(http://www.msexchange.

org)
Home Articles & Tutorials KBase Tips Products Reviews Free Tools Blogs Tech Topics Forums White Papers Contact Us

Home Articles&Tutorials Exchange2016Articles HighAvailability&Recovery

Protecting Exchange with Azure Backup (Part 2)

by Rui Silva [Published on 19 May 2016 / Last Updated on 19 May 2016]

Tweet Share 4 Like Share 6 4 Share 5

PreparingtheenvironmenttobackupworkloadsusingAzureBackupServer.

Ifyouwouldliketoreadtheotherpartsinthisarticleseriespleasegoto:

ProtectingExchangewithAzureBackup(Part1)(http://www.msexchange.org/articlestutorials/exchange2016articles/highavailabilityrecovery/protectingexchangeazure
backuppart1.html)
ProtectingExchangewithAzureBackup(Part3)(http://www.msexchange.org/articlestutorials/exchange2016articles/highavailabilityrecovery/protectingexchangeazure
backuppart3.html)

Download and Install the Software Package

AftercreatingtheBackupVault,itstimetodownloadthepackagethatwillinstallthebackupservices.

1.OntheWindowsAzurePortal,clickRecoveryServicesandopentheDashboardoftheservicepreviouslycreated.FromtheretheresanoptiontoDownloadMicrosoft
AzureforApplications(Figure1).Thedownloadpagewillthenopen(Figure2).

Figure1:DownloadMicrosoftAzureforApplications
Figure2:MicrosoftAzureBackupdownloadpage

2.Afteryou'vedownloadedallthefiles,clickMicrosoftAzureBackupInstaller.exe.ThiswillstarttheMicrosoftAzureBackupSetupWizardtoextractthesetupfilestoalocation
specifiedbyyou.ContinuethroughthewizardandclickontheExtractbuttontobegintheextractionprocess(Figure3,Figure4andFigure5).

Figure3:MicrosoftAzureBackupSetupWizard
Figure4:SelectDestinationLocation

Figure5:ReadytoExtract

3.Oncetheextractionprocesscompletes,checktheboxtolaunchtheextractedsetup.exetobegininstallingMicrosoftAzureBackupServerandclickontheFinishbutton
(Figure6).ClickMicrosoftAzureBackuptolaunchthesetupwizard(Figure7).PleasebeawarethatthesetupinstallstheMicrosoftVisualVC++2010components(Figure
8).

Figure6:Executesetup.exe
Figure7:InstallMicrosoftAzureBackup

Figure8:MicrosoftVisualVC++2010

4.OntheWelcomescreenclicktheNextbutton(Figure9).ThistakesyoutothePrerequisiteCheckssection(Figure10).Onthisscreen,clickontheCheckbuttonto
determineifthehardwareandsoftwareprerequisitesforAzureBackupServerhavebeenmet.Ifalloftheprerequisiteshavebeenmetsuccessfully,youwillseeamessage
indicatingthatthemachinemeetstherequirements.ClickontheNextbutton.

Figure9:MicrosoftAzureBackupsetup
Figure10:PrerequisiteChecks

5.MicrosoftAzureBackupServerrequiresSQLServerStandard,andtheAzureBackupServerinstallationpackagecomesbundledwiththeappropriateSQLServerbinaries
needed.WhenstartingwithanewAzureBackupServerinstallation,youshouldpicktheoptionInstallnewInstanceofSQLServerwiththisSetupandclicktheCheckand
Installbutton(Figure11).Oncetheprerequisitesaresuccessfullyinstalled,clickNext.

Figure11:SQLSettings

6.IfsomeoftheprerequisitesforSQLServerarenotmet,theinstallationwillnotcontinueandyoullgetamessageliketheonedepictedinFigure12.ClickCancel,installthe
necessaryrequisitesandthenrelaunchthewizard.Hopefully,onthesecondtime,theprerequisitecheckwillpasswithnoerrors(Figure13).ClickNext.
Figure12:SQLSettingserrors

Figure13:SQLprerequisitescheck

7.ProvidealocationfortheinstallationofMicrosoftAzureBackupserverfilesandclickNext(Figure14).ThescratchlocationisarequirementforbackuptoAzure.Ensurethe
scratchlocationisatleast5%ofthedataplannedtobebackeduptothecloud.Fordiskprotection,separatedisksneedtobeconfiguredoncetheinstallationcompletes.For
moreinformationregardingstoragepools,seeConfigurestoragepoolsanddiskstorage(https://technet.microsoft.com/library/hh758075.aspx).
Figure14:InstallationSettings

8.ProvideastrongpasswordforrestrictedlocaluseraccountsandclickNext(Figure15).

Figure15:SecuritySettings

9.SelectwhetheryouwanttouseMicrosoftUpdatetocheckforupdatesandclickNext(Figure16).
Figure16:MicrosoftUpdateOptIn

10.ReviewtheSummaryofSettingsandclickInstall(Figure17).

