Skip to main content

Quick reference guide to protect Azure VMs

Step-by-step guide to get started with configuring your Azure VMs for backup and restore

Updated today

Welcome! This guide helps you set up backups for your Azure VMs and their managed disks.

Quick steps 2.png

Understand Azure VM data protection

Druva helps protect your Azure VMs from data loss, ransomware, and other issues. Here's how:

  • No extra software: It works without needing to install anything extra on your VMs.

  • Secure storage: Your backups are stored safely in an air-gapped cloud environment managed in AWS.

  • Easy recovery: You can easily restore your data across different Azure regions or subscriptions.

  • Cost-effective: It's designed to be budget-friendly.

Additional resources to help you get started:

Get started with Enterprise Workloads

Log into the management console to:

  1. Create and manage Administrators and Administrative Groups.

  2. Enable organizations. Alternatively, you may use the Default Organization.

Plan and set up your Azure VM environment

  1. Check compatibility: Make sure your Azure VM setup is supported. Check the support matrix for details on features, encryption, and supported AWS, Azure, and Gov Cloud regions.

  2. Access and permissions: You must have the Global Administrator role with Microsoft.Authorization/roleAssignments permission. Alternatively, you must have Owner access at the tenant level. To know more, see Roles and permissions for Azure VMs.

  3. Application registration: The Global Administrator role is required to:

    • Register the application in Azure Entra ID.

    • Define and assign custom roles.

    • Provision the Resource Group and Azure Key Vault.

    • Ensure that the Users can register applications setting is enabled in Azure Entra ID.

  4. Service configuration: The subscription must have Azure Key Vault service (Microsoft.KeyVault) registered under Resource Providers.

Onboard Azure Subscriptions

  1. Register your Azure Tenant and authorize Druva to add new subscriptions.

  2. Assign an administrative group to manage subscriptions. If none exist, create one.

  3. Choose Druva storage based on the Azure region where your data resides.

  4. Authorize subscriptions by allowing Druva to create an access key in Azure Key Vault. This key secures your backups.

Once added, Druva automatically detects and lists the VMs under the Azure subscription.

Configure Azure VMs for backup

To configure virtual machines, first create backup policies and define backup settings.

You can configure backup using:

Restore Azure virtual machines

On successful backup, you can perform the following restores:

  1. Full Restore: You can restore a virtual machine along with any associated managed disks to the same storage region or across regions.

  2. File-level Restore: You can restore specific files and folders from Azure disk backups. You can recover files and folders to a custom storage container within your chosen Region and Storage Account.

Protect Azure VMs from Cyber-threats

Druva’s Cyber Resiliency solutions safeguard backup data from cyber threats, automate recovery, and deliver real-time security monitoring. Achieve fast, secure, and efficient data restoration with advanced capabilities like Quarantine Bay, Restore Scan, Sandbox Recovery, Data Anomalies, Threat Hunt, and Rollback Actions.

  • Quarantine for Virtual Machines - Protects your organization from ransomware spread by leveraging the Quarantine Bay feature to isolate infected Azure Virtual Machine (VM) snapshots.

  • Threat Hunt: Searches for malware Indicators of Compromise (IoCs). Identifies and neutralizes threats to data centers and your virtualization software.

📌 Additional information

Did this answer your question?