss and
minimize the administrative overhead costs in case any problems with the Veeam Backup for Microsoft Azure
appliance occur.

NOTE

Veeam Backup for Microsoft Azure appliances allows you to back up and restore their configuration directly
from the Web UI. However, when you add an appliance to the backup infrastructure, this functionality is
disabled and you become able to back up and restore the appliance configuration from the Veeam Backup
& Replication console only.

79 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Configuration Backup
When Veeam Backup & Replication performs configuration backup, it backs up the configuration of the backup
server and also configurations of all Veeam Backup for Microsoft Azure appliances added to the backup
infrastructure.

During the configuration backup, Veeam Backup & Replication exports data from the configuration database of
an appliance and saves it to a backup file in a repository. The configuration database contains the following
information: the existing backup policies, protected Azure VMs, Azure SQL databases, Azure file shares, worker
instance configurations, logged session records and so on.

Limitations and Considerations

If you plan to back up the configuration of a managed Veeam Backup for Microsoft Azure appliance, keep in
mind the following limitations and considerations:

• You must enable backup file encryption in the configuration backup settings. Otherwise, Veeam Backup &
Replication will back up only the backup server configuration.

To learn how to create encrypted configuration backups, see the Veeam Backup & Replication User Guide,
section Creating Encrypted Configuration Backups.

• You cannot store configuration backups in scale-out backup repositories and external repositories.

• For Veeam Backup & Replication to be able to back up the appliance configuration, the Veeam Backup for
Microsoft Azure appliance must be available and must run a Veeam Backup for Microsoft Azure version
that is compatible with the Veeam Backup & Replication version.

For the list of compatible versions, see System Requirements.

• During configuration backup, Veeam Backup & Replication can process only 3 appliances at once — the
appliances exceeding this limit are queued.

• To enable data loss protection in case you lose or forget the password used for data encryption, you can
use Veeam Backup Enterprise Manager to decrypt backup files.

To learn how to let Veeam Backup & Replication encrypt and decrypt data with Enterprise Manager, see
the Veeam Backup Enterprise Manager Guide, section Managing Encryption Keys.

Performing Configuration Backup

You can perform configuration backup manually or instruct Veeam Backup & Replication to do it automatically
on a regular basis:

• To perform configuration backup manually, follow the instructions provided in the Veeam Backup &
Replication User Guide, section Running Configuration Backups Manually.

• To instruct Veeam Backup & Replication to perform configuration backup automatically, follow the
instructions provided in the Veeam Backup & Replication User Guide, section Scheduling Configuration
Backups.

IMP ORTANT

For Veeam Backup & Replication to be able to back up configurations of managed Veeam Backup for
Microsoft Azure appliances, you must enable backup file encryption in the configuration backup settings.

80 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Configuration Backup Location
Veeam Backup & Replication stores configuration backups of Veeam Backup for Microsoft Azure appliances in a
repository specified in the configuration backup settings. Backups are saved to the
\\VeeamConfigBackup\Azure folder.

NOTE

Consider the following:

• It is not recommended to store configuration backups on the backup server. Otherwise, you will not
be able to restore the configurations of managed Veeam Backup for Microsoft Azure appliances in
case the backup server goes down.
• If the name of an appliance contains unsupported characters, these characters are replaced with the
'_' underscore symbol in the name format for a subfolder and a backup files .

81 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Configuration Restore
Veeam Backup & Replication offers restore of the configuration database that can be helpful in the following
situations:

• The configuration database got corrupted and you want to recover data from a configuration backup.

• You want to roll back the configuration to a specific point in time.

• A Veeam Backup for Microsoft Azure appliance got corrupted and you want to recover its configuration
from a configuration backup.

• A Veeam Backup for Microsoft Azure appliance went down and you want to apply its configuration to a
new Veeam Backup for Microsoft Azure appliance.

Limitations and Considerations

Before you restore configuration of a Veeam Backup for Microsoft Azure appliance, consider the following:

• Make sure there are no sessions currently running on the Veeam Backup for Microsoft Azure appliance.
Also, make sure there are no backup policies scheduled to run during restore. Otherwise, backups created
by these policies may be corrupted.

• If the Veeam Backup for Microsoft Azure appliance requires an upgrade, perform it before you start
configuration restore. Otherwise, Veeam Backup & Replication will not be able to perform the restore
operation. To learn how to upgrade appliances, see Upgrading Appliances.

• If you remove the Veeam Backup for Microsoft Azure appliance from the backup infrastructure, you will
not be able to restore its configuration. However, you will be able to restore the configuration to another
Veeam Backup for Microsoft Azure appliance currently added to the backup infrastructure.

• If you want to restore the configuration of the Veeam Backup for Microsoft Azure appliance to another
one, you must remove the initial appliance from the backup infrastructure beforehand.

• Make sure that repositories added to the Veeam Backup for Microsoft Azure appliance are not managed by
any other appliances. Otherwise, retention sessions running on different appliances may corrupt backup
files stored in the repositories, which may result in unpredictable data loss.

• The appliance to which you restore the configuration preserves its TLS certificate.

• [Applies only if you restore the configuration of the Veeam Backup for Microsoft Azure appliance to
another one] During restore, Veeam Backup & Replication removes the appliance and its repositories from
the backup infrastructure. If the restore operation fails, re-add the appliance and its repositories to the
backup infrastructure.

Performing Configuration Restore

To restore the configuration database of a Veeam Backup for Microsoft Azure appliance, do the following:

1. Launch the Configuration Restore wizard.

2. Choose a backup file.

3. Review the backup file info.

4. Specify a decryption password.

5. Choose restore options.

82 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
 6. Specify a user whose credentials will be used to connect to the appliance.

7. Wait for the restore process to complete.

8. Finish working with the wizard.

83 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 1. Launch Configuration Restore Wizard
To launch the Configuration Restore wizard, do the following:

1. In the Veeam Backup & Replication console, open the Ba ckup Infrastructure view.

2. Navigate to Ma naged Servers > Microsoft Azure.

3. Select a Veeam Backup for Microsoft Azure appliance for which you want to perform the restore
operation, and click Restore Configuration on the ribbon.

Alternatively, you can right-click the necessary appliance and select Restore Configuration.

84 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 2. Choose Backup File
At the Configuration backup step of the wizard, do the following:

1. From the Ba ckup Repository list, select a repository where the configuration backup file is stored.

For a repository to be displayed in the list of available repositories, it must be added to the backup
infrastructure as described Veeam Backup & Replication User Guide, section Adding Backup Repositories.

2. Click Browse and select the necessary file.

NOTE

If the selected configuration backup file is not stored on the backup server, Veeam Backup & Replication
will copy the file to a temporary folder on the server and automatically delete it from the folder as soon as
the restore process completes.

85 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 3. Review Backup File Info
At the Ba ckup Contents step of the wizard, Veeam Backup & Replication will analyze the content of the selected
backup and display the following information:

• Backup file — the data and time when the backup file was created, the size of the file, the file location and
so on.

• [Applies if the configuration backup file selected at step 2 is not stored on the backup server] Downloaded
backup file — the temporary location of the configuration backup file on the backup server.

