Mac OS X 'Lion' version 10.7.2 introduces new graphics that are not compatible with earlier versions of Lion, nor with Mars Themes. Do not upgrade to 10.7.2 while running Crystal Black or CrystalClear Interface until we prepare updates for the new graphics. When data is backed up from on-premises servers with the MARS agent, data is encrypted with a passphrase before upload to Azure Backup and decrypted only after it's downloaded from Azure Backup. When you're backing up Azure VMs, you need to set up encryption within the virtual machine.
You can use Azure Backup to back up data to the Microsoft Azure cloud platform. This article summarizes the general support settings and limitations for Azure Backup scenarios and deployments.
Other support matrices are available:
Note
This service supports Azure Lighthouse, which lets service providers sign in to their own tenant to manage subscriptions and resource groups that customers have delegated.
Azure Backup uses Recovery Services vaults to orchestrate and manage backups for the following workload types - Azure VMs, SQL in Azure VMs, SAP HANA in Azure VMs, Azure File shares and on-premises workloads using Azure Backup Agent, Azure Backup Server and System Center DPM. It also uses Recovery Services vaults to store backed-up data for these workloads.
The following table describes the features of Recovery Services vaults:
Feature | Details |
---|---|
Vaults in subscription | Up to 500 Recovery Services vaults in a single subscription. |
Machines in a vault | Up to 2000 datasources across all workloads (like Azure VMs, SQL Server VM, MABS Servers, and so on) can be protected in a single vault. Up to 1,000 Azure VMs in a single vault. Up to 50 MABS servers can be registered in a single vault. |
Data sources | Maximum size of an individual data source is 54,400 GB. This limit doesn't apply to Azure VM backups. No limits apply to the total amount of data you can back up to the vault. |
Backups to vault | Azure VMs: Once a day. Machines protected by DPM/MABS: Twice a day. Machines backed up directly by using the MARS agent: Three times a day. |
Backups between vaults | Backup is within a region. You need a vault in every Azure region that contains VMs you want to back up. You can't back up to a different region. |
Move vaults | You can move vaults across subscriptions or between resource groups in the same subscription. However, moving vaults across regions isn't supported. |
Move data between vaults | Moving backed-up data between vaults isn't supported. |
Modify vault storage type | You can modify the storage replication type (either geo-redundant storage or locally redundant storage) for a vault before backups are stored. After backups begin in the vault, the replication type can't be modified. |
Zone-redundant storage (ZRS) | Available in the UK South (UKS) and South East Asia (SEA) regions. |
Private Endpoints | See this section for requirements to create private endpoints for a recovery service vault. |
Here's what's supported if you want to back up on-premises machines:
Machine | What's backed up | Location | Features |
---|---|---|---|
Direct backup of Windows machine with MARS agent | Files, folders, system state | Back up to Recovery Services vault. | Back up three times a day No app-aware backup Restore file, folder, volume |
Direct backup of Linux machine with MARS agent | Backup not supported | ||
Back up to DPM | Files, folders, volumes, system state, app data | Back up to local DPM storage. DPM then backs up to vault. | App-aware snapshots Full granularity for backup and recovery Linux supported for VMs (Hyper-V/VMware) Oracle not supported |
Back up to MABS | Files, folders, volumes, system state, app data | Back up to MABS local storage. MABS then backs up to the vault. | App-aware snapshots Full granularity for backup and recovery Linux supported for VMs (Hyper-V/VMware) Oracle not supported |
Limit | Details |
---|---|
Azure VM data disks | See the support matrix for Azure VM backup. |
Azure VM data disk size | Individual disk size can be up to 32 TB and a maximum of 256 TB combined for all disks in a VM. |
Here's what's supported if you want to back up Azure VMs:
Machine | What's backed up | Location | Features |
---|---|---|---|
Azure VM backup by using VM extension | Entire VM | Back up to vault. | Extension installed when you enable backup for a VM. Back up once a day. App-aware backup for Windows VMs; file-consistent backup for Linux VMs. You can configure app-consistency for Linux machines by using custom scripts. Restore VM or disk. Backup and restore of Active Directory domain controllers is supported. Can't back up an Azure VM to an on-premises location. |
Azure VM backup by using MARS agent | Files, folders, system state | Back up to vault. | Back up three times a day. If you want to back up specific files or folders rather than the entire VM, the MARS agent can run alongside the VM extension. |
Azure VM with DPM | Files, folders, volumes, system state, app data | Back up to local storage of Azure VM that's running DPM. DPM then backs up to vault. | App-aware snapshots. Full granularity for backup and recovery. Linux supported for VMs (Hyper-V/VMware). Oracle not supported. |
Azure VM with MABS | Files, folders, volumes, system state, app data | Back up to local storage of Azure VM that's running MABS. MABS then backs up to the vault. | App-aware snapshots. Full granularity for backup and recovery. Linux supported for VMs (Hyper-V/VMware). Oracle not supported. |
Here's what's supported if you want to back up Linux machines:
Backup type | Linux (Azure endorsed) |
---|---|
Direct backup of on-premises machine that's running Linux | Not supported. The MARS agent can be installed only on Windows machines. |
Using agent extension to back up Azure VM that's running Linux | App-consistent backup by using custom scripts. File-level recovery. Restore by creating a VM from a recovery point or disk. |
Using DPM to back up on-premises machines running Linux | File-consistent backup of Linux Guest VMs on Hyper-V and VMware. VM restoration of Hyper-V and VMware Linux Guest VMs. |
Using MABS to back up on-premises machines running Linux | File-consistent backup of Linux Guest VMs on Hyper-V and VMware. VM restoration of Hyper-V and VMware Linux guest VMs. |
Using MABS or DPM to back up Linux Azure VMs | Not supported. |
Azure Backup doesn't support automatic clock adjustment for daylight saving time for Azure VM backups. It doesn't shift the hour of the backup forward or backwards. To ensure the backup runs at the desired time, modify the backup policies manually as required.
