Veeam Backup & Replication

Version 11
Integration with Veeam Backup for Microsoft Azure
Guide
October, 2021
© 2021 Veeam Software.

All rights reserved. All trademarks are the property of their respective owners.

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or
translated into any language in any form by any means, without written permission from Veeam Software
(Veeam). The information contained in this document represents the current view of Veeam on the issue
discussed as of the date of publication and is subject to change without notice. Veeam shall not be liable for
technical or editorial errors or omissions contained herein. Veeam makes no warranties, express or implied, in
this document. Veeam may have patents, patent applications, trademark, copyright, or other intel lectual
property rights covering the subject matter of this document. All other trademarks mentioned herein are the
property of their respective owners. Except as expressly provided in any written license agreement from Veeam,
the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other
intellectual property.

NOTE
Read the End User Software License Agreement before using the accompanying software programs. Using
any part of the software indicates that you accept the terms of the End User Software License Agreement.

2 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Contents
CONTACTING VEEAM SOF TWARE ................................ ................................ ........................... 5
ABOUT THIS DOCUMENT ................................ ................................ ................................ ..... 6
OVERVIEW ................................ ................................ ................................ ...................... 7
BACKUP INFRASTRUCTURE COMPONENTS ................................ ................................ ................ 8
PLANNING AND P REPARATION ................................ ................................ ............................. 10
System Requirements .......................................................................................................................... 11
Used Ports .......................................................................................................................................... 13
Required Permissions ...........................................................................................................................14
Licensing .............................................................................................................................................16
License Limitations .................................................................................................................... 17
Licensing for Integration with Veeam Backup for Microsoft Azure .................................................18
Managing Licensed W orkloads ....................................................................................................19
DEPLOY MENT AND CONFIGURATION ................................ ................................ ...................... 21
Installing Plug -In ................................................................................................................................ 22
Upgrading Plug-In .............................................................................................................................. 23
Adding Veeam Backup for Microsoft Azure Appliances .......................................................................... 24
Connecting to Existing Veeam Backup for Microsoft Azure Appliances ......................................... 25
Deploying New Veeam Backup for Microsoft Azure Appliances .................................................... 38
Managing Veeam Backup for Microsoft Azure Appliances ...................................................................... 49
Viewing Snapshots and Backups ................................................................................................ 50
Editing Appliance Settings.......................................................................................................... 51
Opening Appliance Web UI Component ...................................................................................... 52
Upgrading Appliances ............................................................................................................... 53
Rescanning Appliances .............................................................................................................. 54
Removing Appliances ................................................................................................................ 55
Adding Blob Storage Backup Repositories ............................................................................................ 57
Deploying Standard Backup Repositories .................................................................................... 59
Deploying Archive Rep ositories ................................................................................................. 68
Managing Backup Repositories ............................................................................................................ 77
Uninstalling Plug-In ............................................................................................................................ 78
DATA PROTECTION ................................ ................................ ................................ ...........79
Creating Backup P olicies .....................................................................................................................80
Managing Backup P olicies ....................................................................................................................81
Starting and Stopping Policies ................................................................................................... 82
Editing Policy Settings .............................................................................................................. 84
Disabling and Removing Policies ................................................................................................ 85

3 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
 Managing Backed-Up Data .................................................................................................................. 87
Creating Backup Copy Jobs ..................................................................................................................91
Copying Backups to Tapes ................................................................................................................... 92
Viewing Statistics ............................................................................................................................... 93
DATA RECOVERY................................ ................................ ................................ ............. 94
Restoring to Microsoft Azure ............................................................................................................... 95
Step 1. La unch Restore to Microsoft Azure Wizard ...................................................................... 96
Step 2. Select Azure VMs and Restore P oints .............................................................................. 97
Step 3. Choose Restore Mode .................................................................................................... 98
Step 4. Specify Azure Subscription a nd Region ........................................................................... 99
Step 5. Specify VM Names a nd Resource Groups ....................................................................... 100
Step 6. Config ure VM Availability Options ................................................................................. 101
Step 7. Specify VM Sizes ...........................................................................................................103
Step 8. Specify Network a nd Secure Group Settings .................................................................. 104
Step 9. Specify Restore Reason.................................................................................................105
Step 10. Finish Working with W izard ........................................................................................ 106
Restoring to Microsoft Azure SQL .......................................................................................................107
Step 1. La unch Restore to Microsoft Azure SQL Wizard .............................................................. 108
Step 2. Select SQL Databases and Restore P oints ...................................................................... 109
Step 3. Choose Restore Mode and Service Account .................................................................... 110
Step 4. Specify Target SQL Server Settings ................................................................................. 111
Step 5. Specify Name ................................................................................................................112
Step 6. Specify Restore Reason..................................................................................................113
Step 7. Finish Working with Wizard ........................................................................................... 114
Performing Instant Recovery ...............................................................................................................115
Restoring to Amazon EC2 ....................................................................................................................117
Restoring to Nutanix AHV .................................................................................................................. 118
Restore to Google Compute Engine .................................................................................................... 119
Exporting Disks .................................................................................................................................120
Restoring Guest OS Files .....................................................................................................................121
Restoring Application Items ............................................................................................................... 123
Viewing Statistics .............................................................................................................................. 125
FE ATURES AND P LUG-IN VERSIONS ................................ ................................ ...................... 127
SUPP ORT INFORMATION ................................ ................................ ................................ .. 128

4 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Contacting Veeam Software
At Veeam Software we value feedback from our customers. It is important not only to help you quickly with your
technical issues, but it is our mission to listen to your input and build products tha t incorporate your
suggestions.

Customer Support
Should you have a technical concern, suggestion or question, visit the Veeam Customer Support Portal to open a
case, search our knowledge base, reference documentation, manage your license or obtain the latest product
release.

Company Contacts
For the most up-to-date information about company contacts and office locations, visit the Veeam Contacts
Webpage.

Online Support
If you have any questions about Veeam products, you can use the following resources:

• Full documentation set: veeam.com/documentation-guides-datasheets.html

• Veeam R&D Forums: forums.veeam.com

5 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
About This Document
This guide provides information on integration of Veeam Backup & Replication and Veeam Backup for Microsoft
Azure. The document describes how to install Microsoft Azure Plug-in for Veeam Backup & Replication, how to
add Veeam Backup for Microsoft Azure to the Veeam Backup & Replication infrastructure, and gives instructions
on how to monitor Veeam Backup for Microsoft Azure sessions and perform restore of Azure VMs from the
Veeam Backup & Replication console.

Intended Audience
This guide is designed for backup administrators who plan to use the Veeam Backup & Replication console to
manage VM backup and restore operations.

Microsoft Azure Plug-in for Veeam Backup & Replication is built on top of Veeam Backup & Replication, and this
guide assumes that you have a good understanding of this solution.

6 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Overview
Microsoft Azure Plug-in for Veeam Backup & Replication is a solution that allows you to create and manage data
protection and disaster recovery tasks for Microsoft Azure environments and Azure SQL (Azure SQL databases
and Azure SQL managed instances). Microsoft Azure Plug -in for Veeam Backup & Replication extends the Veeam
Backup & Replication functionality and provides access to Veeam Backup for Microsoft Azure from the Veeam
Backup & Replication console.

NOTE

Microsoft Azure Plug-in for Veeam Backup & Replication is built on top of Veeam Backup & Replication, and
this guide assumes that you have a good understanding of this solution.

With Microsoft Azure Plug-in for Veeam Backup & Replication, you can add Veeam Backup for Microsoft Azure
appliances into the Veeam Backup & Replication infrastructure and perform the following operations from the
Veeam Backup & Replication console:

• Start and stop backup policies.

• Monitor session statistics.

• View created snapshots and image-level backups.

• Restore entire Azure VMs to Microsoft Azure.

• Restore SQL databases to Microsoft Azure SQL.

• Restore entire Azure VMs as EC2 instances to Amazon EC2.

• Restore entire Azure VMs as VM instances to Google Cloud Platform.

• Perform Instant Recovery to restore entire Azure VMs as VMs into VMware vSphere or Hyper -V
environment.

• Restore entire Azure VMs as VMs into Nutanix AHV clusters.

• Restore guest OS files and folders of Azure VMs.

• Export Azure VM disks in the VMDK, VHD or VHDX formats.

7 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Backup Infrastructure Components
After you integrate Veeam Backup for Microsoft Azure with Veeam Backup & Replication, the backup
infrastructure will consist of the following components:

1. Veeam Backup & Replication

An application where you can manage backup infrastructure components, perform restore from image -
level backups and snapshots of Microsoft Azure VMs, copy Azure VM backups to secondary repositories
and tapes, and perform other operations.

2. Azure P lug-in for Veeam Backup & Replication

An installer component that deploys services required for integration with Veeam Backup for Microsoft
Azure.

3. Veeam Backup for Microsoft Azure appliance

The main component that performs backup and restore operations in the Microsoft Azure environment.

In the Veeam Backup & Replication console, you can connect to an existing Veeam Backup for Microsoft
Azure appliance or launch the deployment of a new one.

4. W orker instances

Temporary Linux-based Microsoft Azure VMs that are created by Veeam Backup for Microsoft Azure to
perform backup and restore operations. A worker instance is deployed for each VM included in the running
backup policy or restore process. After the backup or restore process completes, the worker instance is
immediately removed.

5. Blob storage backup repositories

Microsoft Azure Plug-in for Veeam Backup & Replication supports two types of Blob storage backup
repositories:

a. Sta ndard backup repositories

A folder in a blob container where Veeam Backup for Microsoft Azure stores image -level backups of
Azure VM and SQL databases. For more information on standard backup repositories, see Adding
Backup Repositories.

b. Archive repositories

A folder in a blob container where Veeam Backup for Microsoft Azure stores archive backups of Azure
VMs and SQL databases. For more information on archive, see Adding Backup Repositories.

8 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
 6. Ad d itional repositories a nd tape devic es

Additional repositories are any backup repositories where Veeam Backup & Replication copies the Azure
VM backups if you perform backup copy. For more information on backup repositories, see the Backup
repositories section in the Veeam Backup & Replication User Guide. You can also use tape devices to store
copies of your backup files. For more information on how to back up to tapes, see the Machines Backup to
Tape section in the Veeam Backup & Replication User Guide.

What You Do Next

Deploy and Configure Infrastructure

9 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Planning and Preparation
Before you start using Microsoft Azure Plug-in for Veeam Backup & Replication, make sure that the backup
infrastructure components meet system requirements, all required ports are open, and user accounts that you
plan to use have the required permissions.

10 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
System Requirements
Before you start using Microsoft Azure Plug-in for Veeam Backup & Replication, consider the following
requirements.

Hardware and Software Requirements

For the software that must be installed on the machine where Microsoft Azure Plug -in for Veeam Backup &
Replication is installed, see the Veeam Cloud Plug-Ins section in the Veeam Backup & Replication User Guide.

Since Microsoft Azure Plug-in for Veeam Backup & Replication is installed on a Veeam Backup & Replication
server, system requirements for the plug-in are similar to the requirements for the Veeam Backup & Replication
server. For more information on system requirements for the Veeam Backup & Replication server and other
infrastructure components, see the System Requirements section in the Veeam Backup & Replication User
Guide.

Veeam Backup & Replication

The following table shows versions of Veeam Backup & Replication that are supported for integration:

Microsoft Azure Plug-in for Veeam Backup & Replication version

Veeam Backup & Replication
version

11.0.2.x 11.0.0.x

11.0.3.x 11.0.1.x

Veeam Backup for Microsoft Azure

The following table shows versions of Veeam Backup for Microsoft Azure that are supported for integration:

Microsoft Azure Plug-in for Veeam Backup for Microsoft Azure version
Veeam Backup & Replication
version

11.0.2.x 2.x

11.0.3.x 3.x

Veeam Backup for Nutanix AHV

Microsoft Azure Plug-in for Veeam Backup & Replication supports restore to Veeam Backup for Nutanix AHV
version 2.1 and later.

11 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Requirements for Azure Services
The Veeam Backup for Microsoft Azure appliance and worker instances must have outbound internet access to a
number of Microsoft Azure services. For the list of services, see the Azure Services section in the Veeam Backup
for Microsoft Azure User Guide.

12 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Used Ports
As Microsoft Azure Plug-in for Veeam Backup & Replication is installed on the machine with Veeam Backup &
Replication, it uses the same ports as those described in the Used Ports section in the Veeam Backup &
Replication User Guide. In addition, Microsoft Azure Plug-in for Veeam Backup & Replication also uses ports
listed in the table.

NOTE

During installation, Veeam Backup & Replication and Veeam Backup for Microsoft Azure autom atically
create firewall rules for the required ports to allow communication for the application components.

From To P rotocol P ort Notes

Veeam Veeam TCP 443 Port used for communication with Azure
Ba ckup & Backup for and Veeam Backup for Microsoft Azure.
Rep lication Microsoft
server Azure
appliance,
Azure
services

Veeam TCP 6172 Port used by Microsoft Azure Plug-in for

Backup & Veeam Backup & Replication to connect
Replication to a component that enables
server communication with the Veeam Backup &
Replication database.

Veeam Veeam TCP 20443 Port used to connect to Microsoft Azure

Ba ckup & Backup & Plug-in for Veeam Backup & Replication.
Rep lication Replication
console and server
Veeam ONE
server

For ports required for Veeam Backup for Microsoft Azure, see the Ports section in the Veeam Backup for
Microsoft Azure User Guide.

13 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Required Permissions
Make sure user accounts that you plan to use have permissions described in this section.

Veeam Backup & Replication User Account Permissions

The user account that you plan to use when installing and working with Veeam Backup & Replication must have
permissions described in the Installing and Using Veeam Backup & Replication section in the Veeam Backup &
Replication User Guide.

If you plan to connect to a tenant using Remote Access Console, you must run the console as administrator.