• Product — the name of the product and its version that was installed on the initial appliance.

• Catalogs — configuration data saved in the file (such as the number of configured backup policies, added
user accounts, created repositories, logged session records an so on).

At the Ba ckup Contents step of the wizard, review the provided information and click Nex t to confirm that you
want to use the selected file to restore the configuration data.

86 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 4. Specify Password
At the P a ssword step of the wizard, specify the password used to encrypt the configuration backup file.

If you do not remember the password, you can restore configuration data without providing it. To do that, click
the I forgot the password link and follow the instructions provided in the Veeam Backup & Replication User
Guide, section Decrypting Data Without Password.

NOTE

To restore configuration data without a password, the following requirements must be met:

• You must have either the Veeam Universal License or a legacy socket-based license (Enterprise
edition or higher) installed on the backup server.
• The backup server must be connected to Veeam Backup Enterprise Manager, and password loss
protection must be enabled on the Veeam Backup Enterprise Manager side for the duration of both
the backup and restore operations. For more information, see the Veeam Backup Enterprise Manager
Guide.

87 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 5. Choose Restore Options
By default, Veeam Backup & Replication restores configuration data for the existing infrastructure components,
created backup policies, configured global settings.

At the Restore options step of the wizard, you can choose whether you want to restore session logs and portal
users of the initial Veeam Backup for Microsoft Azure appliance as well.

If you select the Loca l users check box, Veeam Backup & Replication will restore all Portal Administrators, Portal
Operators and Restore Operators saved to the configuration backup file — and overwrite the currently added
portal users. If you select the Session history option, Veeam Backup & Replication will restore backup sessions,
restore sessions, rescan sessions and service sessions — in this case, the restore process may take more to
complete.

IMP ORTANT

After you click Nex t, the restore process will start. You will not be able to halt the process or edit the
restore settings.

88 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 6. Specify User Credentials
[This step applies only if you have selected the Loca l users option at the Restore Options step of the wizard]

After the configuration restore process completes, Veeam Backup & Replication will try to connect to the Veeam
Backup for Microsoft Azure appliance using credentials of the user specified when adding the appliance to the
backup infrastructure. However, since you have chosen to restore all users saved to the configuration backup
file, this user may be overwritten and Veeam Backup & Replication will fail to connect to the appliance.

That is why at the Credentials step of the wizard, you will be prompted to specify a user whose credentials
Veeam Backup & Replication will use to connect to the Veeam Backup for Microsoft Azure appliance. You can
specify a new or an existing user. If you specify an existing user, the user must have been assigned the Portal
Administrator role on the initial appliance and the credentials of the user must match the credentials saved in
the configuration backup file.

For a user to be displayed in the Credentials list, it must be added to the Credentials Manager. If you have not
added a user to the Credentials Manager beforehand, you can do it without closing the Configuration Restore
wizard. To add a new user, click either the Ma nage accounts link or the Ad d button and specify a user name,
password and description in the Credentials window.

IMP ORTANT

After you click Nex t, the restore process will start. You will not be able to halt the process or edit the
restore settings.

89 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 7. Track Progress
Veeam Backup & Replication will display the results of every step performed while executing the configuration
restore. At the Restore step of the wizard, wait for the restore process to complete and click Nex t.

90 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 8. Finish Working with Wizard
At the Summary step of the wizard, click Finish to finalize the process of configuration data restore.

If Veeam Backup & Replication encounters an issue while performing configuration restore, the wizard will
display the Op en backup appliance console and validate the restored configuration manually link. This link
redirects you to the Veeam Backup for Microsoft Azure Web UI where you can view the details on the occurred
issues. To learn how to resolve issues, see the Veeam Backup for Microsoft Azure User Guide, section View
Configuration Check Results.

91 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Data Protection
With Veeam Backup for Microsoft Azure, you can protect Microsoft Azure resources in the following ways:

• Create cloud-native snapshots of Azure VMs

A cloud-native snapshot includes point-in-time snapshots of virtual disks attached to the processed Azure
VM. Snapshots of virtual disks are taken using native Microsoft Azure capabilities.

• Create image-level backups of Azure VMs

In addition to cloud-native snapshots, you can protect your Azure VMs with image-level backups. An
image-level backup captures the whole image of the processed Azure VM (including OS data, application
data and so on) at a specific point in time. The backup is saved as multiple files to a storage bucket in the
native Veeam format.

• Create image-level backups of Azure SQL databases

An image-level backup of an Azure SQL database captures the whole image of the processed database
(including tables, constraints, indexes and actual data) at a specific point of time. The backup is saved as
multiple files to a repository in the native Veeam format.

• Create cloud-native snapshots of Azure file shares

A cloud-native snapshot includes point-in-time snapshots of base files, metadata and files in the system
properties of the processed Azure file share. Snapshots of these files are taken using native Microsoft
Azure capabilities.

To schedule data protection tasks to run automatically, create backup policies. For Azure VMs and Azure files
shares residing in any of the regions added to the backup policies, you can also take cloud -native snapshots
manually when needed — for more information, see the Veeam Backup for Microsoft Azure User Guide, sections
Creating VM Snapshots Manually and Creating File Share Snapshots Manually. For Azure SQL databases, you can
also perform backups manually when needed — for more information, see the Veeam Backup for Microsoft Azure
User Guide, section Creating SQL Backups Manually. To learn how backup works, see the Veeam Backup for
Microsoft Azure User Guide, section How Backup Works.

Additional Data Protection Options

You can create an additional layer of protection for your Azure VMs using the following Veeam Backup &
Replication functionality:

• Create copies of image -level backups

Backup copy jobs allow you to create and keep multiple copies of the same backed -up data in different
locations. To learn how to create backup copy jobs, see Creating Backup Copy Jobs.

• Store copies of image-level backups on tapes

Backup to tape jobs allow you to keep backed-up data on tape devices. To learn how to create backup to
tape jobs, see Copying Backups to Tapes.

92 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Performing Backup
Veeam Backup for Microsoft Azure runs backup policies for every data protection operation. A backup policy is a
collection of settings that define the way backup operations are performed: what data to back up, where
backups must be stored, when the backup process must start, and so on.

You can create multiple backup policies for Microsoft Azure resources. One backup policy can be used to process
multiple resources within different regions, but you can back up each resource with one backup policy at a time.
For example, if an Azure VM is added to more than one backup p olicy, it will be processed only by a backup
policy that has the highest priority. Other backup policies will skip this VM from processing. For information on
how to set a priority for a backup policy, see the Veeam Backup for Microsoft Azure User Guide, s ection Setting
Backup Policy Priority.

After you install Microsoft Azure Plug-in for Veeam Backup & Replication and add Veeam Backup for Microsoft
Azure appliances to the backup infrastructure, you can manage backup policies directly from the Veeam Backup
& Replication console.

