Month: January 2015

Azure Backup is a service from the Azure environment that can be used to back up on premise machines, on premise virtual machines and cloud virtual machines. My first test was if an IAAS VM from Azure could be backed up by Azure Backup. The Azure Backup service is not advertised to do the last option but a customer is planning on moving the Hyper-V environment partly to Azure and there also needed to be a backup in place for the environment. Of course you can use Data Protection Manager or other systems but the drawback is that you need an extra VM for DPM and it is not really with the cloud in mind if there is a service that is able to back up your environment. So I started to test Azure Backup with my home/test environment. No extra charges when you have a Visual Studio Ultimate subscription with MSDN. It has a 115 EURO free of charge limit for testing purposes.

Below is the complete process of configuring the Azure Backup solution. For cost reasons I have used a Self-Signed Certificate instead of a certificate that needs to be bought. So if you would like to try this out yourself the only thing you need is an Azure account with some spending room. There are test Azure offers where you are limited in what you can use. If you would like more spending room you can always get your credit card and test some further… It is all up to you.

In short the following steps are taken:

  1. Create a Self-Signed Certificate
  2. Create the Backup Vault and upload the certificate to Azure
  3. Export the certificate from MMC
  4. Import the certificate on the VM
  5. Run WBInstaller.exe on the Virtual Machine
  6. Register Server
  7. Schedule backup

 

The following steps need to be done once:

 

Create a Self-Signed Certificate

Start Visual Studio Command Prompt

%comspec% /k “”C:\Program Files (x86)\Microsoft Visual Studio 11.0\VC\vcvarsall.bat”” x86_amd64

Use the following statement to create a Self-Signed Certificate

makecert.exe -r -pe -n CN=AzureBackup -ss my -sr localmachine -eku 1.3.6.1.5.5.7.3.2  -e 12/12/2040  -len 2048 C:\Temp\AzureBackup.cer

 

Create the Backup Vault and upload the certificate to Azure

  1. Create new Backup Vault in Azure by clicking + and choose Data Services, Recovery Services, Backup Vault and Quick Create
  2. Enter a name for the Backup Vault and choose a region near you (Western Europe in my case) and click on Create Vault
  3. After the message is displayed that the Vault is created select the Vault
  4. Click on the Manage Certificate icon in the screen and browse to the CER file you created and click (V)
  5. After this is completed succesfully click on Download Agent (WBInstaller.exe)

 

Export the certificate from MMC

Start MMC and add Snap-In Security on the machine where the Certificate is created

  1. Right click on the AzureBackup certificate in Certificates\Personal\Certificates and choose All Tasks and Export
  2. Click Next in the Welcome to the Certificate Export Wizard screen
  3. Select Yes, export the private key in the Export Private Key screen (if this screen does not show, delete the AzureBackup certificate and start all over) and click Next
  4. Select Personal Information Exchange (PKCS #12 (.PFX) and Include all certificates in the certification path if possible in the Export File Format screen and click Next
  5. Select Password and enter a password twice and click Next
  6. Browse to the file location where you would like to save the exported file and name the file in the File tot Export screen and click Next
  7. Check the choices in the Completing the Certificate Export Wizard screen and click Finish if all is ok
  8. On the Certificate Import Wizard message: “The Export was successful” click OK

 

The following steps need to be done on every Virtual Machine that needs to be backed up by Azure Backup

 

Import the certificate on the VM

  1. Copy the PKF certificate file and the WBInstaller.exe to the virtual machine or create a network share accessible from the Virtual Machine where you place the files.
  2.  Import the certificate (AzureBackupExport.PFX) in the Security MMC console on the Virtual Machine that needs to be backed up
  3. Start MMC and add Snap-In Security on the Virtual Machine
  4. Right click on Certificates(Local Computer)\Personal and choose All Tasks and Import
  5. Select Local Machine in the Welcome to the Certificate Import Wizard and click Next
  6. Browse to the file location where you saved the exported file and select the file type Personal Information Exchange (PFX) in the File tot Import screen and click Next
  7. Enter the Password for the PFX file and select Include all extended properties in the Private key protection screen and click Next
  8. Select Place all certificates in the following store [Personal] in the Certificat Store screen and click Next
  9. Check the settings in the Completing the Certificate Import Wizard screen and click Finish
  10. On the Certificate Import Wizard message: “The Import was successful” click OK

 

Run WBInstaller.exe on the Virtual Machine

  1. Click I accept the terms of the Supplemental Notice in the Supplemental Notice screen and click OK
  2. In the screen Prerequisites Check click on Next
  3. Change the Installation folder and the Cache Location at will or leave it default and click on Next
  4. Select Use Microsoft Update when I check for updates (recommended) or I do not want to use Microsoft Update and click Install
  5. Wait untill the WBInstaller completes and leave Check for newer updates in the Installation screen and click Finish
  6. In the Before You Begin screen click Next
  7. In the screen Upgrade Process click Finish
  8. Check for Updates and install these

 

Register Server

  1. When finished installing updates start Windows Azure Backup (shortcut on the Desktop)
  2. Click on Register Server in the top right of the application
  3. Click on Next in the Proxy Configuration screen
  4. Click on Browse and select the correct certificate in the Vault Identification screen and click Next
  5. Select the Backup Vault in the Vault Identification screen and click Next
  6. Click on Generate Passfrphase or create one your own and Enter a location to save the passphrase in the Encryption Setting screen and click Register
  7. Click Close in the Server Registration screen

 

Schedule backup

  1. Click on Schedule Backup in the top right of the application
  2. Click Next in the Getting Started screen
  3. Click on Add Items and select what you would like to backup in the Select Items to Backup screen
  4. Click on Exclusion Settings an select what files you do not want to backup
  5. Click Next in the Select Items to Backup Screen
  6. Select the days and times the backup needs to run in the Specify Backup Time screen and click on Next
  7. Select the number of days retention time in the Specify Retention Setting screen and click Next
  8. On the Confirmation screen click Finish
  9. Click Close in the Modify Backup Progress screen

 

Backup Now

  1. If needed click on Backup Now in the top right corner of the application
  2. In the Confirmation screen click Back Up
  3. You may close the Backup progress screen if needed. The backup will continue

 

Good luck! If you have any questions please let me know! Next blogpost will be on restoring your data.