Figure17:SummaryofSettings

11.Theinstallationhappensinphases.InthefirstphasetheMicrosoftAzureRecoveryServicesAgentisinstalledontheserver.ThewizardalsochecksforInternetconnectivity.If
Internetconnectivityisavailableyoucanproceedwithinstallation,ifnot,youneedtoprovideproxydetailstoconnecttotheInternet.ClickNext(Figure18):
Figure18:ProxyConfiguration

Figure19:Installation
Figure20:Installation(cont.)

12.ThenextstepistoconfiguretheMicrosoftAzureRecoveryServicesAgent.Asapartoftheconfiguration,youwillhavetoprovideyourvaultcredentialstoregisterthemachine
tothebackupvault.ThevaultcredentialfileisdownloadedthroughasecurechannelfromtheAzureportal.
IntheleftnavigationpaneoftheAzureManagementPortal,clickRecoveryServices,andthenselectthebackupvaultthatyoucreated.OntheQuickStartpage,clickVault
credentials(Figure21).Theportalgeneratesavaultcredentialbyusingacombinationofthevaultnameandthecurrentdate.Thevaultcredentialsfileisusedonlyduringthe
registrationprocessandexpiresafter48hours.
Savethefiletolocaldiskand,backtotheRegisterServerWizard(Figure22),browsetothefilelocationandclickNext.

Figure21:Vaultcredentials
Figure22:VaultIdentification

13.Youwillalsoprovideapassphrasetoencrypt/decryptthedatasentbetweenAzureandyourpremises.Youcanautomaticallygenerateapassphraseorprovideyourown
minimum16characterpassphrase(Figure23).ClickNextandcontinuewiththewizarduntiltheagenthasbeenconfigured.
IgottheerrordepictedonFigure24.ItriedonceagainbyclickingPreviousandNext,andtheerrorwentaway.

Figure23:EncryptionSetting
Figure24:ServerRegistrationerror

14.OnceregistrationoftheMicrosoftAzureBackupserversuccessfullycompletes,theoverallsetupwizardproceedstotheinstallationandconfigurationofSQLServer.Oncethe
SQLServercomponentinstallationcompletes,theAzureBackupServercomponentsareinstalled(Figure25).ClickClose.

Figure25:Installationsuccessful

15.Whentheinstallationstephascompleted,theproduct'sdesktopiconswillhavebeencreatedaswell.JustdoubleclicktheiconofMicrosoftAzureBackupServertolaunch
themanagementconsole.

YouneedtoaddbackupstorageevenifyouplantosenddatatoAzure,sincethefirstbackupcopyiskeptonstorageattachedtotheAzureBackupServermachine.Inthecurrent
architectureofAzureBackupServer,theAzureBackupvaultholdsthesecondcopyofthedatawhilethelocalstorageholdsthefirst(andmandatory)backupcopy.

16.InMicrosoftAzureBackupConsole,intheManagementtaskarea,ontheDiskstab,intheActionspane,clickAdd(Figure26).Incaseawarningpopsupstatingthatthe
diskwillbeconvertedtodynamic,clickYes.ThediskwillshowupasbelongingtotheDPMstoragepool(Figure27).
Figure26:AddDiskstoStoragePool

Figure27:StoragePoolDisks

Advertisement

Network Connectivity
AzureBackupServerrequiresconnectivitytotheAzureBackupservicefortheproducttoworksuccessfully.TovalidatewhetherthemachinehastheconnectivitytoAzure,usethe
GetDPMCloudConnectioncmdletintheAzureBackupServerPowerShellconsole.IftheoutputofthecmdletisTRUEthenconnectivityexists(Figure28),elsethereisno
connectivity.
Figure28:GetDPMCloudConnection

Atthesametime,theAzuresubscriptionneedstobeinahealthystate.Tofindoutthestateofyoursubscriptionandtomanageit,logintothesubscriptionportal(Figure29).

Figure29:AzureManagementPortal

OnceyouknowthestateoftheAzureconnectivityandoftheAzuresubscription,youcanusethetablebelowtofindouttheimpactonthebackup/restorefunctionalityoffered.

ConnectivityState Azure BackuptoAzure Backuptodisk Restorefrom Restore

Subscription Azure fromdisk

Connected Active Allowed Allowed Allowed Allowed

Connected Expired Stopped Stopped Allowed Allowed

Connected Deprovisioned Stopped Stopped StoppedandAzure Stopped

recoverypoints
deleted

Lostconnectivity> Active Stopped Stopped Allowed Allowed

15days

Lostconnectivity> Expired Stopped Stopped Allowed Allowed

15days

Lostconnectivity> Deprovisioned Stopped Stopped StoppedandAzure Stopped

15days recoverypoints
deleted

Table1:Backup/restorefunctionality

IfyouhaveafirewalloraproxythatispreventingaccesstoAzure,youneedtowhitelistthefollowingdomainaddressesinthefirewall/proxyprofile:

www.msftncsi.com
 *.microsoft.com
*.windowsazure.com
*.microsoftonline.com
*.windows.net

Configure the Agent

Beforeyoucontinue,makesurethatalltheprerequisitesforusingMicrosoftAzureBackuptoprotectworkloadshavebeenmet.Theseprerequisitesincludethefollowing:

AbackupvaultontheAzuresitehasbeencreated.
AgentandvaultcredentialshavebeendownloadedtotheAzureBackupServer.
TheagentisinstalledontheAzureBackupServer.
ThevaultcredentialswereusedtoregistertheAzureBackupServer.