93 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Creating Backup Policies
You can create backup policies in the Veeam Backup for Microsoft Azure Web UI only. However, you can launch
the add policy wizard directly from the Veeam Backup & Replication console — to do that, use either of the
following options:

• Switch to the Home tab, click Ba ckup Job on the ribbon, navigate to Microsoft Azure > VM, SQL or File
sha re, and select the Veeam Backup for Microsoft Azure appliance on which you want to create the backup
policy.

• Open the Home view, right-click Job s , navigate to Ba ck up > Microsoft Azure > VM, SQL or File share, and
select the Veeam Backup for Microsoft Azure appliance on which you want to create the backup policy.

Veeam Backup & Replication will open the Ad d VM Policy, Add Azure SQL Policy or Ad d Azure Files Policy wizard
in a web browser. Complete the wizard as described in the Veeam Backup for Microsoft Azure User Guide,
section Creating Azure VM Backup Policies, Creating Azure SQL Backup Policies or Creating Azure File Share
Backup Policies.

94 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Editing Backup Policy Settings
You can edit backup policy settings only in the Veeam Backup for Microsoft Azure Web UI . However, you can
launch the edit policy wizard directly from the Veeam Backup & Replication console. To do that, do the
following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Job s .

3. Select the necessary backup policy and click E d it on the ribbon.

Alternatively, you can right-click the policy and select E d it.

Veeam Backup & Replication will open the E d it Policy wizard in a web browser. Complete the wizard as
described in the Veeam Backup for Microsoft Azure User Guide, section Creating Azure VM Backup Policies,
Creating Azure SQL Backup Policies or Creating Azure File Share Backup Policies.

95 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Enabling and Disabling Backup Policies
By default, Veeam Backup for Microsoft Azure runs all created backup policies according to the specified
schedules. However, you can temporarily disable a backup policy so that Veeam Backup for Microsoft Azure
does not run the backup policy automatically. You will still be able to manually start or enable the disabled
backup policy at any time you need.

To disable an enabled backup policy or to enable a disabled backup policy, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Job s .

3. Select the necessary backup policy and click Disable on the ribbon.

Alternatively, you can right-click the necessary backup policy and select Disable.

96 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Starting and Stopping Backup Policies
You can start a backup policy manually, for example, if you want to create an additional restore point in the
snapshot or backup chain and do not want to modify the configured backup policy schedule. You can also stop a
running backup policy if processing of a workload is about to take too long, and you do not want the policy to
produce heavy load on the production environment during business hours.

To start or stop a backup policy, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Job s .

3. Select the necessary backup policy and click Sta rt or Stop on the ribbon.

Alternatively, you can right-click the selected backup policy and select Sta rt or Stop .

97 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Deleting Backup Policies
Veeam Backup & Replication allows you to permanently delete backup policies created by Veeam Backup for
Microsoft Azure.

To delete a backup policy, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Job s .

3. Select the necessary backup policy and click Delete on the ribbon.

Alternatively, right-click the necessary backup policy and select Delete.

IMP ORTANT

If you delete a backup policy from Veeam Backup & Replication, the policy will be automatically deleted
from the Veeam Backup for Microsoft Azure appliance as well.

98 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Creating Backup Copy Jobs
Backup copy is a technology that helps you copy and store backed -up data of Azure VMs in different locations.
Storing data in different locations increases its availability and ensures that data can be recovered in case a
disaster strikes.

Backup copy is a job-driven process. Veeam Backup & Replication fully automates the backup copy process and
lets you specify retention settings to maintain the desired number of restore points, as well as full backups for
archival purposes. For more information on the backup copy functionality, see the Veeam Backup & Replication
User Guide, section Backup Copy.

To create a backup copy job, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Click Ba ckup Copy on the ribbon.

3. Complete the New Ba ckup Copy Job wizard as described in the Veeam Backup & Replication User Guide,
section Creating Backup Copy Jobs for VMs and Physical Machines.

99 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Copying Backups to Tapes
Veeam Backup & Replication allows you to automate copying of image-level backups of Azure VMs to tape
devices and lets you specify scheduling, archiving and media automation options. For more information on the
supported tape libraries, see the Veeam Backup & Replication User Guide, section Tape Devices Support.

Before you start copying backup to tapes:

• Copy Azure VM backups to on-premises backup repositories. To learn how to copy backups, see the
instructions provided in Creating Backup Copy Jobs.

• Connect tape devices to Veeam Backup & Replication as described in the Veeam Backup & Replication User
Guide, section Tape Devices Deployment.

• Configure the tape infrastructure as described in steps 1–3 in the Veeam Backup & Replication User Guide,
section Getting Started with Tapes.

To copy Azure VM backups to tapes, create a backup to tape job as described in the Veeam Backup & Replication
User Guide, section Creating Backup to Tape Jobs.

100 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Managing Backed-Up Data
To view and manage backed-up data, navigate to the Ba ckups node of the Home view. The node displays
information on all restore points created by Veeam Backup for Microsoft Azure appliances.

NOTE

You cannot remove created image-level backups and snapshots from the Veeam Backup & Replication
console. To remove restore points of Azure VMs, Azure SQL databases and Azure file shares, open the
Veeam Backup for Microsoft Azure appliance Web UI and follow the instructions provided in the Veeam
Backup for Microsoft Azure User Guide, section Managing Backed-Up Data.

When you expand the Ba ckups node in the working area, you can see the following icons:

Icon P rotected Workload

Indicates that the protected workload is an Azure VM.

Indicates that the protected workload is an Azure SQL database.

Indicates that the protected workload is an Azure file share.

The Ba ckups node contains 4 subnodes:

• The Sna pshots subnode displays information on cloud-native snapshots of the protected Azure VMs and
processed Azure file shares:

o <appliance_name> nodes show snapshots created manually on the Veeam Backup for Microsoft Azure
appliance and snapshots imported to the Veeam Backup for Microsoft Azure appliance from Azure
regions specified in the backup policy settings.

o <backup_policy_name> nodes show snapshots created by the backup policy.

To learn how Veeam Backup for Microsoft Azure creates cloud -native snapshots of Azure VMs and Azure
file shares, see the Veeam Backup for Microsoft Azure User Guide, section How Backup Works.

• The E x ternal Repository subnode displays information on image-level backups of the protected Azure VMs
and Azure SQL databases that are stored in standard repositories.

To learn how Veeam Backup for Microsoft Azure creates image-level backups of the Azure VMs and Azure
SQL databases, see the Veeam Backup for Microsoft Azure User Guide, section How Backup Works.

NOTE

If a backup chain was originally encrypted and then got decrypted by Veeam Backup & Replication, the
backup chain will be marked with the Key icon.

• The E x ternal Repository (Encrypted) subnode displays information on encrypted image-level backups of
Azure VMs that are stored in standard repositories and that have not been decrypted yet, which means
either that you have not specified the decryption password or that the specified password is invalid.

To learn how to decrypt backups, see Decrypting Backups.

101 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
 • The E x ternal Repository (Archive) subnode displays information on image-level backups of the protected
Azure VMs and Azure SQL databases that are stored in archive repositories.

To learn how Veeam Backup for Microsoft Azure creates archive backups, see the Veeam Backup for
Microsoft Azure User Guide, section Archive Backup Chain.