Azure User Account and Service Account Permissions

To deploy or connect to a Veeam Backup for Microsoft Azure appliance, you specify an Azure user account. The
Azure user account must be registered in the Global or Government region. Note that the Government region is
supported starting from Microsoft Azure Plug-in for Veeam Backup & Replication version 11.0.2.167. This
account must have the following permissions:

• If you add an existing account, check the permissions listed in the Veeam Backup for Microsoft Azure User
Guide.

• If you create a new account, Veeam Backup & Replication assigns this account the Owner and Key Vault
Crypto User roles. These roles are sufficient to perform further operations.

To perform data protection and disaster recovery operations, Microsoft Azure Plug -in for Veeam Backup &
Replication uses an Azure service account.

If you deploy a new Veeam Backup for Microsoft Azure appliance from the Veeam Backup & Replication console,
the Default service account is created automatically. This service account is granted all the necessary
permissions to perform operations within the Azure user account — to back up any VMs within the account, to
store backups in Blob storage containers, and so on.

If you connect to an existing appliance or upgrade an already added appliance, make sure that the service
accounts added to the appliance have the following roles and permissions assigned:

• The Contributor role. For more information on built-in roles, see Microsoft Docs.

• The following custom roles: Veeam Service Account and Veeam Repository Account.

• If you have disabled the Users can register applications option on the Microsoft Azure portal, make sure
that the service account has the Application Developer , Application Administrator or Global Administrator
role. For more information on role permissions, see Microsoft Docs.

• To be able to use Azure Key Vaults and keys, the service account must have the following permissions:

Microsoft.KeyVault/vaults/keys/read,
Microsoft.KeyVault/vaults/keys/versions/read,
Microsoft.KeyVault/vaults/keys/encrypt/action,
Microsoft.KeyVault/vaults/keys/decrypt/action

For more information on how to add service accounts and which permissions are required when adding them,
see the Adding Azure Service Account section in the Veeam Backup for Microsoft Azure User Guide.

14 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Azure SQL Account
The Azure SQL account that you plan to use when restoring Microsoft Azure databases must have administrative
permissions on Azure SQL servers or Azure SQL Manag ed Instances to which you restore databases.

AWS User Account Permissions

The AWS user account that you plan to use when restoring Azure VMs to Amazon EC2 must have permissions
described in the AWS IAM User Permissions section of the Veeam Backup & Replication User Guide.

Google Cloud IAM Service Account Permissions

The IAM service account that you plan to use to connect to Google Cloud Platform must be granted roles
described in the Google Cloud Platform IAM User Permissions section in the Veeam Backup & Replication User
Guide.

Permissions for Virtualization Servers and Hosts

If you plan to copy backups to on-premises repositories, to perform restore to VMware vSphere or Microsoft
Hyper-V, or to perform other tasks related to virtualization servers or hosts, you must check that the user
account specified for these servers and host has the required permissions. These permissions are listed in the
Using Virtualization Servers and Hosts section in the User Guide for VMware vSphere and in the Using
Virtualization Servers and Hosts section in the User Guide for Microsoft Hyper-V.

15 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Licensing
If you want to use capabilities provided by Microsoft Azure Plug-in for Veeam Backup & Replication, you must
have a valid license installed on Veeam Backup & Replication. If you install Veeam Backup & Replication without
a license, the Microsoft Azure Plug-in for Veeam Backup & Replication capabilities are not available.

In this section, you will see the terminology of Veeam Backup & Replication licensing and Veeam Backup for
Microsoft Azure editions. For more information, see the following guides:

• To learn about licensed objects and license types in Veeam Backup & Replication, see the Licensing section
in the Veeam Backup & Replication User Guide.

• To learn about editions of Veeam Backup for Microsoft Azure, see the Licensing section in the Veeam
Backup for Microsoft Azure User Guide.

16 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
License Limitations
Before installing Microsoft Azure Plug-in for Veeam Backup & Replication, mind the following limitations for
Veeam Backup & Replication licenses.

Not Supported Licenses

The functionality of Microsoft Azure Plug-in for Veeam Backup & Replication is NOT supported:

• If Veeam Backup & Replication uses the Veeam Cloud Connect service provider license

• In the Community Edition of Veeam Backup & Replication

Limitations for Veeam Backup & Replication Licensed by

Sockets
If you use Veeam Backup & Replication with a Perpetual per-socket license and you want to connect a Veeam
Backup for Microsoft Azure appliance to the Veeam Backup & Replication infrastructure, you must install an
additional Perpetual per-instance license or a subscription license. When you install an additional license, the
new license merges with the existing Perpetual per-socket license. For details on the merging process, see the
Merging Licenses section in the Veeam Backup & Replication User Guide.

If you do not install an additional Perpetual per-instance license or a subscription license, you will be able to use
one free license instance per each socket (but maximum 6 free instances for all sockets). After you exceed the
limit of free instances, Veeam Backup for Microsoft Azure backup policies for workloads without license
instances will start to fail.

To obtain an additional license, contact a Veeam sales representative at Sales Inquiry.

17 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Licensing for Integration with Veeam Backup for
Microsoft Azure
A workload (Azure VM or SQL database) is considered protected if it has a backup or snapshot created by a
backup policy in the last 31 days. The number of license instances that a protected workload consumes depends
on the workload type and product edition. For details, see Veeam Licensing Policy.

NOTE

Manual creation of snapshots and SQL backups does not require license instances. For more information on
how to create snapshots and backups manually, see the Creating Snapshots Manually and Creating Azure
SQL Backups Manually sections in the Veeam Backup for Microsoft Azure User Guide.

When you add a Veeam Backup for Microsoft Azure appliance to the Veeam Backup & Replication infrastructure,
there are two possible license scenarios:

• Connecting to an existing Veeam Backup for Microsoft Azure appliance

If you connect to an existing Veeam Backup for Microsoft Azure appliance, the BYOL license installed on
the Veeam Backup for Microsoft Azure appliance becomes invalid. Protected workloads will start
consuming license instances from the Veeam Backup & Replication license after the policies run on the
connected appliance.

If you remove the Veeam Backup for Microsoft Azure appliance from Veeam Backup & Replication
infrastructure, Veeam Backup & Replication will stop counting backed -up workloads. Veeam Backup for
Microsoft Azure continues using the license that was used before you added Veeam Backup for Microsoft
Azure to the Veeam Backup & Replication infrastructure.

• Dep loying a new Veeam Backup for Microsoft Azure appliance

If you deploy a new Veeam Backup for Microsoft Azure appliance in the Veeam Backup & Replication
console, protected workloads start consuming instances from the Veeam Backup & Replication license.

If you remove the Veeam Backup for Microsoft Azure appliance from Veeam Backup & Replication
infrastructure, Veeam Backup & Replication stops counting backed -up workloads and Veeam Backup for
Microsoft Azure switches to the Free license with 10 available instances. To back up more than 10
instances, you must install a BYOL license on the Veeam Backup for Microsoft Azure appliance. To see how
to install a new BYOL license, see the Licensing section in the Veeam Backup for Microsoft Azure User
Guide.

Licensing When Connection to Veeam Backup & Replication is

Lost
Veeam Backup for Microsoft Azure stores information about workloads licensed by Veeam Backup & Replication.
If the connection between Veeam Backup for Microsoft Azure appliance and Veeam Backup & Replication server
is lost, you are still able to back up the already licensed workloads. However, you are not able to back up new
workloads until the connection with Veeam Backup & Replication is restored.

Note that the loss of connection with Veeam Backup & Replication does not affect restore processes and manual
creation of snapshots and SQL backups.

18 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Managing Licensed Workloads
After you add a Veeam Backup for Microsoft Azure appliance to the Veeam Backup & Replication infrastructure,
you can monitor the number of protected workloads in the Veeam Backup & Replication console. You can also
revoke licenses from protected workloads if you do not want to protect these workloads.

Monitoring Licensed Workloads

To monitor protected workloads, do the following:

1. In the Veeam Backup & Replication console, expand the main menu and select License.

2. In the License Information window, switch to the Instances tab.

You will see the following details:

• Ty p e — type of protected workloads.

o Cloud VMs — protected VMs.

o Cloud databases — protected SQL databases.

• Count — number of workloads.

• Multiplier — number of license instances one workload consumes.

• Instances — total number of the consumed license instances.

19 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Revoking License Instances
You can revoke licenses from protected workloads and reapply them to other objects that you plan to protect.
License revoking can be helpful, for example, if a licensed workload goes out of service or you do not want to
protect it anymore.

To revoke a license, do the following:

1. From the main menu, select License.

2. In the License Information window, open the Instances tab and click Ma nage.

3. In the displayed window, select a protected workload and click Revoke. Veeam Backup & Replication will
revoke the license from the selected object, and the license will be freed for other worloads that you want
to protect.

20 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Deployment and Configuration
To configure integration of Veeam Backup & Replication with Veeam Backup for Microsoft Azure, complete the
following steps:

1. Install or upgrade Veeam Backup & Replication.

Install or upgrade Veeam Backup & Replication up to the required version. Microsoft Azure Plug-in for
Veeam Backup & Replication will be automatically installed along with Veeam Backup & Replication.

For more information on how to install or upgrade Veeam Backup & Replication, see the Installing Veeam
Backup & Replication and Upgrading Veeam Backup & Replication sections in the Veeam Backup &
Replication User Guide.

2. Ad d a Veeam Backup for Microsoft Azure appliance.

You have two options for adding a Veeam Backup for Microsoft Azure appliance:

o If you have already installed Veeam Backup for Microsoft Azure, you can connect an existing Veeam
Backup for Microsoft Azure appliance to the Veeam Backup & Replication infrastructure. For more
information, see Connecting to Existing Veeam Backup for Microsoft Azure Appliances.

o If you have not installed Veeam Backup for Microsoft Azure, you can deploy a new Veeam Backup for
Microsoft Azure appliance from the Veeam Backup & Replication console. In this case, Veeam Backup
& Replication deploys Veeam Backup for Microsoft Azure on an Azure VM automatically. For more
information on how to deploy a new appliance, see Deploying New Veeam Backup for Microsoft Azure
Appliances.

3. [For a newly added Veeam Backup for Microsoft Azure appliance, optional] Configure worker instances.

After you add a new Veeam Backup for Microsoft Azure appliance, open its Web UI component and
configure network settings for worker instances. For more information on worker instances and how to
configure them, see the Worker Instances section in the Veeam Backup for Microsoft Azure User Guide.

4. Ad d standard backup repositories.

Adding standard backup repositories may be optional or required:

o If you connect to an existing Veeam Backup for Microsoft Azure appliance, you can omit adding
standard repositories since all configured repositories are added to the Veeam Backup & Replication
infrastructure automatically. However, you can add standard backup repositories if required.

o If you deploy a new Veeam Backup for Microsoft Azure appliance, you may require to add standard
backup repositories — but only in case you want backup policies to produce image-level backups of
VMs or backups of SQL databases.

For more information on how to deploy standard backup repositories, see Deploying Standard Backup
Repositories.

5. [Op tional] Add archive repositories

Add archive repositories if you want to store image-level backups of Azure VMs and SQL databases for
long periods of time at lower costs. For more information on how to add archive repositories, see
Deploying Archive Backup Repositories.

21 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Installing Plug-In
Microsoft Azure Plug-in for Veeam Backup & Replication is installed automatically while you install or upgrade
Veeam Backup & Replication. For the compatibility table of Veeam Backup & Replication and Microsoft Azure
Plug-in for Veeam Backup & Replication versions, see System Requirements.

For more information on how to install or upgrade Veeam Backup & Replication, see the Installing Veeam
Backup & Replication and Upgrading Veeam Backup & Replication sections in the Veeam Backup & Replication
User Guide.

What You Do Next

Add Veeam Backup for Microsoft Azure Appliances

22 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft Azure Guide
Upgrading Plug-In
If you want to upgrade your Microsoft Azure Plug-in for Veeam Backup & Replication to a new version, you do
not have to uninstall the previous plug-in version. You only need to upgrade Veeam Backup & Replication as
described in the Upgrading Veeam Backup & Replication section in the Veeam Backup & Replication User Guide.
During the installation process, Veeam Backup & Replication will detect the previous plug -in version and will
upgrade it. For the compatibility table of Veeam Backup & Replication and Microsoft Azure Plug-in for Veeam
Backup & Replication versions, see System Requirements.

After you upgrade Microsoft Azure Plug-in for Veeam Backup & Replication, you must also upgrade your
appliances in the Veeam Backup & Replication console. For more information on how to upgrade appliances, see
Upgrading Appliances.

23 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft Azure Guide
Adding Veeam Backup for Microsoft Azure
Appliances
After you install Microsoft Azure Plug-in for Veeam Backup & Replication, you must add Veeam Backup for
Microsoft Azure appliances to the Veeam Backup & Replication infrastructure. You have two options:

• Connect to existing Veeam Backup for Microsoft Azure appliances.

If you have already deployed Veeam Backup for Microsoft Azure appliances, you can add these appliances
to the Veeam Backup & Replication infrastructure.

• Deploy new Veeam Backup for Microsoft Azure appliances.

If you have not deployed Veeam Backup for Microsoft Azure appliances beforehand, you can deploy them
from the Veeam Backup & Replication console. In this case, Veeam Backup & Replication will connect to
Microsoft Azure and deploy new instances of Veeam Backup for Microsoft Azure. These Veeam Backup for
Microsoft Azure appliances will be added to the Veeam Backup & Replication infrastructure automatically.

NOTE

You must add a Veeam Backup for Microsoft Azure appliance to the infrastructure of only one Veeam
Backup & Replication server. If you add the appliance to another Veeam Backup & Replication server, the
synchronization between the appliance and the first Veeam Backup & Replication server will be stopped,
and the appliance will be displayed as unavailable. The appliance will start consuming licens e units from
the license of the last Veeam Backup & Replication server to which the appliance was added.

