Azure Backup Standard policy not supported for Trusted Azure VMs

Question

Azure Backup Standard policy not supported for Trusted Azure VMs

Patrick Sims 21

I'm trying to backup a new Server 2022 VM on Azure but cannot because I get the error "Standard policy not supported for Trusted Azure VMs".

However, I cannot seem to create an Enhanced Backup Policy - there simply is no option to do this (perhaps in my region? Aust East).

I can't find a way to disable Trusted VM either. I can turn off Secure Boot and vTPM, but not Trusted VM itself.

Any ideas (short of just trashing the whole VM and creating a new one)?

Answer 1

SwathiDhanwada-MSFT 9,651

@Patrick Sims Welcome to Microsoft Q & A Community Forum. You were trying to back up a Trusted Launch VM , however you were prompted with an error "Standard policy not supported for Trusted Azure VMs" . Kindly note that Trusted Launch VM is supported with Enhanced policy only. To enroll your subscription for backup of Trusted Launch VM, write to us at askazurebackupteam@microsoft.com. For more information, refer to this document.

To change the trusted launch vm configuration, in the left menu, select Configuration under the Settings section. You can enable or disable Secure Boot and vTPM from the Trusted LaunchSecurity type section. Select Save at the top of the page when you are done. Which I assume you are able to do it. But can you elaborate what you meant by disabling the trusted vm ? Are you trying to shut it down?

Patrick Sims 21 Reputation points

2022-02-09T09:31:46.603+00:00

Thanks, I will email to enroll my subscription to be able to use Enhanced Policy / Backup Trusted Launch VM.

In regards disabling Trusted VM, I was trying to do that so that I could do the backup using Standard Policy. I couldn't find a way to disable Trusted VM (only disable Secure Boot and vTPM). I don't really want about Trusted VM, but I do care about Backup.
SwathiDhanwada-MSFT 9,651 Reputation points

2022-02-15T06:33:30.97+00:00
@Patrick Sims As far as I know, even though you disable the Secure boot and vTPM. Its still considered as Trusted Launch VM. As mentioned earlier, Trusted Launch VM is supported with Enhanced policy only. So after your subscription is enrolled, you can back up your virtual machine by following below steps.

Create Enhanced Policy by following steps mentioned in this document.

Go to the Trusted Launch VM -> Under Operations Tab , Click on Backup -> select the recovery vault where enhanced policy is created -> Enable Backup.
Patrick Sims 21 Reputation points

2022-02-15T06:46:34.397+00:00

Thanks for this,

I was able to create an Enhanced Policy by going via the instructions here where I create the Backup Policy from the Recovery Services Vault area.

For some reason if I tried to create the Backup Policy from with the Azure VM Backup creation itself it doesn't prompt to ask if I want Standard or Enhanced. So if anyone else reads this and is stuck that might be why.
SwathiDhanwada-MSFT 9,651 Reputation points

2022-02-15T07:27:16.14+00:00

@Patrick Sims Glad to know it helped and also thanks for the sharing the cause of the issue. It would be very beneficial to the community.

Azure Backup Standard policy not supported for Trusted Azure VMs

0 additional answers

Activity