ToinstalltheDPMprotectionagent(yes,itscalledDPMagent)ontheExchangeserver,opentheMicrosoftAzureBackupServerconsole,gototheManagementpaneandclick
Installtolaunchtheagentinstallationwizard.

Insomecircumstances,youmustinstalltheprotectionagentmanually,forexample,whenthecomputerthatyouwanttoprotectisbehindafirewall,inaworkgroup,orinadomain
thatdoesnothaveatwowaytrustrelationshipwiththedomainwheretheAzureBackupServerislocatedin.Aftermanuallyinstallinganagent,youhavetoattachthecomputerin
MicrosoftAzureBackupServerconsole.

1.Tomanuallyinstalltheprotectionagentonthetargetedcomputer,openanelevatedCommandPromptwindow,andthenrunthefollowingcommand,asdepictedinFigure
31:

\\<DPMServerName>\ProgramFiles\MicrosoftSystemCenter2012\DPM\DPM\ProtectionAgents\RA\4.1.<buildnumber>.0\amd64\<language
code>\DpmAgentInstaller_x64.exe<DPMServerName>

Figure30:Locationoftheagentinstallationfiles

Figure31:Manualinstallationoftheagent

Figure32:Agentinstallationcompletedsuccessfully

2.InMicrosoftAzureBackupServerconsole,onthenavigationbar,clickManagement,andthenclicktheAgentstab.IntheActionspane,clickInstall.TheProtectionAgent
InstallationWizardopens.OntheSelectAgentDeploymentMethodpage,selectAttachagents,selectComputerontrusteddomain,andthenclickNext(Figure33).
3.OntheSelectComputerspage(Figure34),selectoneormorecomputersfromtheComputernamelist,clickAdd,andthenclickNext.
Figure33:SelectAgentDeploymentMethod

Figure34:SelectComputers

4.OntheEnterCredentialspage(Figure35),typetheusernameandpasswordforadomainaccountthatisamemberofthelocaladministratorsgrouponallselectedservers
andclickNext.
5.OntheSummarypage(Figure36),clickInstalltobegintheinstallation.OntheInstallationpage,theresultsappearontheTasktabtoindicatewhethertheinstallationis
successfulornot.ClickClose.
Figure35:EnterCredentials

Figure36:Summary
Figure37:Attachcompleted

Summary
InthesecondpartofthisarticlewecoveredtheinstallationoftheAzureBackupServerandtheconfigurationoftheDPMagent.Inthenextandfinalpartofthisarticlewellcoverhow
toprotectExchangeServerandrestoremailboxdatabasesandsingleusermailboxes.

Ifyouwouldliketoreadtheotherpartsinthisarticleseriespleasegoto:

ProtectingExchangewithAzureBackup(Part1)(http://www.msexchange.org/articlestutorials/exchange2016articles/highavailabilityrecovery/protectingexchangeazure
backuppart1.html)
ProtectingExchangewithAzureBackup(Part3)(http://www.msexchange.org/articlestutorials/exchange2016articles/highavailabilityrecovery/protectingexchangeazure
backuppart3.html)

See Also

(http://techgenix.com/migrate (http://techgenix.com/microsoft

exchange20102016/?li_source=LI&li_medium=defaultwidget) exchangeserver2016features/?li_source=LI&li_medium=defaultwidget)

HowtomigratefromMicrosoftExchange2010toExchange2016 IsMicrosoftExchangeServer2016rightforyou?(http://techgenix.com/microsoft
(http://techgenix.com/migrateexchange20102016/?li_source=LI&li_medium=default exchangeserver2016features/?li_source=LI&li_medium=defaultwidget)
widget)

(http://techgenix.com/whats (http://techgenix.com/microsoft

newmicrosoftexchange2016/?li_source=LI&li_medium=defaultwidget) exchangetlssslpractices/?li_source=LI&li_medium=defaultwidget)

WhatsnewinMicrosoftExchange2016?(http://techgenix.com/whatsnewmicrosoft BestandworstpracticesforMicrosoftExchangeTLSandSSL
exchange2016/?li_source=LI&li_medium=defaultwidget) (http://techgenix.com/microsoftexchangetlssslpractices/?
li_source=LI&li_medium=defaultwidget)

(http://techgenix.com/forget1

(http://techgenix.com/exchangespamnotification/?li_source=LI&li_medium=default billionpasswords/?li_source=LI&li_medium=defaultwidget)
widget)
Forgetthe1billionpasswords!(http://techgenix.com/forget1billionpasswords/?
MakeyourjobeasierwithExchangesspamnotification li_source=LI&li_medium=defaultwidget)
(http://techgenix.com/exchangespamnotification/?li_source=LI&li_medium=default
widget)