question

GaryAu-9083 avatar image
0 Votes"
GaryAu-9083 asked JRMcVicker-4246 answered

Azure Backup Server and Backing up On-prem

Hello,

I'm trying to setup Azure Backup Server to connect with our on premise ESXI hosts (stand alone, no vcenter), I went through the documentation on setting it up and I am running into a snag where I'm not sure if it's HTTPS that's preventing the connection to the servers as I imported the certificates, if I have to setup an account that is not root admin within the vm servers or if this will only work if you have a vcenter setup?

error that shows up is:

Data Protection Manager Error ID: 33623
Unable to communicate with VMware Server

Internal error code: 0x80990EF2
Please ensure that the specified VMWARE server is up and running and reachable from DPM server. Also, ensure the right credentials are specified for interacting with specified vmware server.

azure-backup
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@GaryAu-9083 Do you mind sharing with me the documetion you used to set up Azure Backup Server to connect with on prem ESXI host. I dont seem to be getting very far with what Ive found so far. Thank you

0 Votes 0 ·

Unfortunately I'm not having the best luck either, you could try this:

https://community.spiceworks.com/topic/2194791-esxi-6-7-ssl-certificates-without-vcenter

You'll have to generate a SSL cert, just not a subject matter expert on this.

0 Votes 0 ·
LeonLaude avatar image
0 Votes"
LeonLaude answered LeonLaude commented

Hi @GaryAu-9083,

First of all make sure your ESXi is supported by the Azure Backup Server:

Azure Backup Server V3 RTM protection matrix
https://docs.microsoft.com/en-us/azure/backup/microsoft-azure-backup-server-protection-v3

MABS (Azure Backup Server) V3 UR1 protection matrix
https://docs.microsoft.com/en-us/azure/backup/backup-mabs-protection-matrix

You will receive the 0x80990EF2 or 0x8099DEF2 errors when trying to add the ESX server to Azure Backup Server if the credentials are incorrect, of if there is no valid trusted certificate, or if the ESX server has the lockdown option enabled because it’s being managed by vCenter.

By default, Azure Backup Server communicates with VMware servers over HTTPS. To set up the HTTPS connection, download the VMware Certificate Authority (CA) certificate, and import it on the Azure Backup Server. If you don't want to use HTTPS you can disable the HTTP certification validation.

You'll also need to ensure that the following ports are opened between your Azure Backup Server and your ESXi host:

  • TCP 442

  • TCP 902

For more information, see:

Back up VMware VMs with Azure Backup Server
https://docs.microsoft.com/en-us/azure/backup/backup-azure-backup-server-vmware


If the reply was helpful please don't forget to upvote and/or accept as answer, thank you!


Best regards,
Leon

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

442 and 902 are open, I did try to disable HTTPS with the reg file but MABS still wouldn't connect with the ESX server. Lockdown option is not on in the ESX.

Will MABS take root credentials? or do I have to make a specific account for backups?

0 Votes 0 ·

It should be able to take the root credentials but I would recommend creating a separate user for this in your VMware:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-backup-server-vmware#create-a-vmware-role

1 Vote 1 ·
JRMcVicker-4246 avatar image
0 Votes"
JRMcVicker-4246 answered

@GaryAu-9083 did you ever resolve this issue? I am trying to setup MABS and connect to our vCenter environment and I'm running into the same error.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.