Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell PowerProtect Data Manager Appliance 5.12.0.1 Virtual Machine User Guide

Support for backup and restore of encrypted virtual machines

Backup and restore of encrypted virtual machines is supported in PowerProtect Data Manager Appliance, with the following limitations:

  • Restoring encrypted virtual machines to a different vCenter server where encryption is not configured is not supported. You must perform the restore to a new virtual machine on the same vCenter server, or to a different vCenter server where encryption is configured using same or different KMS server as source vCenter.
  • Restoring an encrypted virtual machine backup to a new virtual machine on the original vCenter server will restore the virtual machine disks (VMDKs) in unencrypted format. For more information about manually changing the virtual machine policy to enable encryption of VMDKs, see the article Virtual Machine Encryption.
  • VMware recommends powering off the virtual machine before encryption is applied. When restoring an encrypted virtual machine as a new virtual machine or by using an Instant Access restore, disable the Power on the virtual machine when the restore completes option to ensure that the virtual machine can be encrypted by the vCenter server after the restore completes. For more information, see the artcle Encrypt an Existing Virtual Machine or Virtual Disk.
  • In order to use Hot Add transport mode, all VM proxies with access to the encrypted virtual machines datastore must be encrypted as well. For example, if encrypted virtual machines reside in an ESXi cluster, all VM proxies deployed on the cluster must also be encrypted.
  • In order to backup and restore encrypted virtualization-based security (VBS) and virtual Trusted Platform Module 2.0 (vTPM) virtual machines, vCenter 7.0 U1 or later is required.
  • For Restore to Original VM recovery operations, ensure that production VMs have the same encryption status as their backup copies. If a production VM has a different encryption status than its backup copy, Restore to Original VM recovery attempts fail with the message Encryption status of production VM and backup copy is different. To resolve this issue, change the encryption status of the production VM to match its backup copy, or perform a Create and Restore to New VM recovery instead.
  • If a virtual machine is encrypted and vCenter 7.0 or later is used, an Instant Access virtual machine restore job can fail to automatically migrate the virtual machine from the Protection Storage NFS datastore to local storage. When this occurs, the restore job has a Completed with Exceptions status. To resolve the issue, perform the following steps from the vCenter user interface:
    1. Manually migrate the virtual machine from the Protection Storage NFS datastore to local storage.
    2. Unmount the Protection Storage NFS datastore from the ESXi host.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\