Use backup vaults to protect items
Updated: September 19, 2014
Azure Backup uses backup vaults to store items backed up from your on-premise servers. You must create the backup vaults using the Azure Management Portal before you configure your on-premise servers to backup to Azure. Once you have created the backup vault, you can then register the backup vault with the on-premise server.
To create the relationship between the on-premise server and the Azure backup vault, you use a certificate or credential. Previously Azure Backup used a public certificate to identify or register the on-premise server with the Azure vault. If you have established a vault with a certificate, you can still use that certificate. But now, any new vault will be registered to an on-premise server using a vault credential. The following information takes you through the high-level process for creating a backup vault.
To access the Azure portal, you must have an Azure account. Open the Azure portal and click Recovery Services, then Create a New Vault, to create your backup vault.
Once you have created your vault, you need a certificate or credential to register your vault with the on-premise server. Previously you would need to either create or acquire an X.509 v3 certificate and upload it to the server. If you have existing vaults that use certificates, you may continue using these certificates. If you are creating a new backup vault, you must use a credential that is generated in the portal. It is very easy, and it speeds up the vault creation process because you generate and download the vault credential in seconds.
In the Azure portal select your backup vault and from the Quick Start page click Download vault credentials
The portal generates the credentials and names the credentials a combination of the vault name and current date. In the open or save dialog, click Save. The credentials are saved to the Downloads folder for the active account.
Once the credential has been successfully uploaded the certificate thumbprint and expiration date with be displayed on the dashboard. Credentials have a 2-day lifespan.
Agents are used to prepare content for backup on servers. There are different agents for different types of servers. Each of the agents are available on the Microsoft Download Center and have their own installation process.
Registering a server with Azure Backup creates a storage space allocation in the Azure backup vault for the server, and it associates the server with your subscription. Each server that you want to back up items from must be registered before any backups can occur.
Registration is performed using your locally installed agent. Once a server has been successfully registered its name will be displayed on the Servers tab of the backup vault.
Selecting items to protect identifies the files, folders, volumes, or Virtual Machines that you want to backup to Azure.
You identify these items using the local agent to establish a backup schedule that includes the individual data that you want backed up. Once the backup schedule has been run, the items you selected will be displayed in the Protected Items tab of the backup vault.