24 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Connecting to Existing Veeam Backup for
Microsoft Azure Appliances
To connect to an existing appliance, do the following:

1. Launch the New Veeam Backup for Microsoft Azure Appliance wizard

2. Specify a deployment mode

3. Specify a Microsoft Azure account

4. Specify a Microsoft Azure subscription and appliance location

5. Select a Microsoft Azure VM

6. Specify a connection type

7. Specify credentials

8. Configure Blob storage backup repositories

9. Wait for the appliance to be added to the infrastructure

10. Finish working with the wizard

NOTE

If you reconnect an appliance from one Veeam Backup & Replication server to another, we recommend you
to remove the appliance from the first server and only then add the appliance to another server. If you do
not remove the appliance, it will become unavailable on the first server — you will see outdated data and
will not be able to perform any operations with the data.

25 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft Azure Guide
Step 1. Launch New Veeam Backup for Microsoft Azure
Appliance Wizard
To launch the New Veeam Backup for Microsoft Azure Appliance wizard, do one of the following:

• Open the Ba ckup Infrastructure view. Click Ad d Server on the ribbon. In the Ad d Server window, select
Veeam Backup for Microsoft Azure.

• Open the Ba ckup Infrastructure view. In the inventory pane, right-click the Ma naged Servers node and
select Ad d Server. In the Ad d Server window, select Veeam Backup for Microsoft Azure.

• [If Veeam Backup for Nutanix AHV and all cloud plug -ins are installed] Open the Ba ckup Infrastructure
view. Click Ad d Server on the ribbon. In the Ad d Server window, click Veeam cloud-native backup
a p pliance > Veeam Backup for Microsoft Azure.

26 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 2. Specify Deployment Mode
At the Dep loyment Mode step of the wizard, select Connect to an existing appliance.

If you want to deploy a new Veeam Backup for Microsoft Azure appliance, see Deploying New Veeam Backup for
Microsoft Azure Appliances.

27 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 3. Specify Azure Account Settings
At the Account step of the wizard, select credentials of the Microsoft Azure account in which your Veeam
Backup for Microsoft Azure appliance is deployed. The user account must have permissions listed in the
Required Permissions section.

If you have not added credentials beforehand, click the Ma nage accounts link or the Ad d button to add the
necessary credentials. Then perform the initial configuration as described in steps 3–7 of the Adding Microsoft
Azure Accounts section in the Veeam Backup & Replication User Guide.

IMP ORTANT

Mind the following:

• Microsoft Azure Stack accounts are not supported.

• Microsoft Azure accounts with multi-factor authentication (MFA) are not supported.

28 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 4. Specify Subscription and Region
At the Sub scription step of the wizard, select the Microsoft Azure subscription that is used to manage resources
and costs for your Veeam Backup for Microsoft Azure appliance, and select the region in which the appliance
resides.

29 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 5. Select Azure VM
At the Virtual Machine step of the wizard, select the Microsoft Azure VM where Veeam Backup for Microsoft
Azure is deployed, that is, the Veeam Backup for Microsoft Azure appliance, and specify a description for future
reference.

IMP ORTANT

The network security group in which Veeam Backup for Microsoft Azure appliance locates must allow the
Veeam Backup & Replication server to access the appliance using HTTPS. For more information on how to
configure access, see Microsoft Docs.

30 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 6. Specify Connection Type
At the Connection Type step of the wizard, choose whether the Veeam Backup for Microsoft Azure appliance is
connected directly to the internet or located in a private network:

• If the Veeam Backup for Microsoft Azure appliance is connected to the internet, and you want the Veeam
Backup & Replication server to be connected to the Veeam Backup for Microsoft Azure appliance also
through the internet, select Direct connection. In this case, the Veeam Backup & Replication server will
detect the public or static IP of the Veeam Backup for Microsoft Azure appliance automatically.

• If the Veeam Backup for Microsoft Azure appliance is located in a private network and the Veeam Backup
& Replication server is also located in the same private network, or you want the Veeam Backup &
Replication server to be connected to the Veeam Backup for Microsoft Azure appliance over Veeam PN,
select P rivate network. In the Sp ecify the IP address or DNS name of the appliance field, specify the
private IP or DNS name of the Veeam Backup for Microsoft Azure appliance.

31 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 7. Specify Credentials
At the Credentials step of the wizard, specify credentials of a user account that has administrative privileges on
the Veeam Backup for Microsoft Azure appliance. This can be the administrator account created during the
installation of Veeam Backup for Microsoft Azure or a user account created during further work with Veeam
Backup for Microsoft Azure with Portal Administrator role assigned.

If you have not added the credentials beforehand, click the Ma nage accounts link or the Ad d button to add the
necessary credentials. For more information on adding credentials, see the Credentials Manager section in the
Veeam Backup & Replication User Guide.

IMP ORTANT

Multi-factor authentication (MFA) is not supported. For more information on where to check MFA settings,
see the Configuring MFA Settings section in the Veeam Backup for Microsoft Azure User Guide.

If you try to add an appliance that runs an outdated version of Veeam Backup for Microsoft Azure, Veeam
Backup & Replication will display a warning notifying that the appliance must be upgraded. Click OK to upgrade
the appliance to the latest version of Veeam Backup for Microsoft Azure that is compatible with the current
version of Microsoft Azure Plug-in for Veeam Backup & Replication.

When you add a Veeam Backup for Microsoft Azure appliance, Veeam Backup & Replication saves in the
configuration database a thumbprint of the web certificate installed on the appliance. When Veeam Backup &
Replication connects to the appliance, it uses the saved thumbprint to verify the appliance identity and to avoid
the man-in-the-middle attack. For details on managing web certificates, see the Working with Certificates
section in the Veeam Backup for Microsoft Azure User Guide.

If the certificate installed on the Veeam Backup for Microsoft Azure appliance is not trusted, Veeam Backup &
Replication will display a warning. In the warning window, you can do the following:

• Click View for the detailed information about the certificate.

• Click Continue to trust the certificate.

• Click Ca ncel if you do not trust the certificate. However, in this case you will not be able to connect to the
appliance.

32 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft Azure Guide
 NOTE

When you update a certificate on an appliance, this appliance becomes unavailable in the Veeam Backup &
Replication console. To make the appliance available again, acknowledge the new certificate at the
Credentials step of the E d it Veeam Backup for Microsoft Azure Appliance wizard. For more information on
how to launch the wizard, see Editing Appliance Settings.

33 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft Azure Guide
Step 8. Configure Repositories
The Rep ositories step of the wizard displays all repositories added to the Veeam Ba ckup for Microsoft Azure
infrastructure. For standard backup repositories, specify credentials to access the repositories and a gateway
server to be used. For archive repositories, you do not need to specify credentials and a gateway server because
there is no direct connection between Veeam Backup & Replication and archive repositories. They are
synchronized from Veeam Backup for Microsoft Azure.

To configure credential and a gateway server, do the following:

1. In the Rep ositories list, select a standard backup repository to which you want to configure access and
click E d it.

2. In the Rep ository window, do the following:

a. From the Credentials drop-down list, select credentials of a Microsoft Azure storage account whose
type is supported and that has permissions to access the standard backup repository resources. For
more information on permissions, see the Repository Account section of the Veeam Backup for
Microsoft Azure User Guide.

If you have not added credentials beforehand, click the Ma nage cloud a ccounts link or the Ad d button
to add the necessary credentials. For more information on adding credentials, see the Microsoft Azure
Storage Accounts section in the Veeam Backup & Replication User Guide.

IMP ORTANT

If you do not specify credentials for a standard backup repository, Microsoft Azure Plug -in for
Veeam Backup & Replication will stop periodic rescan of the storage. This can help you reduce
data transfer costs since Microsoft Azure Plug-in for Veeam Backup & Replication will send
fewer requests to Microsoft Azure.

However, keep in mind that in this case you will only be able to view, manage backup policies
and restore Azure VMs to Microsoft Azure — activities described in the Data Protection and Data
Recovery sections will not be available.

b. From the Use the following gateway server for the Internet access drop-down list, select a gateway
server that will be used to access the storage. If you do not specify the credentials, the Veeam Backup
& Replication server is used as a gateway server.

The gateway server caches data when you copy backups and restore application items. The gateway
server helps you decrease the amount of traffic being sent over the network and reduce data transfer
costs. For more information on caching data, see the Cache section in the Veeam Backup & Replication
User Guide.

By default, the role of a gateway server is assigned to the Veeam Backup & Replication server. If the
Veeam Backup & Replication server resides in a location that differs from the location where your
Veeam Backup for Microsoft Azure resides, choose a server that is located close to the Veeam Backup
for Microsoft Azure appliance. You can choose any Microsoft Windows or Linux server that is added to
your Veeam Backup & Replication infrastructure and has internet connection. Note that the server
must be added to the Veeam Backup & Replication infrastructure beforehand. For more information
on how to add a server, see the Virtualization Servers and Hosts section in the Veeam Backup &
Replication User Guide.

34 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
 a. If data in the standard backup repository is encrypted with a password, select the Use the following
p a ssword for encrypted backups check box. From the drop-down list, select the password that must
be used to decrypt the data. In this case, Veeam Backup & Replication will automatically decrypt
backup files stored in this repository.

If you have not added the password beforehand, click the Ma nage passwords link or the Ad d button
to add the necessary password. For more information on adding passwords, see the Creating
Passwords section in the Veeam Backup & Replication User Guide.

If you do not specify the decryption password, you can do it later. For more information, see
Decrypting Image-Level Backups.

If data in the standard backup repository is encrypted with a Key Vault key, Micros oft Azure Plug-in
for Veeam Backup & Replication shows the used key but does not allow changing it. You can change
the key in the appliance Web UI as described in the Editing Backup Repository Settings section in the
Veeam Backup for Microsoft Azure User Guide.

After you finish working with the wizard, all Blob storage backup repositories will be displayed on the Ba ckup
Infrastructure view, under the E x ternal Repositories node. For more information on where backups are shown,
see Viewing Snapshots and Backups.

NOTE

If a standard backup repository is already added to the infrastructure of another Veeam Backup &
Replication server, you will be prompted to claim the ownership of this storage. For more information on
taking the ownership, see the Ownership section in the Veeam Backup & Replication User Guide.

35 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 9. Apply Settings
At the Ap p ly step of the wizard, wait until Veeam Backup & Replication applies the settings. Click Nex t to
complete the procedure of adding the appliance.

36 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 10. Finish Working with Wizard
At the Summary step of the wizard, review details of the added Veeam Backup for Microsoft Azure appliance
and click Finish.

If you want to configure worker instances, manage accounts or other settings that are not available in the
Veeam Backup & Replication console, click the b a ckup appliance console link. For more information on what you
can do in the Veeam Backup for Microsoft Azure UI, see the Veeam Backup for Microsoft Azure User Guide.

37 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Deploying New Veeam Backup for Microsoft
Azure Appliances
To deploy a new Veeam Backup for Microsoft Azure appliance, do the following:

1. Launch the New Veeam Backup for Microsoft Azure Appliance wizard

2. Specify a deployment mode

3. Specify Azure account settings

4. Specify a Microsoft Azure subscription

5. Specify an Azure VM

6. Specify network resources

7. Specify IP settings

8. Specify guest OS credentials

9. Wait for the appliance to be added to the infrastructure

10. Finish working with the wizard

38 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 1. Launch New Veeam Backup for Microsoft Azure
Appliance Wizard
To launch the New Veeam Backup for Microsoft Azure Appliance wizard, do one of the following:

• Open the Ba ckup Infrastructure view. Click Ad d Server on the ribbon. In the Ad d Server window, select
Veeam Backup for Microsoft Azure.

• Open the Ba ckup Infrastructure view. In the inventory pane, right-click the Ma naged Servers node and
select Ad d Server. In the Ad d Server window, select Veeam Backup for Microsoft Azure.

• [If Veeam Backup for Nutanix AHV and all cloud plug -ins are installed] Open the Ba ckup Infrastructure
view. Click Ad d Server on the ribbon. In the Ad d Server window, click Veeam cloud-native backup
a p pliance > Veeam Backup for Microsoft Azure.

39 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 2. Specify Deployment Mode
At the Dep loyment Mode step of the wizard, select Dep loy a new appliance.

If you want to connect to an existing Veeam Backup for Microsoft Azure appliance, see Adding Existing Veeam
Backup for Microsoft Azure Appliances.

40 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 3. Specify Azure Account Settings
At the Account step of the wizard, select credentials of an Azure account that will be used to access resources.
Microsoft Azure Plug-in for Veeam Backup & Replication will use this Azure account to deploy the Veeam
Backup for Microsoft Azure appliance. The user account must have permissions listed in the Required
Permissions section.

If you have not added credentials beforehand, click the Ma nage accounts link or the Ad d button to add the
necessary credentials. Then perform the initial configuration as described in the Adding Microsoft Azure
Accounts section (steps 3–7) if you want to add a Microsoft Azure account.

IMP ORTANT

Mind the following:

• Microsoft Azure Stack accounts are not supported.

• Microsoft Azure accounts with multi-factor authentication (MFA) are not supported.

41 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 4. Specify Subscription
At the Sub scription step of the wizard, specify a Microsoft Azure subscription, Microsoft Azure region and
resource group settings for an Azure VM where Veeam Backup for Microsoft Azure will be deployed:

1. From the Sub scription drop-down list, select a Microsoft Azure subscription. Microsoft Azure Plug -in for
Veeam Backup & Replication will use this subscription to manage resources and costs of a VM where the
Veeam Backup for Microsoft Azure will be deployed.

For a subscription to be displayed in the Sub scription list, it must be created in advance and associated to
the Azure account as described in Microsoft Docs.

2. From the Da ta center drop-down list, select a Microsoft Azure region in which the Veeam Backup for
Microsoft Azure appliance will reside.

3. From the Resource group drop-down list, select a resource group. For a resource group to be displayed in
the Resource group drop-down list, it must be created in advance as described in Microsoft Docs.

To create a new group, select ( create new). A veeam-<VMname>-rg<GUID> resource group will be
created.