102 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Decrypting Backups
Veeam Backup & Replication automatically decrypts backup files stored in repositories either using pas swords
that you specify when adding these repositories to the backup infrastructure or using Azure Key Vault
cryptographic keys automatically detected by Veeam Backup & Replication. If you do not specify decryption
passwords or Veeam Backup & Replication does not have permissions to access cryptographic keys, the backup
files remain encrypted.

To decrypt backup files encrypted using a cryptographic key, make sure that the service account specified when
creating a new repository or adding an existing repository to the backup infrastructure is assigned permissions
required to access Azure Key Vault cryptographic keys. For more information on the required permissions, see
Permissions.

To decrypt backup files encrypted using a password, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository (Encrypted).

3. Expand the backup policy that protects an Azure VM whose image-level backups you want to decrypt, and
select the backup chain that belongs to the VM. Click Sp ecify Password on the ribbon.

Alternatively, you can right-click the necessary backup chain and select Sp ecify password.

TIP

To decrypt all backups created by the policy, right-click the backup policy and select Sp ecify Password.

4. In the P a ssword field, enter a password that was used to encrypt the data stored in the target repository.

103 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Data Recovery
In various disaster recovery scenarios, you can perform the following restore operations using backed -up data:

• Restore of Azure VMs — restore Azure VMs from cloud-native snapshots or image-level backups to the
original or to a new location.

• Restore of Azure SQL databases — restore Azure SQL databases from image-level backups to the original
or to a new location.

• Restore of Azure file shares — restore files of Azure file shares from cloud-native snapshots to the original
location or to a new location.

• Instant Recovery — immediately restore of Azure VMs from image-level backups to VMware vSphere and
Hyper-V environments, and to Nutanix AHV clusters.

• Azure VM disk export — restore virtual disks and convert them to disks of the VMDK, VHD or VHDX
format.

• Restore to AWS — restore Azure VMs from image-level backups to AWS as EC2 instances.

• Restore to Google Cloud — restore Azure VMs from image-level backups to Google Cloud as VM instances.

• Restore to Nutanix AHV — restore Azure VMs from image-level backups to Nutanix AHV as Nutanix AHV
VMs.

NOTE

You can use restore points stored in standard repositories to perform all the listed recovery operations,
while restore points stored in archive repositories can only be used to perform restore of Azure VMs to the
original or to a new location.

104 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Performing Azure VM Restore
Veeam Backup & Replication offers the following restore operations:

• Entire VM restore — restore an entire Azure VM from a restore point.

• Disk restore — restore virtual disks attached to an Azure VM.

• Guest OS file recovery — restore individual files and folders of an Azure VM.

• Application restore — restore applications such as Microsoft Active Directory, Microsoft Exchange,
Microsoft SharePoint, and Microsoft SQL Server.

You can restore VM data to the most recent state or to any available restore point.

105 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Performing Entire VM Restore
In case a disaster strikes, you can restore entire Azure VM from a cloud -native snapshot or an image-level
backup. Veeam Backup & Replication allows you to restore one or more Azure VMs at a time, to the original
location or to a new location.

How Instance Restore Works

To restore Azure VMs from cloud-native snapshots, Veeam Backup & Replication uses native Azure capabilities.
To restore VMs from image-level backups, Veeam Backup & Replication uses different algorithms depending on
whether a Veeam Backup for Microsoft Azure appliance is added to the backup infrastructure:

• If a Veeam Backup for Microsoft Azure appliance is connected to the backup server, Veeam Backup &
Replication uses the restore algorithm described in the Veeam Backup for Microsoft Azure User Guide,
section Performing Entire VM Restore.

• If a Veeam Backup for Microsoft Azure appliance is not connected to the backup server, Veeam Backup &
Replication uses the restore algorithm described in the Veeam Backup & Replication User Guide, section
How Restore to Microsoft Azure Works.

How to Perform VM Restore

To restore an entire VM, do the following:

1. Launch the Restore to Azure wizard.

2. Select a restore point.

3. Choose a restore mode.

4. Specify an Azure subscription and region.

5. Specify a new VM name and resource group.

6. Specify VM configuration settings.

7. Specify a VM size.

8. Configure network and secure group settings.

9. Specify a restore reason.

10. Finish working with the wizard.

106 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 1. Launch Restore to Microsoft Azure Wizard
To launch the Restore to Microsoft Azure wizard, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > Snapshots if you want to restore from a cloud-native snapshot, or to Ba ckups >
E x ternal Repository if you want to restore from an image-level backup.

3. In the working area, expand the backup policy that protects an Azure VM that you want to restore, select
the necessary VM and click Microsoft Azure Iaas on the ribbon.

Alternatively, you can right-click the instance and select Restore to Microsoft Azure Iaas.

TIP

You can also launch the Restore to Microsoft Azure wizard from the Home tab. To do that, click Restore
and select Microsoft Azure. Then, in the Restore window, select Microsoft Azure Iaas > E ntire machine
restore > Restore to public cloud > Restore to Microsoft Azure and, depending on whether you want to
restore from a backup or a snapshot, click either Restore from Microsoft Azure VM snapshot or Restore
from Veeam backup.

107 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 2. Select VM and Restore Point
At the Virtual Machine step of the wizard, select a restore point that will be used to restore the selected Azure
VM. By default, Veeam Backup & Replication uses the most recent valid restore point. However, you can restore
the VM data to an earlier state.

To select a restore point, do the following:

1. In the Virtual machines to restore list, select the Azure VM and click P oint.

2. In the Restore Points window, expand the backup policy that protects the VM, select the necessary restore
point and click OK.

To help you choose a restore point, Veeam Backup & Replication provides the following information on
each available restore point:

o Job — the name of the backup policy that created the restore point and the date when the restore
point was created.

o Ty p e — the type of the restore point.

o Loca tion — the region or repository where the restore point is stored.

TIP

You can use the wizard to restore multiple instances at a time. To do that, click Ad d , select more Azure
VMs to restore and choose a restore point for each of them.

Note that if you want to restore an Azure VM from a backup that is stored in a repository with the Archive access
tier, you must first retrieve the archived data. That is why Veeam Backup & Replication will open the Retrieve
Backup wizard if the selected restore point is stored in an archive repository. To learn how to complete the
wizard and retrieve the archived data, see Retrieving Data from Archive.

108 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Retrieving Data from Archive
Backups stored in archive repositories are not immediately accessible. If you want to restore an Azure VM from a
backup that is stored in a repository with Archive access tier, you must first retrieve the archived data.

During the data retrieval process, a temporary copy of the archived data is created in an Azure blob container
where the repository is located. This copy is stored in the hot or cool access tier for a period of time that you
specify when launching the data retrieval process. If the time period expires while a restore operation is still
running, Veeam Backup for Microsoft Azure automatically extends the period to keep the retrieved data
available for one more hour. You can also extend the availability period manually.

