'CloudInternalError' while creating Enhanced policy Backup for Windows VM on a private Recovery services vault, the VM connectivity to vault private endpoints are working but backup cannot be enabled. How to fix it ?

Question

Need help to solve this issue.

Scenario

Deployed a SQL Server 2022 on windows server 2022 virtual machine.

Have create Recovery services vault on the same resource group and enabled private access.

Trying to Backup with Standard Policy is working

The data disks in the VM has public access enabled and using Standard SSD

Backup with Enhanced Policy is failing

Error

The deployment runs for 5 to 10 min and throws this error. Tried to deploy from Azure Portal and Terraform

{
  "code": "CloudInternalError",
  "message": "Microsoft Azure Backup encountered an internal error."
}

Troubleshooting Done

1. Added registry key as provided in the https://learn.microsoft.com/en-us/azure/backup/backup-azure-vms-troubleshoot#troubleshoot-vm-snapshot-issues.

REG ADD "HKLM\SOFTWARE\Microsoft\BcdrAgent" /v UseVssFullBackup /t REG_SZ /d True /f

1. Reinstalled VM Agent ( https://learn.microsoft.com/en-us/azure/backup/backup-azure-vms-troubleshoot#vm-agent )
2. Added Inbound/Outbound on All 443 traffic in NSG rule (both private endpoint subnet and VM subnet).
3. Verified Connectivity to connectivity to xxxxxxxxx.privatelink.sea.backup.windowsazure.com in the VM.

Answer 1

Hello @kishore kumar Thank you for posting your question on Microsoft Q&A platform. Happy to help!

Based on the information you provided, I understand that you are trying to enable backup for an Azure VM running SQL Server 2022 on Windows Server 2022 with enhance policy and getting the below error

{
  "code": "CloudInternalError",
  "message": "Microsoft Azure Backup encountered an internal error."
}

Azure VMs that are already protected with an existing backup policy cannot be switched to Enhanced policy. Enhanced policy is only available to unprotected VMs that are new to Azure Backup.

Workaround/Solution:

• Please stop backup with deleting existing backup data and re-configure backup on the VM with enhanced policy.
• If you have Soft Delete enabled on the Recovery Services Vault will be required to disable the Soft Delete feature first and then delete the existing backup data.
• · Disabling soft delete using Azure portal
• Once the existing backup data was removed from the Vault you can enable the Backup again on the VM in question using the Enhanced Backup Policy.
• Remember to enable the soft delete again once all changes were applied.

Hope this helps. Please write back to us if you have any further questions.

---

If the response helped, do "Accept Answer" and up-vote it

Answer 2

Solution:
There was a misconfiguration in the Enhanced Backup Policy. The instance restore days should be less than the daily retention days.