42 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 5. Specify Azure VM
At the Virtual Machine step of the wizard, specify a name and description for an Azure VM where Veeam Backup
for Microsoft Azure will be deployed. Note that the VM name that you specify must follow Azure naming rules.
Otherwise, the deployment may fail. For more information on the naming rules, see Microsoft Docs.

43 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 6. Specify Network Resources
At the Networking step of the wizard, specify the network settings of an Azure VM where Veeam Backup for
Microsoft Azure will be deployed:

1. From the Virtual network drop-down list, select an Azure virtual network to which the Veeam Backup for
Microsoft Azure appliance will be connected. To create a new Azure virtual network, select ( create new).

2. From the Sub net drop-down list, select a subnet to which the Veeam Backup for Microsoft Azure
appliance will be connected. To create a new subnet, select ( create new).

For a subnet to be displayed in the drop-down list, it must be created in advance as described in Microsoft
Docs.

3. From the Network security group drop-down list, select a network security group to which the Veeam
Backup for Microsoft Azure appliance will be connected. To create a new security group, select ( create
new) .

For a security group to be displayed in the drop-down list, it must be created in advance as described in
Microsoft Docs.

IMP ORTANT

If you select an existing security group, make sure it has a security rule that allows the Veeam
Backup & Replication server to access the Veeam Backup for Microsoft Azure appliance through
HTTPS. For more information on how to create security rules, see Microsoft Docs.

4. [If you select to create a new security group] In the Ba ckup server public IP address field, specify a public
IP address or a scope of IP addresses in CIDR notation that will be allowed to access the Veeam Backup for
Microsoft Azure appliance.

Veeam Backup for Microsoft Azure will create a security rule for the specified IP addresses. Note that the
Veeam Backup & Replication server IP address must fall into the specified IP addresses.

44 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 7. Specify IP Settings
At the IP Assignment step of the wizard, select a type of the IP address that you want assign to the Veeam
Backup for Microsoft Azure appliance:

• To assign a dynamic IP to the Veeam Backup for Microsoft Azure appliance, select Dy naimc IP address. You
can either select an existing dynamic IP address from the drop -down list, or create a new dynamic IP. To
create a new dynamic IP, select ( create new).

• To assign a static IP address to the Veeam Backup for Microsoft Azure appliance, select Sta tic IP address.
You can either select an existing static IP address from the drop -down list, or create a new static IP. To
create a new static IP, select ( create new).

For an IP to be displayed in the list of available static or dynamic IPs, it must be added as described in Microsoft
Docs.

45 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 8. Specify Credentials
At the Guest OS step of the wizard, specify credentials for the Azure VM where Veeam Backup for Microsoft
Azure appliance will be deployed:

1. From the Create the following administrator credentials drop-down list, select credentials that will be
used to authenticate against the Veeam Backup for Microsoft Azure appliance.

If you have not added credentials beforehand, click the Ma nage accounts link or the Ad d button to add the
necessary credentials. For more information on adding credentials, see the Cloud Credentials Manager
section in the Veeam Backup & Replication User Guide.

2. In the Use the following key pair field, select a key pair that will be used to authenticate against the
Veeam Backup for Microsoft Azure appliance. If you have not added a key pair beforehand, you can create
it.

To create a new key pair:

a. Click Ad d .

b. In the New Key Pair window, specify the following settings:

i. In the Na me section, specify a name for the key pair.

The key pair name must be between 1 and 80 characters in length. It must not contain special
characters \/""[]:|<>+=;,?*@&, whitespace, or begin with '_' or end with '.' or '-' . It
must not contain only numbers.

ii. In the P a th section, specify the path to the folder where the private key will be located.

The key pair will be created in the resource group that you have specified a t the Subscription step of the
wizard. If you have selected to create a new resource group, Microsoft Azure Plug -in for Veeam Backup &
Replication will create the VeeamSSHKeys resource group and will store the key pair there.

46 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 9. Apply Settings
At the Ap p ly step of the wizard, wait until Veeam Backup & Replication applies the settings and click Nex t to
complete the appliance deployment.

47 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 10. Finish Working with Wizard
At the Summary step of the wizard, review the Veeam Backup for Microsoft Azure appliance configuration
settings and click Finish.

A new Veeam Backup for Microsoft Azure is configured without standard backup repositories. If you want to
deploy a standard repository on a new Veeam Backup for Microsoft Azure appliance, select the Op en the Azure
Blob backup repository creation wizard when I click Finish check box. For more information, see the Adding
Standard Backup Repositories section.

NOTE

After you deploy a new Veeam Backup for Microsoft Azure appliance, you need to configure network
settings for worker instances in the appliance Web UI component. For more information on worker
instances and how to configure them, see the Worker Instances section in the Veeam Backup for Microsoft
Azure User Guide.

48 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Managing Veeam Backup for Microsoft
Azure Appliances
To view all added Veeam Backup for Microsoft Azure appliances, open the Ba ck up Infrastructure view and
navigate to Ma naged Servers > Microsoft Azure. The working area displays the full list of configured appliances.
Here, you can edit appliance settings, rescan appliance data, remove appliances from the Veeam Backup &
Replication infrastructure, or open Web UI component of an appliance right from the Veeam Backup &
Replication console.

49 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Viewing Snapshots and Backups
Available backups and snapshots are displayed under subnodes of the Ba ckups node in the Home view:

• The Sna pshots subnode shows cloud-native snapshots of all protected Microsoft Azure VMs.
In the working area, there is an <Appliance name> node. This node displays all snapshots to which your
appliance has access, but for which backup policies were removed.

For more information on how Veeam Backup for Microsoft Azure creates cloud -native snapshots, see the
Snapshot Chain section in the Veeam Backup for Microsoft Azure User Guide.

• The E x ternal Repository subnode shows image-level backups of VMs and backups of SQL databases stored
in standard backup repositories. Here, Veeam Backup & Replication marks decrypted backups with a
special icon ( ).

For more information on how Veeam Backup for Microsoft Azure creates backups, see the Backup Chain
section in the Veeam Backup for Microsoft Azure User Guide.

• The E x ternal Repository (Archive) subnode shows image-level backups stored in archive repositories.
These backups are automatically decrypted.

For more information on how Veeam Backup for Microsoft Azure creates archive backups, see the Archive
Backup Chain section in the Veeam Backup for Microsoft Azure User Guide.

• The E x ternal Repository (Encrypted) subnode shows encrypted image-level backups (backups stored in
encrypted Blob storage backup repositories) for which you did not specify the decryption password or the
specified password does not match the current password of the repository.

When you expand a node in the working area, the following icons describe which workloads are protected:

Icon P rotected Workload

Indicates that the protected workload is a VM.

Indicates that the protected workload is a SQL database.

50 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Editing Appliance Settings
To edit settings of a Veeam Backup for Microsoft Azure appliance, do the following:

1. Open the Ba ckup Infrastructure view.

2. In the inventory pane, select Ma naged Servers.

3. In the working area, select the appliance whose settings you want to edit, and click E d it Appliance on the
ribbon. Alternatively, right-click the appliance and select P rop erties.

4. Complete the wizard as described in the Connecting to Existing Veeam Backup for Microsoft Azure
Appliances section.

51 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Opening Appliance Web UI Component
If you want to access Veeam Backup for Microsoft Azure and configure options not available from the Veeam
Backup & Replication console, you can perform the necessary actions using the Web UI component of an
appliance.

To open the Web UI component of an Veeam Backup for Microsoft Azure appliance, do the following:

1. Open the Ba ckup Infrastructure view.

2. In the inventory pane, select Ma naged Servers.

3. In the working area, select the Veeam Backup for Microsoft Azure appliance whose Web UI component you
want to open, and click Op en Console on the ribbon. Alternatively, right-click the appliance and select
Op en console.

Veeam Backup & Replication will open a web browser and navigate you to the Veeam Backup for Microsoft
Azure URL. For more information on what you can do in the Web UI component, see the Veeam Backup for
Microsoft Azure User Guide.

52 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft Azure Guide
Upgrading Appliances
In the System Requirements section, you can see the compatibility table of Veeam Backup for Microsoft Azure
and Microsoft Azure Plug-in for Veeam Backup & Replication versions. To upgrade an appliance to the latest
version of Veeam Backup for Microsoft Azure that is compatible with the current version of Microsoft Azure
Plug-in for Veeam Backup & Replication, do the following:

1. Open the Ba ckup Infrastructure view.

2. In the inventory pane, select Ma naged Servers.

3. In the working area, select the Veeam Backup for Microsoft Azure appliance that you want to upgrade, and
click Up g rade appliance on the ribbon. Alternatively, right-click the appliance and select Up g rade.

Alternatively, you can edit appliance settings. At the Credentials step of the wizard, Veeam Backup &
Replication will prompt you to confirm the appliance upgrade. For more information on how to edit the settings,
see Editing Appliance Settings.

53 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Rescanning Appliances
If Veeam Backup for Microsoft Azure appliances become unavailable, for example, due to connectivity problems,
you can rescan the appliances. Note that the appliance rescan option is disabled for available Veeam Backup for
Microsoft Azure appliances.

To rescan a Veeam Backup for Microsoft Azure appliance, do the following:

1. Open the Ba ckup Infrastructure view.

2. In the inventory pane, select Ma naged Servers.

3. In the working area, select the necessary Veeam Backup for Microsoft Azure appliance, and click Rescan
a p pliance on the ribbon. Alternatively, you can right-click the appliance and select Rescan.

4. In the opened window, click Y es .

Veeam Backup & Replication will remove from the configuration database all data collected on the Veeam
Backup for Microsoft Azure appliance. Then Veeam Backup & Replication will recollect data including the
following: last 24-hour session results, data on all created snapshots, backups and jobs.

54 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Removing Appliances
If you do not plan to manage an appliance using the Veeam Backup & Replication console, you can remove the
appliance from the Veeam Backup & Replication infrastructure only. If you do not plan to use the appliance
anymore, you can remove it from both the Veeam Backup & Replication and Microsoft Azure infrastructures.

Removing Appliance from Veeam Backup & Replication

After you remove an appliance from the Veeam Backup & Replication infrastructure only, you are not able to
perform any data protection and data recovery operations as the appliance and all the connected repositories
are removed from Veeam Backup & Replication. However, the appliance and all the connected resources
(repositories, subnets and so on) remain in Microsoft Azure.

To remove an appliance from the Veeam Backup & Replication infrastructure:

1. Open the Ba ckup Infrastructure view.

2. In the inventory pane, select Ma naged Servers.

3. In the working area, select the appliance that you want to remove, and click Remove Appliance on the
ribbon. Alternatively, right-click the appliance and select Remove.

4. In the opened window, click Y es . If you see the Remove associated resources from cloud infrastructure
check box, make sure that it is not selected.

55 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Removing Appliance from Veeam Backup & Replication and
Microsoft Azure
Removing Appliances Deployed from Veeam Backup & Replication Console
[The following instructions apply if you have deployed an appliance version 3.x and later from the Veeam
Backup & Replication console. If you have deployed an appliance from Microsoft Azure portal, deployed an
appliance version 2.x or connected an appliance, see the instructions in Removing Appliances Deployed from
Microsoft Azure Portal.]

When you remove appliances from both the Veeam Backup & Replication and Microsoft Azure infrastructures, all
the resources created along with the appliances are also removed. The removed resources are VMs on which
Veeam Backup for Microsoft Azure is deployed, network interfaces, disks and so on. The resources that remain
are resources that already existed at the moment of the appliance creation, repositories and created backups,
and resources shared with other VMs.

To remove an appliance from both the Veeam Backup & Replication and Microsoft Azure infrastructures:

1. Open the Ba ckup Infrastructure view.

2. In the inventory pane, select Ma naged Servers.

3. In the working area, select the appliance that you want to remove, and click Remove Appliance on the
ribbon. Alternatively, right-click the appliance and select Remove.

4. In the opened window, select the Remove associated resources from cloud infrastructure check box and
click Y es .

Removing Appliances Deployed from Portal

[The following instructions apply if you have deployed an appliance version 2.x and earlier, or an appliance
version 3.x and later from Microsoft Azure portal. If you have deployed an appliance version 3.x or later from the
Veeam Backup & Replication console, see the instructions in Removing Appliances Deployed from Veeam
Backup & Replication Console.]

To remove an appliance from the Veeam Backup & Replication and Microsoft Azure infrastructures , you must
first remove it from Veeam Backup & Replication as described in Removing Appliance from Veeam Backup &
Replication. Then remove the resources deployed in Microsoft Azure as described in the Uninstalling Veeam
Backup for Microsoft Azure section in the Veeam Backup for Microsoft Azure User Guide.

NOTE

If you deployed an appliance from the Veeam Backup & Replication console and selected to create a new
key pair at the Guest OS step of the wizard, you also need to remove the key pair from the resource group
that you specified at the Subscription step of the wizard or the VeeamSSHKeys resource group if you
selected to create a new resource group.

56 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Adding Blob Storage Backup Repositories
A Blob storage backup repository is a folder in a blob container with a specific tier assigned.

Microsoft Azure Plug-in for Veeam Backup & Replication supports the following types of Blob storage backup
repositories:

• Sta ndard backup repository

A standard backup repository is a folder in a blob container with the Hot (inferred) or Cool (inferred)
access tier assigned. Microsoft Azure Plug-in for Veeam Backup & Replication uses this repository to store
image-level backups of Azure VMs and backups of SQL databases. We recommend you to store in this
repository frequently accessed backups or infrequently accessed backups that must be stored for at least
30 days.

To store backups in a standard backup repository, first add it to the infrastructure and then enable imag e-
level backups in a backup policy. For more information on how to create a policy, see Performing Backup
in the Veeam Backup for Microsoft Azure User Guide.

• Archive repository
An archive repository is a folder in a blob container with the Archive tier assigned. Archive repository
allows you to archive image-level backups of Azure VMs and backups of SQL databases, that is, to store
backups for long periods of time at lower costs. However, restoring from an archived backup is longer and
more expensive than restoring from a backup stored in a standard backup repository. To restore data from
an archive, you first need to retrieve data from it. For more information on how to retrieve data, see
Retrieving Data from Archive.