Disk deduplication support is as follows:
Azure Backup supports encryption for in-transit and at-rest data.
Machine | In transit | At rest |
---|---|---|
On-premises Windows machines without DPM/MABS | ||
Azure VMs | ||
On-premises Windows machines or Azure VMs with DPM | ||
On-premises Windows machines or Azure VMs with MABS |
Backup supports the compression of backup traffic, as summarized in the following table.
Machine | Compress to MABS/DPM (TCP) | Compress to vault (HTTPS) |
---|---|---|
Direct backup of on-premises Windows machines | NA | |
Backup of Azure VMs by using VM extension | NA | NA |
Backup on on-premises/Azure machines by using MABS/DPM |
Setting | Limits |
---|---|
Maximum recovery points per protected instance (machine or workload) | 9,999 |
Maximum expiry time for a recovery point | No limit |
Maximum backup frequency to DPM/MABS | Every 15 minutes for SQL Server Once an hour for other workloads |
Maximum backup frequency to vault | On-premises Windows machines or Azure VMs running MARS: Three per day DPM/MABS: Two per day Azure VM backup: One per day |
Recovery point retention | Daily, weekly, monthly, yearly |
Maximum retention period | Depends on backup frequency |
Recovery points on DPM/MABS disk | 64 for file servers; 448 for app servers Unlimited tape recovery points for on-premises DPM |
Azure Backup has added the Cross Region Restore feature to strengthen data availability and resiliency capability, giving you full control to restore data to a secondary region. To configure this feature, visit the Set Cross Region Restore article.. This feature is supported for the following management types:
Backup Management type | Supported | Supported Regions |
---|---|---|
Azure VM | Supported for Azure VMs (including encrypted Azure VMs) with both managed and unmanaged disks. Not supported for classic VMs. | Available in all Azure public regions and sovereign regions except for France Central, Australia Central, South Africa North, UAE North, Switzerland North, Germany West Central, Norway East, UG IOWA, and UG Virginia. For information about use in those regions, contact AskAzureBackupTeam@microsoft.com |
SQL /SAP HANA | In preview | Available in all Azure public regions and sovereign regions except for France Central, Australia Central, South Africa North, UAE North, Switzerland North, Germany West Central, Norway East, UG IOWA, and UG Virginia. For information about use in those regions, contact AskAzureBackupTeam@microsoft.com |
MARS Agent/On premises | No | N/A |
AFS (Azure file shares) | No | N/A |
ADSelfService Plus login agent for Mac OS X lets Active Directory domain users using Mac clients to reset their passwords and unlock their accounts from the OS X login screen itself. Please follow the steps given below to deploy the password self-service login agent to Mac clients:
Note: The ADSelfService Plus login agent for Mac supports clients running OS X 10.6 and above.
Locate the Mac OS X login agent for password self-service in ADSelfService Plus installation folder. It can be found at <install_dir>/bin/ADSelfServicePlusMacLoginAgent.pkg.
Copy the ADSelfServicePlusMacLoginAgent.pkg file to the Mac clients.
Double-click the ADSelfServicePlusMacLoginAgent.pkg file to begin the installation process.
In the Introduction window, click Continue
In the Installation Type window, select the install location and click Install.
After you click the Install button you will be asked to enter your username and password. Please use the account information you used to log on to your Mac.
Enter the ADSelfService Plus server name and port number when prompted
In the Summary window, click Close to complete the installation.
Once the installation is complete, a Reset Password/Unlock Account button will appear on the login screen.
This section describes how to customize the various features of the ADSelfService Plus's Mac OS X login agent. Features such as Server Name, Port Number, Button Text & Icon can be customized by editing the file config.plist stored in /Library/Application Support/ADSSPLoginAgent/. Follow the steps below to customize the login agent:
Open Terminal
Run this script to change the server name: sudo /usr/libexec/PlistBuddy -c 'set :SERVERNAME 192.168.43.90' '/Library/Application Support/ADSSPLoginAgent/config.plist'. Replace 192.168.43.90 with the server name or IP address of ADSelfService Plus server.
Please enter the username and password you used to log on to your Mac client when asked for user credentials.
Run this script to change the port number: sudo /usr/libexec/PlistBuddy -c 'set :PORTNUMBER 8443' '/Library/Application Support/ADSSPLoginAgent/config.plist'. Replace 8443 with the port number of ADSelfService Plus.
Go to login screen and confirm the changes.
Open Terminal
To change the icon, use this script: sudo /usr/libexec/PlistBuddy -c 'set :IMAGEPATH /Users/testuser/Desktop/sample-icon.png' '/Library/Application Support/ADSSPLoginAgent/config.plist'. Replace the path to the image with the path to your own icon.
Please enter the username and password you used to log on to your Mac client when asked for user credentials.
To change the button text(Reset Password/Unlock Account text which will be displayed on the logon screen), use this script: sudo /usr/libexec/PlistBuddy -c 'set :BUTTONTEXT Forgot Password?' '/Library/Application Support/ADSSPLoginAgent/config.plist'. Replace Forgot Password? with your own text.
Go to login screen and confirm the changes.
Note: In case, the specified icon source is not available default icon will be loaded.
Open Terminal
Open /Library/PrivilegedHelperTools/
Del ADSSPLoginAgent
Go to login screen and confirm the changes.