Retrieving Data
To retrieve data from an archived restore point, complete the Retrieve Backup wizard:

1. At the Retrieval Mode step of the wizard, choose the retrieval mode that Veeam Backup & Replication will
use to retrieve the archived data:

o Sta ndard Priority — the default priority mode. If you choose this mode, the retrieved data will be
available within 15 hours.

o Hig h Priority — the faster but more expensive priority mode. If you choose this mode, the retrieved
data will be available within one hour if the size of a backup file is less than 10 GB.

For more information on priority options, see Microsoft Docs.

2. At the Ava ilability Period step of the wizard, specify the number of days for which you want to keep the
data available for restore operations.

The data will be available during the day when the retrieval process completes plus the specified number
of days. Each day starts at 12:00 AM and ends at 11:59 PM (in your appliance time zone). For example, if
the data retrieval finished at 3:00 PM on June 6, and the availability period is set to 1 day, the data will be
available till 11:59 PM on June 7.

You will be able to manually extend data availability later if required.

TIP

If you want to receive an email notification when the data availability period is about to expire, select the
E na ble e-mail notifications check box and choose when you want to be notified (that is, the number of
hours remaining until data expiration).

To learn how to configure global email notification settings, see the Veeam Backup & Replication User
Guide, section Configuring Global Email Notification Settings.

3. At the Summary step of the wizard, review summary information and click Finish.

The retrieved data will be displayed on the Home view under the Da ta Retrieval node.

109 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
After you complete the Retrieve Backup wizard, you will be able to proceed with the Restore to Microsoft Azure
wizard. However, the restore process will start only after the data is retrieved.

Extending Data Availability

To extend time for which you want to keep retrieved data available for restore operations:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Da ta Retrieval node.

3. Select an Azure VM for which you want to extend availability of the retrieved data and click E x tend
Ava ilability on the ribbon.

Alternatively, you can right-click the VM and click E x tend availability.

110 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
 4. In the opened window, specify the number of days for which you want to keep the data available for
restore operations, and click OK.

111 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Step 3. Choose Restore Mode
At the Restore Mode step of the wizard, do the following:

1. Choose whether you want to restore the selected Azure VM to the original or to a new location.

IMP ORTANT

For Veeam Backup & Replication to be able to perform restore to the original location, the service account
selected for the restore operation must match the service account that has been used to protect the source
VM.

2. Click P ick account to use to select a service account whose permissions will be used to perform the restore
operation. For more information on the required permissions, see the Veeam Backup for Microsoft Azure
User Guide, section Azure Service Account Permissions.

For a service account to be displayed in the list of available accounts, it must be added to the Veeam
Backup for Microsoft Azure appliance as described in the Veeam Backup for Microsoft Azure User Guide,
section Adding Azure Service Accounts.

NOTE

By default, to perform the restore operation, Veeam Backup & Replication uses permissions of the service
account that has been used to protect the source VM, unless the service account was removed from the
backup infrastructure. In the latter case, the Res tore to the original location option will not be available.

112 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 4. Specify Azure Subscription and Region
[This step applies only if you have selected the Restore to a new location, or with different settings option at
the Restore Mode step of the wizard]

At the Sub scription step of the wizard, do the following:

1. From the Sub scription drop-down list, select a Microsoft Azure subscription that will be used to manage
the restored Azure VM.

For a subscription to be displayed in the list of available subscrip tions, it must be associated with the
tenant to which the service account specified at step 3 of the wizard belongs, as described in Microsoft
Docs.

2. From the Reg ion drop-down list, select the target region where the restored Azure VM will operate.

If the selected region differs from the original location of Azure VM, Veeam Backup & Replication will raise
a warning notifying that the locations do not match. Click Y es to acknowledge the warning. Otherwise,
you will not be able to proceed with the wizard.

NOTE

Data transfer to a new location may require additional costs and may take more time to complete.

113 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 5. Specify VM Name and Resource Group
[This step applies only if you have selected the Restore to a new location, or with different settings option at
the Restore Mode step of the wizard]

At the Na me step of the wizard, specify a new name and a resource group for the restored Azure VM. To do that,
select the necessary VM from the list and do the following:

1. Click Na me and specify a new name for the restored VM in the Cha nge Name window.

Note that the name must must meet the Microsoft Azure resource name rules.

TIP

You can specify a single prefix or suffix and add it to the names of multiple Azure VMs. To do that, select
the necessary instances and click Na me. In the Cha nge Name window, select the Ad d prefix or Ad d suffix
check box, and provide the text that you want to add. Then, click OK.

2. Click Group and select a resource group to which the restored VM will belong in the Resource group
window.

For a resource group to be displayed in the list of available groups, it must be created in Microsoft Azure
as described in Microsoft Docs.

114 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 6. Specify VM Configuration Settings
[This step applies only if you have selected the Restore to a new location, or with different settings option at
the Restore Mode step of the wizard]

At the Ava ilability Options step of the wizard, specify configuration settings for the restored Azure VM. To do
that, select the VM and do the following:

1. Click Ava ilability and, in the Ava ilability Options window, choose whether you want to require any
infrastructure redundancy to achieve high availability:

o Select the Ava ilability zone option to restore the VM to a specific Availability Zone within the selected
Azure region, and choose the necessary zone from the drop-down list.

o Select the Ava ilability set option to include the VM in an availability set, and choose the necessary set
from the drop-down list. For the availability set to be displayed in the list of available sets, it must be
created in Microsoft Azure. For more information on availability sets, see Microsoft Docs.

IMP ORTANT

You cannot include Azure VMs with managed disks into unmanaged availability sets, and Azure VMs with
unmanaged disks into managed availability sets.

2. [This step applies only to Azure VMs with unmanaged disks] Click Storage and, in the Storage type
window, choose whether you want to migrate Azure unmanaged disks to Azure managed disks for the
restored VM. For more information on Azure managed disks, see Microsoft Docs.

If you choose to restore the VM with unmanaged disks, select credentials of a Microsoft Azure storage
account in which the restored virtual disks will reside. For credentials to be displayed in the list of
available credentials, they must be created in Microsoft Azure as described in Microsoft Docs.

115 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 7. Specify VM Size
[This step applies only if you have selected the Restore to a new location, or with different settings option at
the Restore Mode step of the wizard]

At the VM size step of the wizard, you can change the VM size for the restored Azure VM and specify a new
name for each restored virtual disks. To do that, select the VM and do the following:

1. Click E d it, and select the necessary VM size in the VM Size window. For more information on Azure VM
sizes, see Microsoft Docs.

IMP ORTANT

If the size of the original Azure VM differs from the size of the restored VM, Microsoft Azure may apply
additional charges for maintaining the restored Azure VM.

2. Click Disks, and select a virtual disk you want to rename in the VM Disks window. Then, click Na me.

In the Cha nge Name window, specify a new name for the selected virtual disk.

TIP

You can specify a single prefix or suffix and add it to the names of multiple restore d virtual disks. To do
that, select the necessary disks and click Na me. In the Cha nge Name window, select the Ad d prefix or Ad d
suffix check box, and provide the text that you want to add. Then, click OK.