We recommend you to archive data if it is rarely accessed and stored for at least 180 days or if you want to
reduce data-at-rest costs and to save space in the high availability standard backup repository.

To archive backups, first add an archive repository and then enable backup archiving in backup policies.
Note that you can archive only backups created with monthly and yearly retention schemes. For more
information on how to create a policy, see Performing Backup in the Veeam Backup for Microsoft Azure
User Guide. For more information on how archiving works, see the Enabling Backup Archiving for VMs and
Enabling Backup Archiving for Databases section in the Veeam Backup for Microsoft Azure User Guide.

Depending on your configuration, you can connect to existing repositories or deploy new ones.

Connecting to Existing Repository

All Blob storage backup repositories that have been already configured on a Veeam Backup for Microsoft Azure
appliance are added automatically to the Veeam Backup & Replication infrastructure when you connect to this
appliance.

If a repository that is already added to the Veeam Backup for Microsoft Azure infrastructure is not available in
the Veeam Backup & Replication infrastructure, follow the instructions provided in the Editing Veeam Backup
for Microsoft Azure Appliance Settings section. For a standard backup repository, at the Rep ositories step of the
E d it Veeam Backup for Microsoft Azure Appliance wizard, specify credentials to be used to access the repository
and click Ap p ly, and the repository will be added to the Veeam Backup & Replication infrastructure.

57 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
 NOTE

[For standard backup repositories] If you do not want or do not have an option to add the Veeam Backup
for Microsoft Azure appliance where a standard backup repository is deployed to the Veeam Backup &
Replication infrastructure, follow the instructions provided in the Adding External Azure Blob Storage
section in the Veeam Backup & Replication User Guide. In this case, restore from backups stored in this
Blob storage will work as described in the How Restore to Microsoft Azure Works section in the Veeam
Backup & Replication User Guide. This configuration might be necessary, for example, if your product
license is not supported.

Deploying New Repositories

When you deploy Blob storage backup repositories in the Veeam Backup & Replication console, they are added
to the Veeam Backup for Microsoft Azure infrastructure and are also displayed in the Veeam Backup for
Microsoft Azure infrastructure.

For instructions on how to deploy a repository, see the following sections:

• Deploying Standard Backup Repositories

• Deploying Archive Repositories

58 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Deploying Standard Backup Repositories
For more information on a standard backup repository, see Adding Blob Storage Backup Repositories.

To deploy a new standard backup repository, do the following:

1. Launch the Add External Repository wizard

2. Specify a Veeam Backup for Microsoft Azure appliance

3. Specify Azure account settings

4. Select a blob container

5. Configure encryption

6. Wait for the repository to be added to the infrastructure

7. Finish working with the wizard

59 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 1. Launch Add External Repository Wizard
To launch the Ad d External Repository wizard, open the Ba ckup Infrastructure view and do one of the following:

• In the inventory pane, select the E x ternal Repositories node and click Ad d Repository on the ribbon. In the
opened window, select Veeam Backup for Microsoft Azure > Azure Blob Storage .

• In the inventory pane, right-click the E x ternal Repositories node and select Ad d . In the opened window,
select Veeam Backup for Microsoft Azure > Azure Blob Storage.

60 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 2. Specify Veeam Backup for Microsoft Azure Appliance
At the Ba ckup Appliance step of the wizard, specify a name for the standard backup repository and the Veeam
Backup for Microsoft Azure appliance to whose infrastructure you want to add the repository:

1. From the Ap p liance drop-down list, select the necessary Veeam Backup for Microsoft Azure appliance.
New standard backup repository will be added to the infrastructure managed by the selected Veeam
Backup for Microsoft Azure appliance.

For an appliance to be displayed in the Ap p liance drop-down list, it must be added to the Veeam Backup &
Replication infrastructure as described in the Adding Veeam Backup for Microsoft Azure Appliances
section.

2. In the Rep ository name field, enter a name for the repository. The maximum length of the name is 125
characters; all special characters except for ()_-. cannot be used.

Veeam Backup & Replication will assign this name to the folder that is located in the Veeam/Backup
folder in Azure container that you will specify at the Container step of the wizard. Backups saved to this
folder will be assigned the same access tier (access tier inferred) as specified for the storage account
where the created repository will reside.

3. In the Description field, enter a description for future reference.

61 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 3. Specify Storage Account Settings
At the Account step of the wizard, specify settings for an account which will be used to connect to the standard
backup repository:

1. From the Credentials drop-down list, select credentials of a Microsoft Azure storage account whose type
is supported and where the target blob container resides or will reside. This account will be used to access
the backup repository.

If you have not added credentials beforehand, click the Ma nage cloud a ccounts link or the Ad d button to
add the necessary credentials. For more information on adding credentials, see the Microsoft Azure
Storage Accounts section in the Veeam Backup & Replication User Guide.

2. From the Ga teway server drop-down list, select a gateway server that will be used to access Blob storage.

The gateway server caches data when you copy backups and restore application items. The gateway server
helps you decrease the amount of traffic being sent over the network and red uce data transfer costs. For
more information on caching data, see the Cache section in the Veeam Backup & Replication User Guide.

By default, the role of a gateway server is assigned to the Veeam Backup & Replication server. If the
Veeam Backup & Replication server resides in a region that differs from the Azure region where your
Veeam Backup for Microsoft Azure resides, choose a server that is located close to the Veeam Backup for
Microsoft Azure appliance. You can choose any Microsoft Windows or Linux server that is added to your
Veeam Backup & Replication infrastructure and has internet connection. Note that the server must be
added to the Veeam Backup & Replication infrastructure beforehand. For more information on how to add
a server, see the Virtualization Servers and Hosts section in the Veeam Backup & Replication User Guide.

62 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 4. Select Blob Container
At the Container step of the wizard, specify Azure Blob storage container where you want to store Azure VM
backups. In the Container field specify an Azure Blob storage container where VM backups will reside. You can
create a new container or select an existing one:

• To create a new container, click Ad d . In the New Container window, enter a name for the container. Make
sure that this name meets the requirements described in Microsoft Docs.

• To specify an existing container, select it from the Container drop-down list.

For a container to be displayed in the Container list, it must be created for the selected storage account in
the Microsoft Azure portal as described in Microsoft Docs.

63 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 5. Configure Encryption
At the E ncryption step of the wizard, you can enable data encryption:

1. Select the E na ble backup file encryption check box.

2. If you want to use a Key Vault key for encryption, select P erform Azure encryption with the following key
and do the following:

a. From the Sub scription drop-down list, select a Microsoft Azure subscription where the Key Vault is
created. The drop-down list shows subscriptions from the tenant in which the selected storage
account is located.

For a subscription to be displayed in the Sub scription drop-down list, it must be created in advance
and associated to the Azure account as described in Microsoft Docs.

b. From the Key vault drop-down list, select Azure Key Vault where the encryption key is stored.

IMP ORTANT

To get Key Vaults and Key Vault keys, Microsoft Azure Plug -in for Veeam Backup & Replication
uses a service account that is added to the appliance and that has access to the tenant in which
the selected storage account is located. This service account must have access to Key Vaults
and keys. The permissions are listed in Required Permissions.

c. From the E ncryption k ey drop-down list, select the key you want to use. Veeam Backup for Microsoft
Azure will use the current key version.

IMP ORTANT

Do not disable Key Vault keys used for encryption, otherwise the Veeam Backup for Microsoft
Azure appliance will not be able to encrypt data, and backup policies that use encrypted
repositories for storing backups will fail.

Do not delete Key Vault keys used for encryption, otherwise the Veeam Backup for Microsoft
Azure appliance will not be able to decrypt data stored in these repositories.

3. If you want to use a password for encryption, select P erform Veeam encryption with the following
p a ssword. From the Use the following encryption password drop-down list, select a password that you
want to use.

If you have not added the password beforehand, click the Ma nage passwords link or the Ad d button to
add a password. For more information on adding passwords, see the Creating Passwords section in the
Veeam Backup & Replication User Guide.

64 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
 NOTE

If you further plan to change the encryption method, you will need to go through the edit wizard of the
repository or appliance right after you change the encryption method. For more information, see the
Editing Settings of External Repository or Editing Appliance Settings sections.

65 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 6. Apply Settings
At the Ap p ly step of the wizard, wait until Veeam Backup & Replication applies the settings. Click Nex t to
complete adding of a new standard backup repository.

66 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 7. Finish Working with Wizard
At the Summary step of the wizard, review the newly created repository settings and click Finish.

67 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Deploying Archive Repositories
For more information on an archive repository, see Adding Blob Storage Backup Repositories.

To deploy an archive repository, use the following instructions:

1. Launch the Add External Repository wizard

2. Specify a Veeam Backup for Microsoft Azure appliance and repository name

3. Specify storage account settings

4. Select a blob container

5. Configure encryption

6. Wait for the repository to be added to the infrastructure

7. Finish working with the wizard

68 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 1. Launch Add External Repository Wizard
To launch the Ad d External Repository wizard, open the Ba ckup Infrastructure view and do one of the following:

• In the inventory pane, select the E x ternal Repositories node and click Ad d Repository on the ribbon. In the
opened window, select Veeam Backup for Microsoft Azure > Azure Archive Storage.

• In the inventory pane, right-click the E x ternal Repositories node and select Ad d . In the opened window,
select Veeam Backup for Microsoft Azure > Azure Archive Storage.

69 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 2. Specify Veeam Backup for Microsoft Azure Appliance
At the Ba ckup Appliance step of the wizard, specify an archive repository name and the Veeam Backup for
Microsoft Azure appliance to whose infrastructure you want to add the repository:

1. From the Ap p liance drop-down list, select the necessary Veeam Backup for Microsoft Azure appliance. The
archive repository will be deployed in the infrastructure of the selected Veeam Backup for Microsoft Azure
appliance.

For an appliance to be displayed in the Ap p liance drop-down list, it must be added to the Veeam Backup &
Replication infrastructure as described in the Adding Veeam Backup for Microsoft Azure Appliances
section.

2. In the Rep ository name field, enter a name for the archive repository. The maximum length of the name is
125 characters; all special characters except for ()_-. cannot be used.

Veeam Backup & Replication will assign this name to the folder that is located in the Veeam/Backup
folder in Azure container that you will specify at the Container step of the wizard. Backups saved to this
folder will be assigned the Archive access tier.

3. In the Description field, enter a description for future reference.

70 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 3. Specify Storage Account Settings
At the Account step of the wizard, specify settings for an account which will be used to access the archive
repository. From the Credentials drop-down list, select credentials of a Microsoft Azure storage account whose
type is supported and where the target blob container resides or will reside.

If you have not added credentials beforehand, click the Ma nage cloud a ccounts link or the Ad d button to add
the necessary credentials. For more information on adding credentials, see the Microsoft Azure Storage
Accounts section in the Veeam Backup & Replication User Guide.

71 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 4. Select Blob Container
At the Container step of the wizard, specify Azure Blob storage container where you want to store archive
backups. In the Container field specify an Azure Blob storage container where archive backups will reside. You
can create a new container or select an existing one:

• To create a new container, click Ad d . In the New Container window, enter a name for the container. Make
sure that this name meets the requirements described in Microsoft Docs.

• To specify an existing container, select it from the Container drop-down list.

For a container to be displayed in the Container list, it must be created for the selected storage account in
the Microsoft Azure portal as described in Microsoft Docs.

72 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 5. Configure Encryption
At the E ncryption step of the wizard, you can enable data encryption:

1. Select the E na ble backup f ile encryption check box.

2. If you want to use a Key Vault key for encryption, select P erform Azure encryption with the following key
and do the following:

a. From the Sub scription drop-down list, select a Microsoft Azure subscription where the Key Vault is
created. The drop-down list shows subscriptions from the tenant in which the selected storage
account is located.

For a subscription to be displayed in the Sub scription drop-down list, it must be created in advance
and associated to the Azure account as described in Microsoft Docs.

b. From the Key vault drop-down list, select Azure Key Vault where the encryption key is stored.

IMP ORTANT

To get Key Vaults and Key Vault keys, Microsoft Azure Plug -in for Veeam Backup & Replication
uses a service account that is added to the appliance and that has access to the tenant in which
the selected storage account is located. This service account must have access to Key Vaults
and keys. The permissions are listed in Required Permissions.

c. From the E ncryption k ey drop-down list, select the key you want to use. Veeam Backup for Microsoft
Azure will use the current key version.

IMP ORTANT

Do not disable Key Vault keys used for encryption, otherwise the Veeam Backup for Microsoft
Azure appliance will not be able to encrypt data, and backup policies that use encrypted
repositories for storing backups will fail.

Do not delete Key Vault keys used for encryption, otherwise the Veeam Backup for Microsoft
Azure appliance will not be able to decrypt data stored in these repositories.

3. If you want to use a password for encryption, select P erform Veeam encryption with the following
p a ssword. From the Use the following encryption password drop-down list, select a password that you
want to use.

If you have not added the password beforehand, click the Ma nage passwords link or the Ad d button to
add a password. For more information on adding passwords, see the Creating Passwords section in the
Veeam Backup & Replication User Guide.

73 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
 NOTE

If you change the encryption method, you will need to go through the edit wizard of the repository or
appliance right after you change the encryption method. For more information, see the Editing Settings of
External Repository or Editing Appliance Settings sections.

74 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 6. Apply Settings
At the Ap p ly step of the wizard, wait until Veeam Backup & Replication applies the settings. Click Nex t to
complete the procedure of adding the archive repository.

75 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 7. Finish Working with Wizard
At the Summary step of the wizard, review the newly created archive repository settings and click Finish.

