SQL Backup Issue - Getting connectivity error while enabling the SQL backup

Question

I am getting below mentioned error while enabling the SQL backup from Azure Portal/Powershell.

Error -> Workload Backup extension on the virtual machine is not able to contact Azure Backup service due to network connectivity issues. Connection timeouts can be transient, use the re-register option available in the Backup Infrastructure pane in the vault to re-register the virtual machine with Azure backup service and then retry the operation. Ensure that TLS 1.2 is not blocked. Follow the steps mentioned at https://go.microsoft.com/fwlink/?linkid=2091800 to self-diagnose the network issues. If the issue persists, please contact Microsoft support.

Answer 1

Hi Abhishek Zende

Thanks for the Question and using Microsoft Q&A

 As we understand that, Workload Backup extension on your VM is unable to communicate with the Azure Backup service due to network connectivity issues. Here are some steps to troubleshoot and resolve the issue:

 To fix the issue, you'll need to re-register your virtual machine (VM) with Azure Backup so it can reconnect properly. Here's how you can do that:

1. Log into the Azure Portal
2. Go to your Recovery Services Vault
3. Find the Backup Infrastructure section – Inside this, look for Azure Workload Backup, which handles SQL backups on VMs.
4. Locate your affected VM – You'll see a list of registered VMs. Find the one that's having the issue.
5. Click on "Re-register" 
6. Wait for the process to complete – It might take a few minutes.
7. Try enabling SQL backup again – Once the re-registration is done, retry setting up the backup and see if it works.

Ensure TLS 1.2 is Enabled : 

Azure Backup requires TLS 1.2 for secure communication. To check if TLS 1.2 is enabled, run the following PowerShell command:

[Net.ServicePointManager]::SecurityProtocol

If TLS 1.2 is not listed, enable it by running:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

 Validate Network Connectivity

Ensure that your VM can reach Azure Backup service endpoints by testing the connection:

Test-NetConnection -ComputerName [Azure Backup Service URL] -Port 443

 Confirm that your firewall or Network Security Group (NSG) rules allow outbound traffic on port 443 (HTTPS).  

I hope this information helps. Please do let us know if you have any further queries.