116 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 8. Configure Network and Secure Group Settings
[This step applies only if you have selected the Restore to a new location, or with different settings option at
the Restore Mode step of the wizard]

At the Network step of the wizard, you can configure specific network settings for the restored Azure VM. To do
that, select the VM and do the following:

1. Click Network and, in the Virtual Network window, choose to which virtual network and subnet the
restored VM must be connected.

For a virtual network to be displayed in list of available networks, it must be created for the region
specified at step 4 of the wizard in Microsoft Azure, as described in Microsoft Docs.

For a subnet to be displayed in the list of available networks, it must be created in the specified virtual
network as described in Microsoft Docs.

2. Click Group and, in the Network Security Group window, specify a security group (virtual firewall) that will
be associated with the restored VM.

For a network security group to be displayed in the list of available groups, it must be created in Microsoft
Azure and associated with the specified subnet, as described in Microsoft Docs.

117 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 9. Specify Restore Reason
At the Rea son step of the wizard, specify a reason for restoring the Azure VM. The information you provide will
be saved in the session history and you can reference it later.

118 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Step 10. Finish Working with Wizard
At the Summary step of the wizard, review summary information and click Finish.

TIP

If you want to start the Azure VM immediately after restore, select the P ower on target VM after restoring
check box.

119 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Performing Disk Restore
In case a disaster strikes, you can restore corrupted virtual disks of an Azure VM from a cloud -native snapshot or
an image-level backup. Veeam Backup for Microsoft Azure allows you to restore virtual disks to the original
location or to a new location.

You can restore virtual disks only using the Veeam Backup for Microsoft Azure Web UI. To learn how to restore
virtual disks, see the Veeam Backup for Microsoft Azure User Guide, section Performing Disk Restore.

120 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Performing Guest OS File Recovery
IMP ORTANT

Guest OS File Recovery can be performed only using backup files stored in standard repositories for which
you have specified credentials of Microsoft Azure storage accounts where the target blob containers
reside. To learn how to specify credentials for repositories, see sections Creating New Repositories and
Connecting to Existing Appliances.

Veeam Backup & Replication allows you to use image-level backups to restore files and folders of various VM
guest OS file systems from the Veeam Backup & Replication console. For more information, see the Veeam
Backup & Replication User Guide, section Guest OS File Recovery.

TIP

You can also perform file-level recovery using the Veeam Backup for Microsoft Azure Web UI. For more
information, see the Veeam Backup for Microsoft Azure User Guide, section Performing File-Level
Recovery.

Restoring from Microsoft Windows File Systems (FAT, NTFS or

ReFS)
Before you start the restore operation, check the limitations and prerequisites described in the Veeam Backup &
Replication User Guide, section Requirements and Limitations.

To restore guest OS files and folders, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository.

3. Expand the backup policy that protects an Azure VM whose files and folders you want to restore, select
the necessary VM and click Gues t Files (Windows) on the ribbon.

4. Complete the File Level Restore wizard as described in the Veeam Backup & Replication User Guide,
section Restoring VM Guest OS Files (FAT, NTFS or ReFS).

Restoring Files from Linux, Unix and Other Supported File

Systems
NOTE

You can restore files of Linux, Solaris, BSD, Novell Storage Services, Unix and Mac machines. For the list of
supported file systems, see the Veeam Backup & Replication User Guide, section Platform Support.

Before you start the restore operation, check the limitations and prerequisites described in the Veeam Backup &
Replication User Guide, section Requirements and Limitations.

To restore guest OS files and folders, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository.

121 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
 3. Expand the backup policy that protects an Azure VM whose files and folders your want to restore, select
the necessary VM and click Guest Files (Other) on the ribbon.

4. Complete the Guest File Restore wizard as described in the Veeam Backup & Replication User Guide,
section Restoring VM Guest OS Files (Multi-OS).

TIP

If the file system whose files and folders you want to restore is not included in the list of supported
systems, do either of the following:

• Perform restore to the VMware vSphere environment using the Instant Disk Recovery technology.
For more information, see the Veeam Backup & Replication User Guide, section Restore from Other
File Systems.
• Perform restore to the Microsoft Hyper-V environment using the Instant Recovery technology. For
more information, see the Veeam Backup & Replication User Guide, section Restore from Other File
Systems.

122 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Performing Application Restore
IMP ORTANT

Application restore can be performed only using backup files stored in standard repositories for which you
have specified credentials of Microsoft Azure storage accounts where the target blob containers reside. To
learn how to specify credentials for repositories, see sections Creating New Repositories and Connecting to
Existing Appliances.

Veeam Backup & Replication provides auxiliary tools — Veeam Explorers — that allow you to restore application
items directly from image-level backups of Azure VMs. For more information on Veeam Explorers, see the
Veeam Explorers User Guide.

You can restore items of the following applications:

• Microsoft Active Directory

• Microsoft Exchange

• Microsoft SharePoint

• Microsoft SQL Server

• Oracle Database

To perform application restore, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository.

3. Expand the backup policy that protects an Azure VM whose application item you want to restore, select
the necessary VM and click Ap p lication Items on the ribbon. Then, select the necessary application.

4. In the restore wizard, select a restore point that will be used to restore the application, specify a restore
reason and click Browse.

5. In the Veeam Explorer application, perform the steps described in the Veeam Explorers User Guide.

123 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
 IMP ORTANT

The backup from which you want to restore application items must be transactionally consistent. To learn
how to create transactionally consistent backups, see the Veeam Backup for Microsoft Azure User Guide,
section Creating Backup Policies.

124 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Performing SQL Restore
In case a disaster strikes, you can restore an Azure SQL databases from an image -level backup. Veeam Backup &
Replication allows you to restore one or more databases at a time, to the original location or to a new location.
To learn how SQL restore works, see the Veeam Backup for Microsoft Azure User Guide, section Performing
Azure SQL Restore.

To restore Azure SQL databases, do the following:

1. Launch the Restore to Microsoft Azure SQL Wizard.

2. Select a restore point.

3. Choose a restore mode.

4. Specify target Azure SQL Server settings.

5. Specify a new name for the restored database.

6. Specify a restore reason.

7. Finish working with the wizard.

125 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Step 1. Launch Restore to Microsoft Azure SQL
Wizard
To launch the Restore to Microsoft Azure SQL wizard, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository.

3. In the working area, expand the backup policy that protects a SQL database you want to res tore, select
the necessary database and click Microsoft Azure SQL on the ribbon.

Alternatively, you can right-click the database and select Restore to Microsoft Azure SQL.

TIP

You can also launch the Restore to Microsoft Azure SQL wizard from the Home tab. To do that, click
Restore and select Microsoft Azure. Then, select Microsoft Azure SQL in the Restore window.

126 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Step 2. Select SQL Database and Restore Point
At the SQL d atabase step of the wizard, select a restore point that will be used to restore the selected Azure
SQL database. By default, Veeam Backup & Replication uses the most recent valid restore point. However, you
can restore the database data to an earlier state.

To select a restore point, do the following:

1. In the SQL database list, select the SQL database and click P oint.

2. In the Restore Points window, expand the backup policy that protects the SQL database, select the
necessary restore point and click OK.