76 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Managing Backup Repositories
You can perform different operations for standard and archive repositories:

• Archive repositories
You can remove repositories from Veeam Backup & Replication infrastructure as described in Removing
Repositories. You can edit archive repositories using the Veeam Backup for Microsoft Azure appliance Web
UI. For more information, see the Editing Backup Repository Settings section in Veeam Backup for
Microsoft Azure User Guide.

• Standard backup repositories

You can edit, rescan and remove repositories. For more information, see the sections below.

NOTE

If you change the encryption method, you need to go through the edit wizard of the repository or
appliance right after you change the encryption method. For more information, see the Editing Settings of
External Repository or Editing Appliance Settings sections.

Editing Standard Backup Repository Settings

To edit standard backup repository settings, follow the instructions provided in the Editing Settings of External
Repository section in the Veeam Backup & Replication User Guide.

Rescanning Standard Backup Repositories

To synchronize backups stored in standard backup repositories across the Veeam Backup & Replication and
Veeam Backup for Microsoft Azure infrastructures, follow the instructions provided in the Rescanning External
Repository section in the Veeam Backup & Replication User Guide.

Removing Backup Repositories

To remove backup repositories from the Veeam Backup & Replication infrastructure, follow the instructions
provided in the Removing External Repositories section in the Veeam Backup & Replication User Guide. Note
that the repositories will be removed only from the Veeam Backup & Replication infrastructure, the repository
will still exist on the Veeam Backup for Microsoft Azure appliance.

For more information on how to remove the repository from the Veeam Backup for Microsoft Azure appliance,
see the Removing Backup Repositories section in Veeam Backup for Microsoft Azure User Guide.

77 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Uninstalling Plug-In
If you uninstall Microsoft Azure Plug-in for Veeam Backup & Replication but do not remove appliances
beforehand, the following will take place:

• You will be able to see snapshots. However, you will not be able to do anything with them.

• You will be able to see image-level backups of VMs and perform data recovery operations for them
(except disk export and application items restore). For more information on recovery operations, see Data
Recovery. Note that restore to Microsoft Azure will work as described in the How Restore to Microsoft
Azure Works section in the Veeam Backup & Replication User Guide.

• You will not be able to add and manage appliances.

• You will not be able to deploy Azure Blob storage.

• You will not be able to create and manage backup policies. You will be able only to remove backup policies
from the Veeam Backup & Replication console.

To uninstall Microsoft Azure Plug-in for Veeam Backup & Replication:

1. From the Sta rt menu of the machine where Microsoft Azure Plug-in for Veeam Backup & Replication is
installed, navigate to Control Panel > Programs > Programs and Features.

2. In the list of installed programs, right-click Microsoft Azure Plug-in for Veeam Backup & Replication and
select Uninstall.

3. In the opened window, click Remove.

78 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Data Protection
With Microsoft Azure Plug-in for Veeam Backup & Replication, you can protect the following workloads:

• Azure VMs

• SQL databases

To protect these workloads, you need to create backup policies. A backup policy is a collection of settings that
define the way backup operations are performed: what data to back up, where backups must be stored, when
the backup process must start and so on. For more information, see Creating Backup Policies.

After the policies are created, you can manage them as described in Managing Backup Policies.

Additional Data Protection Options for Azure VMs

Using the Veeam Backup & Replication console, you can also add an additional layer of protection for your
infrastructure by creating backup copy jobs and backup to tape jobs for Azure VMs.

The backup copy jobs allow you to create and keep multiple instances of the same backed -up data in different
locations. For more information, see Creating Backup Copy Jobs for Azure VMs.

The backup to tape jobs allow you to keep backups of VMs on tape devices. For more information, see Copying
Azure VM Backups to Tapes.

79 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Creating Backup Policies
When you create a backup policy, Veeam Backup & Replication redirects you to the Veeam Backup for Microsoft
Azure Web UI where you can add a backup policy directly to Veeam Backup for Microsoft Azure. For more
information on the backup policies, see the following sections in the Veeam Backup for Microsoft Azure User
Guide:

• Performing Azure VM Backup

• Performing Azure SQL Backup

To create a backup policy:

1. Launch the Ad d Policy wizard using one of the following instructions:

o On the Home tab, navigate to Ba ckup Job > Microsoft Azure and click VM or SQL.

o Open the Home view. In the inventory pane, right-click the Job s node and select Ba ckup > Microsoft
Azure, then click VM or SQL.

If you have several Veeam Backup for Microsoft Azure appliances added to the Veeam Backup &
Replication infrastructure, select the necessary appliance under the Microsoft Azure node.

2. Follow the instructions provided in one of the following sections in the Veeam Backup for Microsoft Azure
User Guide:

o Configuring Azure VM Backup

o Configuring Azure SQL Backup

80 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Managing Backup Policies
After you install Microsoft Azure Plug-in for Veeam Backup & Replication, you can use the Veeam Backup &
Replication console to manage backup policies created with Veeam Backup for Microsoft Azure. You can start,
stop, disable and delete backup policies directly in the Veeam Backup & Replication console.

81 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Starting and Stopping Policies
You can start a backup policy manually. For example, if you want to create an additional restore point in the
snapshot or backup chain and do not want to modify the configured backup policy schedule. You can also stop a
running backup policy if processing of a VM or database is about to take too long, and you do not want the
policy to produce heavy workload on the production environment during business hours.

Starting Backup Policies

To start a backup policy:

1. Open the Home view.

2. In the inventory pane, select Job s .

3. In the working area, select the necessary backup policies and click Sta rt on the ribbon. Alternatively, right-
click one of the selected backup policies and select Sta rt.

Stopping Backup Policies

To stop a backup policy:

1. Open the Home view.

2. In the inventory pane, select Job s .

82 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
 3. In the working area, select the necessary backup policies and click Stop on the ribbon. Alternatively, right-
click one of the selected backup policies and select Stop. In the displayed window, click Y es .

Veeam Backup for Microsoft Azure will not produce new restore points for VMs, which are added to a
backup policy, but have not been processed by the time you stop the policy.

83 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Editing Policy Settings
After you install Microsoft Azure Plug-in for Veeam Backup & Replication, you can edit settings of backup
policies created in Veeam Backup for Microsoft Azure. For example, you can add more Azure VMs to a backup
policy and change the backup policy description.

To edit a backup policy:

1. Open the Home view.

2. In the inventory pane, select Job s .

3. In the working area, select the backup policy that you want to edit, and click E d it on the ribbon.
Alternatively, right-click the policy and select E d it. The E d it Policy wizard will open in your browser.

4. Depending on the type of the selected policy, edit the policy as described in one of the following sections
in the Veeam Backup for Microsoft Azure User Guide:

o Creating Azure VM Backup Policies

o Creating Azure SQL Backup Policies

84 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Disabling and Removing Policies
Microsoft Azure Plug-in for Veeam Backup & Replication allows you to temporarily disable or permanently
delete backup policies created by Veeam Backup for Microsoft Azure. When you disable a backup policy, Veeam
Backup for Microsoft Azure disables the schedule configured for the backup policy. This m eans that the backup
policy will no longer start automatically. You can enable and start the disabled policy manually any time you
need.

Disabling Backup Policies

You can disable a backup policy only if it has a schedule configured beforehand.

To disable a backup policy:

1. Open the Home view.

2. In the inventory pane, select Job s .

3. In the working area, select the necessary backup policy and click Disable on the ribbon. Alternatively,
right-click the necessary backup policy and select Disable.

TIP

To enable a disabled policy, select it and click Disable once again.

Deleting Backup Policies

To delete a backup policy created by Veeam Backup for Microsoft Azure:

1. Open the Home view.

2. In the inventory pane, select Job s .

85 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
 3. In the working area, select the necessary backup policy and click Delete on the ribbon. Alternatively,
right-click the necessary backup policy and select Delete.

86 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Managing Backed-Up Data
You can manage backed-up data in the following ways.

Removing Image-Level Backups and Snapshots

You can remove image-level backups and snapshots from Blob storage backup repositories only using the Web
UI component of the Veeam Backup for Microsoft Azure appliance. For more information on how to delete
snapshots and backups, see the Managing Backed-Up Data section in Veeam Backup for Microsoft Azure User
Guide.

Decrypting Image-Level Backups

If you specify decryption passwords for standard backup repositories when adding a Veeam Backup for Microsoft
Azure appliance, Veeam Backup & Replication automatically decrypts backup files stored in these repositories. If
you do not specify decryption passwords, backup files remain encrypted.

To decrypt backup files:

1. Open the Home view.

2. In the inventory pane, navigate to Ba ckups > E xternal Repository (Encrypted).

3. In the working area, select a backup policy whose image-level backups you want to decrypt or select an
individual backup. Then click Sp ecify Password on the ribbon, or right-click one of the selected backups,
and select Sp ecify password.

4. In the P a ssword field, enter a password.

In the Hint field, you can see a hint for the password used to encrypt the backup files. Use this hint to
recall the password.

87 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Alternatively, you can specify a decryption password at the Container step of the E d it External Repository
wizard. For more information on how to open the wizard, see the Editing Settings of External Repository section
in the Veeam Backup & Replication User Guide.

Retrieving Data from Archive

To access data stored in an archive repository, you must first retrieve the data. During the data retrieval process,
a temporary copy of the archived data is created in a blob container where the archive repository resides. This
copy is created in the hot or cool tier and stored for the period of time that you specify when launching the data
retrieval process. For more information, see the Copy an archived blob to an online tier section in Microsoft
Docs.

To launch the data retrieval process, do the following:

1. Launch the restore wizard as described in Launch Restore to Microsoft Azure Wizard or Launch Restore to
Microsoft Azure SQL Wizard.

2. At the Ma chine or SQL Database step of the restore wizard, select a workload whose backup is stored in an
archive repository. Click Nex t.

3. [If the backup is also stored in a standard repository] In the Confirm restore window, click Archive.

4. Confirm that you want to perform data retrieval by clicking Y es.

5. At the Retrieval Mode step of the Retrieve Backup wizard, select a method for data retrieval:

o Sta ndard Priority. The default priority method. The retrieved data will be available within about 15
hours.

o Hig h Priority. The faster, but more expensive priority method. The retrieved data will be available
within about one hour. For example, if the size of a backup file is less than 10 GB.

For more information on priority options, see Microsoft Docs.

88 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
 6. At the Ava ilability Period step of the Retrieve Backup wizard, do the following:

a. In the Keep retrieved data a vailable for field, specify the number of days for which you want to keep
the data available for restore operations.

The data will be available during the day when the retrieval finishes plus the specified number of
days. Each day starts at 12 AM and ends at 11:59 PM (in your appliance time zone). For example, if the
data retrieval finished at 3 PM, June 6, and the number of days is set to 1, the data will be available
till 11:59 PM, June 7.

You will be able to manually extend data availability later if required.

b. If you want to receive an email notification when data availability period is about to expire, select the
Send notification email check box, and specify the number of hours before the expiration time when
the notification must be sent.

Check that you have configured global email notification settings as described in the Configuring
Global Email Notification Settings section in the Veeam Backup & Replication User Guide.

7. At the Summary step of the Retrieve Backup wizard, review settings for data retrieval and click Finish.

The retrieved data will be available on the Home view, in the Da ta Retrieval node of the inventory pane.

Extending Data Availability

To extend time for which you want to keep retrieved data available for restore operations:

1. Open the Home view.

2. In the inventory pane, click the Da ta Retrieval node.

3. In the working area, select a workload for which you want to extend availability of the retrieved data.

4. On the ribbon, click E x tend Availability. Alternatively, right-click the selected workload and click E x tend
a vailability.

89 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
 4. In the opened window, specify the number of days for which you want to keep the data available for
restore operations. Click OK.

90 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Creating Backup Copy Jobs
Having just one backup does not provide the necessary level of safety. The primary backup of Azure VM may get
lost together with production data, and you will have no backups from which you can restore data. Veeam
Backup & Replication offers the backup copy functionality that allows you to create and keep multiple VMs of
the same backup data in different locations.

Backup copy is a job-driven process. Veeam Backup & Replication fully automates the backup copy process and
lets you specify retention settings to maintain the desired number of restore points, as well as full backups f or
archival purposes. For more information on the backup copy functionality, see the Backup Copy section in the
Veeam Backup & Replication User Guide.

To create a backup copy job, do the following:

1. On the Home tab, click Ba ckup Copy and select Azure IaaS backup.

2. Complete the New Ba ckup Copy Job wizard as described in the Creating Backup Copy Jobs section in the
Veeam Backup & Replication User Guide.

91 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Copying Backups to Tapes
Storing data on tape devices helps you improve the level of safety and implement the 3 -2-1 rule (3 copies, 2
types of media, 1 offsite location).

To administer all operations on tapes from your Veeam Backup & Replication console, Veeam Backup &
Replication allows you to automate copying of image-level backups to tape devices and lets you specify
scheduling, archiving and media automation options. For more information on the supported tapes and
operations which you can perform with tapes, see the Tape Devices Support section in the Veeam Backup &
Replication User Guide.

To copy Azure VM backups to tapes, do the following:

1. Check that you have copied Azure VM backups to on-premises repositories.

If you have not copied the backups, follow the instructions provided in Creating Backup Copy Jobs.

2. Configure the tape infrastructure:

a. Connect tape devices as described in the Tape Devices Deployment section in the Veeam Backup &
Replication User Guide.

b. Perform the initial configuration as described in steps 1–3 of the Getting Started with Tapes section in
the Veeam Backup & Replication User Guide.

3. Create and complete a backup to tape job as described in the Creating Backup to Tape Jobs section in the
Veeam Backup & Replication User Guide.

92 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Viewing Statistics
After you install Microsoft Azure Plug-in for Veeam Backup & Replication, you can use the Veeam Backup &
Replication console to view real-time statistics for any backup policy. Note that sessions for snapshots created
manually in the Web UI component of an Veeam Backup for Microsoft Azure appliance are not displayed in the
Veeam Backup & Replication console.

For more information on how to review statistics, see the Viewing Real-Time Statistics section in the Veeam
Backup & Replication User Guide.

