I'm trying to backup a new Server 2022 VM on Azure but cannot because I get the error "Standard policy not supported for Trusted Azure VMs". However, I cannot seem to create an Enhanced Backup Policy - there simply is no option to do this (perhaps in my region? Aust East). I can't find a way to disable Trusted VM either. I can turn off Secure Boot and vTPM, but not Trusted VM itself. Any ideas (short of just trashing the whole VM and creating a new one)?

@Patrick Sims Welcome to Microsoft Q & A Community Forum. You were trying to back up a Trusted Launch VM , however you were prompted with an error "Standard policy not supported for Trusted Azure VMs" . Kindly note that Trusted Launch VM is supported with Enhanced policy only. To enroll your subscription for backup of Trusted Launch VM, write to us at askazurebackupteam@microsoft.com. For more information, refer to this document . To change the trusted launch vm configuration, in the left menu, select Configuration under the Settings section. You can enable or disable Secure Boot and vTPM from the Trusted LaunchSecurity type section. Select Save at the top of the page when you are done. Which I assume you are able to do it. But can you elaborate what you meant by disabling the trusted vm ? Are you trying to shut it down?

Azure Backup Standard policy not supported for Trusted Azure VMs

Accepted answer

SwathiDhanwada-MSFT 17,236 Reputation points

2022-02-09T09:13:58.14+00:00

@Patrick Sims Welcome to Microsoft Q & A Community Forum. You were trying to back up a Trusted Launch VM , however you were prompted with an error "Standard policy not supported for Trusted Azure VMs" . Kindly note that Trusted Launch VM is supported with Enhanced policy only. To enroll your subscription for backup of Trusted Launch VM, write to us at askazurebackupteam@microsoft.com. For more information, refer to this document.

To change the trusted launch vm configuration, in the left menu, select Configuration under the Settings section. You can enable or disable Secure Boot and vTPM from the Trusted LaunchSecurity type section. Select Save at the top of the page when you are done. Which I assume you are able to do it. But can you elaborate what you meant by disabling the trusted vm ? Are you trying to shut it down?
Please sign in to rate this answer.

3 people found this answer helpful.
Patrick Sims 21 Reputation points

2022-02-09T09:31:46.603+00:00

Thanks, I will email to enroll my subscription to be able to use Enhanced Policy / Backup Trusted Launch VM.

In regards disabling Trusted VM, I was trying to do that so that I could do the backup using Standard Policy. I couldn't find a way to disable Trusted VM (only disable Secure Boot and vTPM). I don't really want about Trusted VM, but I do care about Backup.

SwathiDhanwada-MSFT 17,236 Reputation points

2022-02-15T06:33:30.97+00:00

@Patrick Sims As far as I know, even though you disable the Secure boot and vTPM. Its still considered as Trusted Launch VM. As mentioned earlier, Trusted Launch VM is supported with Enhanced policy only. So after your subscription is enrolled, you can back up your virtual machine by following below steps.

Create Enhanced Policy by following steps mentioned in this document.

Go to the Trusted Launch VM -> Under Operations Tab , Click on Backup -> select the recovery vault where enhanced policy is created -> Enable Backup.

Patrick Sims 21 Reputation points

2022-02-15T06:46:34.397+00:00

Thanks for this,

I was able to create an Enhanced Policy by going via the instructions here where I create the Backup Policy from the Recovery Services Vault area.

For some reason if I tried to create the Backup Policy from with the Azure VM Backup creation itself it doesn't prompt to ask if I want Standard or Enhanced. So if anyone else reads this and is stuck that might be why.

SwathiDhanwada-MSFT 17,236 Reputation points

2022-02-15T07:27:16.14+00:00

@Patrick Sims Glad to know it helped and also thanks for the sharing the cause of the issue. It would be very beneficial to the community.

Khan Abdul Karim Abdul Rahim 0 Reputation points

2023-08-04T01:43:00.7333333+00:00

Hi SwathiDhanwada,

Thanks for above article, I was able to create an Enhanced Policy by following the instructions here to create the Backup Policy from the Recovery Services Vault area.

But i am unable to create the standard Policy for the Windows Generation 2 v2 virtual Machine (Windows Server 2019 Generation 2) which is vTPM Enabled VM i tried disabling vTPM from Blade of Settings > Configuration of VM but it did not worked. please help me for enabling Standard policy for Generation 2 vTPM Machines.
Sign in to comment

Azure Backup Standard policy not supported for Trusted Azure VMs

0 additional answers