To help you choose a restore point, Veeam Backup & Replication provides the following information on
each available restore point:

o Job — the name of the backup policy that created the restore point and the date when the restore
point was created.

o Ty p e — the type of the restore point.

o Loca tion — the repository where the restore point is stored.

TIP

You can use the wizard to restore multiple databases at a time. To do that, click Ad d , select more
databases to restore and choose a restore point for each of them.

127 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 3. Choose Restore Mode
At the Restore Mode step of the wizard, do the following:

1. Choose whether you want to restore the Azure SQL database to the original or to a new location.

IMP ORTANT

Consider the following:

• For Veeam Backup & Replication to be able to perform restore to the original location, the service
account selected for the restore operation must match the service account that has been used to
protect the source VM.
• If Veeam Backup & Replication cannot automatically detect an Azure SQL account that will be used
to access the original SQL Server, the Restore to the original location option will not be available.
However, you can restore the database to the original location using the Restore to a new location,
or with different settings option. To do that, choose the specified option, select the necessary Azure
SQL account at step 4, and proceed with the wizard with the preconfigured settings.

2. Click P ick account to use to select a service account whose permissions will be used to perform the restore
operation. For more information on the required permissions, see the Veeam Backup for Microsoft Azure
User Guide, section Azure Service Account Permissions.

For a service account to be displayed in the list of available accounts, it must be added to the Veeam
Backup for Microsoft Azure appliance as described in the Veeam Backup for Microsoft Azure User Guide,
section Adding Azure Service Accounts.

128 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
 NOTE

By default, to perform the restore operation, Veeam Backup & Replication uses permissions of the service
account that has been used to protect the source VM, unless the service account was removed from the
backup infrastructure. In the latter case, the Restore to the original location option will not be available.

129 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Step 4. Specify Target SQL Server Settings
[This step applies only if you have selected the Restore to a new location, or with different settings option at
the Restore Mode step of the wizard]

At the Ta rget server step of the wizard, you can specify a target server and its settings for the restored Azure
SQL database. To do that, select the database and click Server. In the Ta rget server window, do the following:

1. From the SQL server drop-down list, select a target SQL Server or an Azure SQL Managed Instance that
will host the restored database.

For a SQL Server to be displayed in the list of available servers, it must be created in Microsoft Azure as
described in Microsoft Docs.

For an Azure SQL Managed Instance to be displayed in the list of available instances, it must be created in
Microsoft Azure as described in Microsoft Docs.

2. [This step applies only if you restore databases to a SQL Server] From the E lastic pool drop-down list,
select an elastic pool to which the restored database will be added.

For an elastic pool to be displayed in the list of available pools, it must be created in Microsoft Azure as
described in Microsoft Docs.

3. From the Account drop-down list, select an Azure SQL account that will be used to authenticate against
the target SQL Server. Note that the specified account must be created on the target server beforehand
and assigned full administrative permissions as described in Microsoft Docs.

For an Azure SQL account to be displayed in the list of available accounts, it must be added to the Veeam
Backup for Microsoft Azure appliance as described in the Veeam Backup for Microsoft Azure User Guide,
section Adding Accounts.

130 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 5. Specify SQL Database Name
[This step applies only if you have selected the Restore to a new location, or with different settings option at
the Restore Mode step of the wizard]

At the Na me step of the wizard, specify a new name for the restored Azure SQL database.

TIP

You can specify a single prefix or suffix and add it to the names of multiple SQL databases. To do that,
select the necessary SQL databases and click Na me. In the Cha nge Name window, select the Ad d prefix or
Ad d suffix check box, and provide the text that you want to add. Then, click OK.

131 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Step 6. Specify Restore Reason
At the Rea son step of the wizard, specify a reason for restoring the Azure SQL database. The information you
provide will be saved in the session history and you can reference it later.

132 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Step 7. Finish Working with Wizard
At the Summary step of the wizard, review summary information and click Finish.

133 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Performing Azure Files Restore
You can recover corrupted or missing files of an Azure file share only using the Veeam Backup for Microsoft
Azure appliance Web UI. However, you can launch the Azure Files File-level Recovery wizard directly from the
Veeam Backup & Replication console to start the restore operation:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > Snapshots.

3. Expand the backup policy that protects the Azure file share that hosts files you want to recover, select the
necessary file share and click Microsoft Azure Files on the ribbon.

Alternatively, you can right-click the selected file share and click Restore to Microsoft Azure Files.

Veeam Backup & Replication will open the Azure Files File-level Recovery wizard in a web browser. Complete
the wizard as described in the Veeam Backup for Microsoft Azure User Guide, section Performing Azure File
Share Restore.

134 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Performing Instant Recovery
IMP ORTANT

Instant Recovery can be performed only using backup files stored in standard repositories for which you
have specified credentials of Microsoft Azure storage accounts where the target blob containers reside. To
learn how to specify credentials for repositories, see sections Creating New Repositories and Connecting to
Existing Appliances.

Veeam Backup & Replication allows you to use the Instant Recovery feature to restore Azure VMs from image -
level backups to VMware vSphere and Microsoft Hyper-V environments, or to Nutanix AHV clusters. For more
information, see the Veeam Backup & Replication User Guide for VMware vSphere, Veeam Backup & Replication
User Guide for Microsoft Hyper-V and Veeam Backup for Nutanix AHV User Guide, section Instant Recovery .

Before you start the restore operation, make sure to add to the backup infrastructure a vCenter Server, a
Microsoft Hyper-V server, or a Nutanix AHV cluster that will manage restored VMs. To learn how to add servers
or clusters to Veeam Backup & Replication, see the Veeam Backup & Replication User Guide, section Adding
VMware vSphere Servers, Adding Microsoft Hyper-V Servers, or Adding Nutanix AHV Cluster.

To perform Instant Recovery, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository.

3. Expand the backup policy that protects an Azure VM that you want to recover, select the necessary VM
and click Instant Recovery on the ribbon.

4. Select VMwa re vSphere, Microsoft Hyper-V or Nutanix AHV.

135 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
 5. Depending on the selected Instant Recovery option, complete the Instant Recovery wizard as described in
the Veeam Backup & Replication User Guide, section Performing Instant Recovery of Workloads to
VMware vSphere VMs, Performing Instant Recovery of Workloads to Hyper-V VMs or Performing Instant
Recovery of Workloads to Nutanix AHV.

136 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Exporting Disks
IMP ORTANT

Exporting Disks can be performed only using backup files stored in standard repositories for which you
have specified credentials of Microsoft Azure storage accounts where the target blob containers reside. To
learn how to specify credentials for repositories, see sections Creating New Repositories and Connecting to
Existing Appliances.

Veeam Backup & Replication allows you to export disks, that is, to restore virtual disks of Azure VMs from
image-level backups created by Veeam Backup for Microsoft Azure and to convert them to the VMDK, VHD and
VHDX formats. You can save the converted disks to any server added to the backup infrastructure or place the
disks on a datastore connected to an ESXi host (for the VMDK disk format only). For more information, see the
Veeam Backup & Replication, section Disk Export.

To restore disks of an Azure VM to the VMDK, VHD or VHDX format, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository.