93 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Data Recovery
Veeam Backup for Microsoft Azure offers the following recovery options that you can run to restore Azure VMs
in various disaster recovery scenarios:

• Restore to Microsoft Azure

Restore entire Azure VMs from cloud-native snapshots or image-level backups.

• Restore to Microsoft Azure SQL

Restore entire Azure SQL databases from image-level backups.

• Instant Recovery

Immediately restore Azure VMs to VMware vSphere or Hyper-V environment.

• Restore to Amazon EC2

Restore Amazon VMs from backups to Amazon EC2.

• Restore to Nutanix AHV

Restore Amazon VMs from backups to Nutanix AHV clusters.

• Restore to Google Compute Engine

Restore Amazon VMs from backups to Google Compute Engine.

• VM Disk Export
Restore disks of Azure VMs from backups created by Veeam Backup for Microsoft Azure and convert them
to disks in the VMDK, VHD or VHDX format.

• VM Guest OS Files Restore

Recover individual guest OS files from Windows or Linux file systems.

• Application Items Restore

Restore application items (Microsoft Active Directory, Microsoft Exchange, Microsoft SharePoint, and
Microsoft SQL Server).

94 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Restoring to Microsoft Azure
In case a disaster strikes, you can restore entire Azure VMs from cloud -native snapshots or image-level backups.

To restore VMs from cloud-native snapshots, Veeam Backup & Replication invokes native Azure capabilities. To
restore VMs from image-level backups, Veeam Backup & Replication uses different algorithms depending on
whether a Veeam Backup for Microsoft Azure appliance is present in the Veeam Backup & Replication
infrastructure:

• If a Veeam Backup for Microsoft Azure appliance and Azure Blob storage connected to it are present in the
Veeam Backup & Replication infrastructure, Veeam Backup & Replication uses the restore algorithm
described in the How VM Restore Works section in the Veeam Backup for Microsoft Azure User Guide.

• If a Veeam Backup for Microsoft Azure appliance is not present in the Veeam Backup & Replication
infrastructure and only Azure Blob storage connected to this appliance is present there, Veeam Backup &
Replication uses the restore algorithm described in the How Restore to Microsoft Azure Works section in
the Veeam Backup & Replication User Guide.

To restore VMs, do the following:

1. Launch the Restore to Azure wizard

2. Select Azure VMs and restore points

3. Specify a restore mode

4. Specify an Azure subscription and region

5. Specify VM names and resource groups

6. Configure VM availability options

7. Specify VM sizes

8. Specify network and secure group settings

9. Specify a restore reason

10. Finish working with the wizard

95 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 1. Launch Restore to Microsoft Azure
Wizard
To restore data from image-level backups or cloud-native snapshots, launch the Restore to Microsoft Azure
wizard. However, we recommend that you restore Azure VMs from cloud -native snapshots. In this case, Veeam
Backup & Replication will be able to invoke native Azure capabilities to makes the restore process complete
faster.

To launch the Restore to Microsoft Azure wizard, do one of the following:

• On the Home tab, click Restore and select Microsoft Azure. In the Restore window, select Microsoft Azure
Ia aS > Restore from Microsoft Azure VM snapshot if you want to restore from cloud-native snapshots, or
Microsoft Azure IaaS > Restore from Veeam backup if you want to restore from image-level backups.

• Open the Home view. In the inventory pane, navigate to Ba ckups > E xternal Repository if you want to
restore from image-level backups, or to Ba ckups > Sna pshots if you want to restore from cloud-native
snapshots. In the working area, expand the necessary backup policy, select VMs that you want to restore
and click Microsoft Azure Iaas on the ribbon. As an alternative, right-click one of the selected VMs and
select Restore to Microsoft Azure Iaas.

96 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 2. Select Azure VMs and Restore Points
At the Virtual Machine step of the wizard, select Azure VMs that you plan to restore and select a restore point
for each VM:

1. On the right of the wizard window, click Ad d VM.

2. In the Ba ckup Browser window, expand the necessary backup policy, select VMs that you want to restore
and click Ad d .

3. By default, Microsoft Azure Plug-in for Veeam Backup & Replication recovers VMs to the latest state.
However, if you want to restore VMs to an earlier state, do the following:

a. In the Virtual machines to restore list, select the necessary VM and click P oint.

b. In the Restore Points window, select the restore point from which you want to restore the VM and
click OK.

[If you restore from image-level backups] Each restore point is marked with a flag of the related
retention scheme type: the (R) flag is used to mark restore points created with daily retention, (W) —
weekly, (M) — monthly, and (Y) — yearly.

97 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 3. Choose Restore Mode
At the Restore Mode step of the wizard, choose whether you want to restore Azure VMs to the original or a new
location, and select a service account that will be used for restore:

1. Choose where to restore VMs:

o To restore VMs with initial settings to their original location, select Restore to the original location.

If you select this option, you will proceed to the Reason step of the wizard.

o To restore VMs to a different location or with different settings (such as subscription, network
settings and so on), select Restore to a new location, or with different settings.

If you select this option, the Restore to Microsoft Azure wizard will include additional steps for
specifying the target Azure region and VM settings.

2. To select a service account, click P ick account to use and, in the Account window, select the account that
will be used for restore. This account must have permissions listed in Required Permissions.

For a service account to be displayed in the drop-down list, it must be added as described in the Adding
Azure Service Account section in the Veeam Backup for Microsoft Azure User Guide.

98 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 4. Specify Azure Subscription and Region
[This step is available if you have selected the Restore to a new location, or with different settings option at the
Restore Mode step of the wizard.]

At the Sub scription step of the wizard, select a Microsoft Azure subscription and location to which you want to
restore Azure VMs:

1. From the Sub scription drop-down list, select a Microsoft Azure subscription that will be used to manage
resources and costs for the restored VMs.

For a subscription to be displayed in the Sub scription list, it must be created and associated to your Azure
account as described in Microsoft Docs.

2. From the Reg ion drop-down list, select a region to which you want to restore VMs.

If the selected region differs from the original VM location, you will see a warning message notifying that
the locations do not match. Click OK to acknowledge the warning. Otherwise, you will not be able to
proceed to the next step of the wizard.

NOTE

Data transfer to a new location may require additional costs and may take more time to complete.

99 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 5. Specify VM Names and Resource Groups
[This step is available if you have selected the Restore to a new location, or with different settings option at the
Restore Mode step of the wizard.]

At the Na me step of the wizard, you can change resource groups and specify new names for restored VMs:

1. To change resource groups, do the following:

a. In the Resource group list, select VMs whose resource groups you want to change and click Group.

b. In the Resource group window, select the necessary resource group.

For a resource group to be displayed in the Resource group list, it must be created as described in
Microsoft Docs.

2. To rename VMs, do the following:

a. In the Resource Group list, select VMs that you want to rename and click Na me.

b. In the Cha nge Name window, specify a new VM name if you have selected one VM, or specify a suffix
or prefix that will be added to VM names if you have selected multiple VMs. Click OK.

IMP ORTANT

The VM name that you specify must follow Azure naming rules. Otherwise, the restore operation may
fail. For more information on the naming rules, see Microsoft Docs.

100 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 6. Configure VM Availability Options
[This step is available if you have selected the Restore to a new location, or with different settings option at the
Restore Mode step of the wizard.]

At the Ava ilability Options step of the wizard, you can specify in which availability zone or availability set to
place restored Azure VMs, and which disk type to use:

1. [For unmanaged disks] To select a disk type that will be used with the restored VMs, do the following:

a. In the Virtual machines list, select the necessary VM and click Storage.

b. In the Storage type window, select the necessary disk type. For unmanaged disks, also select from the
Storage account list an Azure storage account to which you want to restore disks of the selected VM.

For a storage account to be displayed in the Storage account list, it must be created in the Microsoft
Azure portal as described in Microsoft Docs.

2. To specify an availability set or zone, do the following:

a. In the Virtual machines list, select the necessary VMs and click Ava ilability.

b. In the Ava ilability Options window, do the following:

▪ To place the VMs in an availability zone, select Ava ilability zone. Then select the necessary zone.

For zones available in the region that you have selected at the Subscription step of the wizard,
see Microsoft Docs.

▪ To include the VMs in an availability set, select Ava ilability set.

For an availability set to be displayed in the drop-down list, it must be created in the Azure
portal. Also, the availability set must be in the same region and resource group as the restored
VMs. Otherwise, the availability set may not be displayed.

IMP ORTANT

You cannot include managed VMs into unmanaged availability sets, and unmanaged VMs into
managed availability sets.

101 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
 For more information on availability sets and zones, see Microsoft Docs.

102 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 7. Specify VM Sizes
[This step is available if you have selected the Restore to a new location, or with different settings option at the
Restore Mode step of the wizard.]

At the VM size step of the wizard, you can choose sizes and disk names for VMs that will be restored:

1. To change VM sizes, do the following:

a. In the Virtual machine list, select the necessary VMs and click E d it.

b. In the VM size window, select sizes for the restored VMs from the Size drop-down list. Click OK.

For more information on VM sizes, see Microsoft Docs.

IMP ORTANT

If the size of the original VM differs from the size of the restored VM, Microsoft Azure may apply
additional charges for maintaining the restored VM.

2. To rename virtual disks, do the following:

a. In the Virtual machine list, select the necessary VMs and click Disks.

b. In the VM Disks window, select virtual disks that you want to restore and click Na me.

c. In the Cha nge Name window, specify a new disk name if you have selected one disk, or specify a suffix
or prefix that will be added to restored disk names if you have selected multiple disks. Click OK.

d. In the VM Disks window, click OK.

103 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 8. Specify Network and Secure Group
Settings
[This step is available if you have selected the Restore to a new location, or with different settings option at the
Restore Mode step of the wizard.]

At the Network step of the wizard, you can change network properties for restored VMs:

1. To change virtual networks and subnets, in the Virtual machine list, select the necessary VMs and click
Network.

In the Virtual Network window, do the following:

a. From the Virtual network drop-down list, select a virtual network to which you want to connect the
restored Azure VMs.

For a virtual network to be displayed in the Virtual network list, it must be created as described in
Microsoft Docs.

b. From the Sub net drop-down list, select a subnet within the specified virtual network to which you
want to connect the restored Azure VMs.

For a subnet to be displayed in the Sub net list, it must be created as described in Microsoft Docs.

c. Click OK.

2. To change network security groups, in the Virtual machine list, select the necessary VMs and click Group.
From the Network security group drop-down list, select a security group that will be associated with the
specified subnet. Click OK.

For a network security group to be displayed in the Network security group list, it must be created as
described in Microsoft Docs.

104 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 9. Specify Restore Reason
At the Rea son step of the wizard, specify a reason for restoring Azure VMs. The information you provide will be
saved in the session history and you can reference it later.

105 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 10. Finish Working with Wizard
At the Summary step of the wizard, review the configured restore settings and click Finish.

If you want to start Azure VMs right after restore, select the P ower on target VM after restoring check box.

106 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Restoring to Microsoft Azure SQL
In case a disaster strikes, Microsoft Azure Plug-in for Veeam Backup & Replication allows you to restore Azure
SQL databases from backups. For more information on how restore works, see the Performing Azure SQL
Restore section in the Veeam Backup for Microsoft Azure User Guide.

To restore Azure SQL databases, do the following:

1. Launch the Restore to Microsoft Azure SQL Wizard

2. Select Azure SQL databases and restore points

3. Specify a restore mode

4. Specify target Azure SQL Server settings

5. Specify an Azure SQL database name

6. Specify a restore reason

7. Finish working with the wizard

107 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 1. Launch Restore to Microsoft Azure SQL
Wizard
To launch the Restore to Microsoft Azure SQL wizard, do one of the following:

• On the Home tab, click Restore and select Microsoft Azure. In the Restore window, select Microsoft Azure
SQL.

• Open the Home view. In the inventory pane, navigate to Ba ckups > E xternal Repository. In the working
area, expand the necessary Azure SQL backup policy, select the databases that you want to restore and
click Microsoft Azure SQL on the ribbon. Alternatively, you can right-click one of the selected databases
and select Restore to Microsoft Azure SQL .

108 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 2. Select SQL Databases and Restore Points
At the SQL d atabase step of the wizard, select Azure SQL databases that you plan to restore and select a restore
point for each SQL database:

1. On the right of the wizard window, click Ad d .

2. In the Ba ckup Browser window, expand the necessary Azure SQL backup policy, select SQL databases that
you want to restore and click Ad d .

3. By default, Microsoft Azure Plug-in for Veeam Backup & Replication recovers SQL databases to the latest
state. However, if you want to restore Azure SQL databases to an earlier state, do the following:

a. In the SQL database list, select the necessary SQL database and click P oint.

b. In the Restore Points window, expand the necessary Azure SQL backup policy, select the restore point
from which you want to restore the Azure SQL database and click OK.

Each restore point is marked with a flag of the related retention scheme type: the (R) flag is used to
mark restore points created with daily retention, (W) — weekly, (M) — monthly, and (Y) — yearly.

109 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Step 3. Choose Restore Mode and Service
Account
At the Restore Mode step of the wizard, choose whether you want to restore Azure SQL databases to the
original or a new location and specify the service account settings:

1. Choose where to restore databases:

o To restore databases with initial settings to their original location, select Restore to the original
loca tion.

If you select this option, you will proceed to the Reason step of the wizard.

o To restore databases to a different location or with different settings (such as subscription, network
settings and so on), select Restore to a new location, or with different settings.

If you select this option, the Restore to Microsoft Azure SQL wizard will include additional steps.

2. To select a service account, click P ick account to use and, in the Account window, select the account that
will be used to access Azure resources. This account must have permissions listed in Required Permissions.

For a service account to be displayed in the drop-down list, it must be added as described in the Adding
Azure Service Account section in the Veeam Backup for Microsoft Azure User Guide.

110 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 4. Specify Target SQL Server Settings
[This step is available if you have selected the Restore to a new location, or with different settings option at the
Restore Mode step of the wizard.]

At the Ta rget server step of the wizard, specify the target Azure SQL server and its settings:

1. In the SQL d atabase list, select an Azure SQL database for which you want to configure the target SQL
server and click Server.

2. In the Ta rget server window, do the following:

a. From the SQL server drop-down list, select the Azure SQL server or an Azure SQL Managed Instance
to which Microsoft Azure Plug-in for Veeam Backup & Replication will restore the database.

b. From the E lastic pool drop-down list, select a set of performance resources that you want to allocate
to the restored Azure SQL database.

NOTE

Mind the following:

• If you have not configured an elastic pool beforehand, you do not need to specify this
setting.
• This option applies only if you restore databases to Azure SQL server.

c. From the Account drop-down list, select the Azure SQL account that will be used to access the server
or managed instance. This account must have permissions listed in Required Permissions.

For an Azure SQL account to be displayed in the drop-down list, it must be created as described in the
Adding Accounts section in the Veeam Backup for Microsoft Azure User Guide.

111 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Step 5. Specify Name
[This step is available if you have selected the Restore to a new location, or with different settings option at the
Restore Mode step of the wizard.]

By default, Microsoft Azure Plug-in for Veeam Backup & Replication restores an Azure SQL database with its
original name. However, you can define a new name for the restored database if necessary.

To define a new name for the database:

1. In the Virtual machines list, select the necessary databases and click Na me.

2. In the Cha nge Name window, do the following:

a. If you have selected one database, specify a name under which the database will be restored.

b. If you have selected multiple databases, specify a prefix or suffix that will be added to the original
names. For this, select the necessary check box and type the text to be added.

112 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 6. Specify Restore Reason
At the Rea son step of the wizard, specify a reason for restoring Azure SQL databases. The information you
provide will be saved in the session history and you can reference it later.

113 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Step 7. Finish Working with Wizard
At the Summary step of the wizard, review the configured Azure SQL database restore settings and click Finish.

114 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Performing Instant Recovery
Instant Recovery helps you immediately restore an Azure VM from an image-level backup to VMware vSphere or
Hyper-V environment.

For more information on Instant Recovery to VMware vSphere, see the Instant Recovery section in the Veeam
Backup & Replication User Guide for VMware vSphere. For more information on Instant Recovery to Hyper -V,
see the Instant Recovery section in the Veeam Backup & Replication User Guide for Microsoft Hyper -V.

Instant Recovery to VMware vShpere

To perform Instant Recovery to VMware vSphere environment, do the following:

1. Check that you have added to the backup infrastructure a vCenter Server that will manage restored Azure
VMs.

If you have not added the server, follow the instructions provided in the Adding VMware vSphere Servers
section in the Veeam Backup & Replication User Guide.

2. Launch and complete the Instant Recovery to VMware wizard.

To do that, in the inventory pane, navigate to the Ba ckups > E x ternal Repository node. In the working
area, expand the necessary job, and select backups of Azure VMs that you want to recover. On the ribbon,
click Instant Recovery > VMware vSphere. Then follow the instructions provided in the Performing Instant
Recovery of Workloads to VMware vSphere VMs section in the Veeam Backup & Replication User Guide.

NOTE

When you perform Instant Recovery to VMware vSphere environment for Azure VMs, you will not be
able to choose a restore mode and configure a helper appliance.

115 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Instant Recovery to Hyper-V
To perform Instant Recovery to Hyper-V environment, do the following:

1. Check that you have added to the backup infrastructure a Microsoft Hyper-V server to which you plan to
restore Azure VMs.

If you have not added a Microsoft Hyper-V server follow the instructions provided in the Adding Microsoft
Hyper-V Servers section in the Veeam Backup & Replication User Guide.

2. Launch and complete the Instant Recovery to Hyper-V wizard as described in Performing Instant Recovery
of Workloads to Hyper-V VMs section in the Veeam Backup & Replication User Guide.

NOTE

When you perform Instant Recovery to Microsoft Hyper-V environment for Azure VMs, you will not
be able to choose a recovery mode.

116 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Restoring to Amazon EC2
Veeam Backup & Replication allows you to restore Azure VMs from image-level backups created with Veeam
Backup for Microsoft Azure as Amazon EC2 instances. You can restore Azure VMs to any available restore point.
For more information on restoring VMs to Amazon EC2, see the Restore to Amazon EC2 section in the Veeam
Backup & Replication User Guide.

To restore Azure VMs as Amazon EC2 instances, do the following:

1. Check limitations and prerequisites listed in the Veeam Backup & Replication User Guide.

2. Launch and complete the Restore to Amazon EC2 wizard.

To do that, open the Home view and navigate to the Ba ckups > E x ternal Repository node in the inventory
pane. In the working area, select VMs that you want to restore. On the ribbon, click Ama zon EC2. Then
follow the instructions provided in the Restoring Machines section in the Veeam Backup & Replication
User Guide.

117 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Restoring to Nutanix AHV
Veeam Backup & Replication allows you to restore Azure VMs from image-level backups created with Veeam
Backup for Microsoft Azure to Nutanix AHV clusters. You can restore VMs to any available restore point.

To perform restore to Nutanix AHV clusters, do the following:

1. Check that you have configured the backup infrastructure required for Veeam Backup for Nutanix AHV as
described in the Deployment section in the Veeam Backup for Nutanix AHV User Guide.

2. Make sure that backups of the necessary Azure VMs are in an on-premises repository. If you have not
copied the backup beforehand, follow the instructions from the Creating Backup Copy Jobs for VMs and
Physical Machines section in the Veeam Backup & Replication User Guide.

To restore Azure VMs from backups stored in the archive tier of a scale-out backup repository, you do not
need to copy backups to on-premises repositories. However, you must retrieve data as described in the
Retrieving Backup Files section in the Veeam Backup & Replication User Guide.

3. Launch and complete the Restore to Nutanix AHV wizard.

To do that, open the Home view after Veeam Backup & Replication finishes copying backups. In the
inventory pane, navigate to the Ba ckups > Disk (Copy) node. In the working area, expand the necessary
job, and select backups of VMs that you want to recover. On the ribbon, in the Restore to AHV section,
click E ntire VM. Then follow the instructions provided in the Restoring VMs Using Veeam Backup &
Replication Console section in the Veeam Backup for Nutanix AHV User Guide.

118 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Restore to Google Compute Engine
Veeam Backup & Replication allows you to restore Azure VMs from image-level backups created with Veeam
Backup for Microsoft Azure to Google Compute Engine (GCE). You can restore VMs to any available restore
point. For more information on restoring VMs to GCE, see the Restore to Google Compute Engine section in the
Veeam Backup & Replication User Guide.

To restore VMs to GCE, do the following:

1. Check limitations and prerequisites listed in the Veeam Backup & Replication User Guide.

2. Launch and complete the Restore to Google wizard.

To do that, open the Home view and navigate to the Ba ckups > E x ternal Repository node in the inventory
pane. In the working area, select VMs that you want to restore. On the ribbon, click Goog le CE. Then
follow the instructions provided in the Restoring Machines section in the Veeam Backup & Replication
User Guide.

119 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Exporting Disks
Veeam Backup & Replication allows you to restore disks of Azure VMs from image -level backups created with
Veeam Backup for Microsoft Azure. You can restore disks in the VMDK, VHD or VHDX format. For more
information on VM disks export, see the Azure VM Disk Export section in the Veeam Backup & Replication User
Guide.

To restore disks of VMs and convert them to the VMDK, VHD or VHDX format:

1. Launch the E x p ort Disk wizard. To do this, open the Home view. In the inventory pane, navigate to
Ba ckups > E xternal Repository. In the working area, select VMs whose disk you want to export. On the
ribbon, click E x port Disks.

2. Complete the wizard as described in the Exporting Disks section in the Veeam Backup & Replication User
Guide.

120 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Restoring Guest OS Files
You can restore individual guest OS files and folders from image-level backups of an Azure VM. When restoring
guest OS files, you do not need to extract image-level backups of VMs to a staging location, or start VMs prior
to a restore. You can restore files and folders directly from image-level backups. For more information on guest
OS file recovery, see the Guest OS File Recovery section in the Veeam Backup & Replication User Guide.

You can restore files from different guest OS file systems using the following methods.

Restoring from FAT, NTFS or ReFS

To restore guest OS files from FAT, NTFS or ReFS file systems, do the following:

1. Check limitations and prerequisites listed in the Veeam Backup & Replication User Guide.

2. Launch and complete the File Level Restore wizard.

To do that, open the Home view and navigate to Ba ckups > E xternal Repository. In the working area,
select a VM whose files you want to restore. On the ribbon, click Guest Files (Windows). Then follow the
instructions provided in the Restoring VM Guest OS Files (FAT, NTFS or ReFS) section in the Veeam Backup
& Replication User Guide.

Restoring from Linux, Unix and Other File Systems

To restore guest OS files from Linux, Unix and other file systems, do the following:

1. Check limitations and prerequisites listed in the Veeam Backup & Replication User Guide.

2. Launch and complete the Guest File Restore wizard.

To do that, open the Home view and navigate to Ba ckups > E xternal Repository. In the working area,
select a VM whose files you want to restore. On the ribbon, click Guest Files (Other). Then follow the
instructions provided in the Restoring VM Guest OS Files (Multi-OS) section in the Veeam Backup &
Replication User Guide.

121 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft A zure Guide
Restoring from Other File Systems
You can restore files from systems other than those listed in the File-Level Restore section in the Veeam Backup
& Replication User Guide. For this purpose, use the Instant Recovery technology. To learn how to use this
technology to restore files, follow the instructions provided in the Restore from Other File Systems section in
the User Guide for Microsoft Hyper-V.

122 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Restoring Application Items
Veeam Backup & Replication provides auxiliary tools called Veeam Explorers that allow you to restore
application items directly from image-level backups of Azure VMs. These backups must be created with the
enabled application-aware processing option.

You can restore items of the following applications:

• Microsoft Active Directory

• Microsoft Exchange

• Microsoft SharePoint

• Microsoft SQL Server

• Oracle Database

To restore application items from backups of Azure VMs:

1. Launch the restore wizard. To do that, open the Home view. In the inventory pane, navigate to Ba ckups >
E x ternal Repository. In the working area, select the necessary VM backup, click Ap p lication Items on the
ribbon and select the necessary application.

2. Complete the restore wizard. To extract the application databases from the backup and open it in the
Veeam Explorer, perform the following steps:

a. At the Restore P oint step of the wizard, select a restore point from which you want to restore
application items.

b. At the Rea son step of the wizard, enter the information on the restore reason for future reference.

c. At the Summary step of the wizard, review the information on the Azure VM whose application items
you want to restore.

Veeam Backup & Replication will open the Veeam Explorer console to select the application that will allow you
to restore application items from the selected backup or snapshot.

123 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
 IMP ORTANT

Mind the following:

• To be able to restore application items in the Veeam Explorer console, you must manually attach the
database that you want to restore. For details on working with Veeam Explorers, see Veeam
Explorers User Guide.
• The backup from which you want to restore must be application-consistent. For details on enabling
the application-consistent backups, see the Enable Application-Aware Processing section in the
Veeam Backup for Microsoft Azure User Guide.

124 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Viewing Statistics
Microsoft Azure Plug-in for Veeam Backup & Replication allows you to view statistics on data recovery
operations that Veeam Backup & Replication perform to recover, restore and export Azure VMs. You can view
the information on the restore reason, the parameters of the restored Azure VMs, the logs of the restore session
and so on.

Veeam Backup & Replication provides information on the following recovery operations that are initiated from
Veeam Backup for Microsoft Azure:

• Entire Azure VM restore

• SQL database restore

• Disk restore

• File-level restore

To view the restore session statistics, do one of the following:

• Open the Home view, in the inventory pane select La st 24 hours. In the working area, double-click the
necessary restore session.

Select the session and click Sta tistics on the ribbon or right-click the session and select Sta tistics.

• Open the History view, in the inventory pane select Restore. In the working area, double-click the
necessary restore session.

Select the session and click Sta tistics on the ribbon or right-click the session and select Sta tistics.

The restore session window will display the following information on restore sessions:

• The top of the window will show general session statistics: a name of the machine whose data is restored,
the account under which the session was started, the session status and duration details.

• The Rea son tab will show the restore reason that was specified when running the restore.

• The P a rameters tab shows information about the restore point selected to restore the files.

125 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
 • The Log tab shows a list of operations performed during the session.

126 | V eeam Backup & Replication | Integration with Veeam Backup for Microsoft Azure Guide
Features and Plug-In Versions
The following table shows major features that were added in each version of Microsoft Azure Plug -in for Veeam
Backup & Replication:

Microsoft Azure Plug-in for Fea tures

Veeam Backup & Replication
version

• Connecting and deploying an appliance

• Deploying standard backup repositories

11.0.2.x • Azure VM protection

• Restore of Azure VMs
• Azure user account in the Government region (11.0.2.167)

• SQL database protection

11.0.3.x • Restore of SQL databases

• Deploying archive repositories

127 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft A zure Guide
Support Information
If you have any questions or issues with Microsoft Azure Plug -in for Veeam Backup & Replication, Veeam Backup
& Replication or Veeam Backup for Microsoft Azure, you can search for a resolution on Veeam R&D Forums or
submit a support case in the Veeam Customer Support Portal.

When you submit a support case, we recommend you provide information on the installed products to the
Veeam Customer Support Team. Product logs contain this information.

To export logs, do the following:

1. From the main menu of the Veeam Backup & Replication console, select Help > Support Information.

2. At the Scop e step of the E x port Logs wizard, select E x port all logs for selected components.

3. In the Ma naged servers list, select the Veeam Backup & Replication server, Veeam Backup for Microsoft
Azure appliances and other components for which you want to export logs.

4. Complete the wizard as described in the Export Logs section in the Veeam Backup & Replication User
Guide.

128 | V eeam Backup & Replication | Integration with V eeam Backup for Microsoft Azure Guide