3. Expand the backup policy that protects an Azure VM whose disks you want to restore, select the necessary
VM and click E x p ort Disk on the ribbon.

4. Complete the E x p ort Disk wizard as described in the Veeam Backup & Replication User Guide, section
Exporting Disks.

137 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Restoring to AWS
IMP ORTANT

Consider the following:

• Restore to AWS can be performed only using backup files stored in standard repositories for which
you have specified credentials of Microsoft Azure storage accounts where the target blob containers
reside. To learn how to specify credentials for repositories, see sections Creating New Repositories
and Connecting to Existing Appliances.
• Before you start the restore operation, check the limitations and prerequisites described in the
Veeam Backup & Replication User Guide, section Before You Begin.

Veeam Backup & Replication allows you to restore Azure VMs from image-level backups created with Veeam
Backup for Microsoft Azure to AWS as EC2 instances. You can restore Azure VMs to any available restore point.
For more information, see the Veeam Backup & Replication User Guide, section Restore to Amazon EC2.

To restore an Azure VM to AWS, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository.

3. Expand the backup policy that protects an Azure VM that you want to restore, select the necessary VM
and click Ama zon EC2 on the ribbon.

4. Complete the Restore to Amazon EC2 wizard as described in the Veeam Backup & Replication User Guide,
section Restoring to Amazon EC2.

138 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Restoring to Google Cloud
IMP ORTANT

Consider the following:

• Restore to Google Cloud can be performed only using backup files stored in standard repositories
for which you have specified credentials of Microsoft Azure storage accounts where the target blob
containers reside. To learn how to specify credentials for repositories, see sections Creating New
Repositories and Connecting to Existing Appliances.
• Before you start the restore operation, check the limitations and prerequisites described in the
Veeam Backup & Replication User Guide, section Before You Begin.

Veeam Backup & Replication allows you to restore Azure VMs from image-level backups created with Veeam
Backup for Microsoft Azure to Google Cloud as VM instances. You can restore VMs to any available restore
point. For more information, see the Veeam Backup & Replication User Guide, section Restore to Google
Compute Engine.

To restore an Azure VM to Google Cloud, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > E x ternal Repository.

3. Expand the backup policy that protects an Azure VM that you want to restore, select the necessary VM
and click Goog le CE on the ribbon.

4. Complete the Restore to Google Compute Engine wizard as described in the Veeam Backup & Replication
User Guide, section Restoring to Google Compute Engine.

139 | V eeam Backup for Microsoft A zure | Integration with Veeam Backup & Replication Guide
Restoring to Nutanix AHV
IMP ORTANT

Restore to Nutanix AHV can be performed only using backup files stored in standard repositories for which
you have specified credentials of Microsoft Azure storage accounts where the target blob containers
reside. To learn how to specify credentials for repositories, see sections Creating New Repositories and
Connecting to Existing Appliances.

Veeam Backup & Replication allows you to restore Azure VMs from image-level backups created with Veeam
Backup for Microsoft Azure to Nutanix AHV as Nutanix AHV VMs. You can restore VMs to any available restore
point.

Before you start the restore operation:

• Configure the backup infrastructure as described in the Veeam Backup for Nutanix AHV User Guide,
section Deployment.

• If you restore Azure VMs from standard backups, make sure that these backups have been copied to an
on-premises backup repository as described in the Veeam Backup & Replication User Guide, section
Creating Backup Copy Jobs for VMs and Physical Machines.

• If you restore Azure VMs from backups copied to the archive access tier of a scale-out backup repository,
make sure to retrieve these backups from archive as described in the Veeam Backup & Replication User
Guide, section Retrieving Backup Files.

To restore an Azure VM to a Nutanix AHV cluster, do the following:

1. In the Veeam Backup & Replication console, open the Home view.

2. Navigate to Ba ck ups > Disk (Copy).

3. Expand the backup policy that protects an Azure VM you want to restore, select the necessary VM and
click E ntire VM on the ribbon.

140 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
 4. Complete the Restore to Nutanix AHV wizard as described in the Veeam Backup for Nutanix AHV User
Guide, section Restoring VMs Using Veeam Backup & Replication Console.

141 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide
Viewing Session Statistics
For each performed data protection or disaster recovery operation, Veeam Backup & Replication starts a new
session and stores its records in the configuration database. You can track real-time statistics of all running and
completed operations on the Job s, Last 24 hours and Running nodes. For more information, see Veeam Backup
& Replication User Guide, sections Viewing Real-Time Statistics and Viewing Job Session Results.

Veeam Backup & Replication also allows you track statistics of data recovery operations initiated from Veeam
Backup for Microsoft Azure. To do that, do either of the following:

• In the Veeam Backup & Replication console, open the Home view and navigate to La st 24 hours. In the
working area, double-click the necessary restore session.

Alternatively, select the session and click Sta tistics on the ribbon.

• In the Veeam Backup & Replication console, open the History view and navigate to Restore. In the working
area, double-click the necessary restore session.

Alternatively, select the session and click Sta tistics on the ribbon.

The Restore Session window will display restore session details such as the name of the VM instance whose data
is being restored, the account under which the session has started, the session status and duration, information
on the restore point selected for the restore operation, and the list of tasks performed during the session.

142 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Getting Technical Support
If you have any questions or issues with Microsoft Azure Plug -in for Veeam Backup & Replication, Veeam Backup
& Replication or Veeam Backup for Microsoft Azure, you can search for a resolution on Veeam R&D Forums or
submit a support case in the Veeam Customer Support Portal.

When you submit a support case, it is recommended that you provide the Veeam Customer Support Team with
the following information:

• Version information for the product and its components

• The error message or an accurate description of the problem you are facing

• Log files

To export the product logs, do the following:

1. In the Veeam Backup & Replication console, open the main menu and navigate to Help > Support
Information.

2. In the E x port Logs wizard, do the following:

a. At the Scop e step, select the E x port all logs for selected components option. Then, in the Ma naged
servers list, select the backup server, Veeam Backup for Microsoft Azure appliances and other
components for which you want to export logs.

b. Complete the wizard as described in the Veeam Backup & Replication User Guide, section Export Logs.

143 | V eeam Backup for Microsoft Azure | Integration with Veeam Backup & Replication Guide
Features and Plug-In Versions
The following table shows major features that were added in each version of Microsoft Azure Plug -in for Veeam
Backup & Replication:

Microsoft Azure Plug-in for Fea tures

Veeam Backup & Replication
version

• Enhanced scalability to support enterprise environments

12.0.5.x
• Immutability support for repositories

• Backup and restore of the appliance configuration

11.0.4.x
• Restore of Azure file shares

• SQL database protection

11.0.3.x • Restore of SQL databases
• Deploying repositories of the Archive access tier

• Connecting and deploying an appliance

• Deploying repositories of the Hot access tier
• Deploying repositories of the Cool access tier
11.0.2.x
• Azure VM protection
• Restore of Azure VMs
• Azure user account in the Government region (11.0.2.167)

144 | V eeam Backup for Microsoft Azure | Integration with V eeam Backup & Replication Guide