Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

PowerProtect Data Manager 19.16 Virtual Machine User Guide

PDF

Support for backup and restore of encrypted virtual machines

Backup and restore of encrypted virtual machines is supported in PowerProtect Data Manager, with the following limitations:

  • To support the protection of encrypted virtual machines with the Transparent Snapshots Data Mover (TSDM) protection mechanism, PowerProtect Data Manager version 19.13 or later and vCenter or ESXi version 8.0b or later is required. Encrypted virtual machines protected in PowerProtect Data Manager 19.12 must additionally be migrated from the VMware vSphere Storage APIs – Data Protection (VADP) protection mechanism to TSDM.
  • The behavior when restoring an encrypted virtual machine backup to a new virtual machine depends on whether the Restore Storage Policy option is enabled:
    • When the Restore Storage Policy option is not selected during restore, virtual machine disks (VMDKs) will be restored in unencrypted format, and the restored virtual machine will be assigned to the datastore default storage policy. For more information about manually changing the virtual machine policy to enable encryption of VMDKs, see the article Virtual Machine Encryption.
    • When the Restore Storage Policy option is selected during restore, virtual machine disks (VMDKs) will be restored in encrypted format and the restored virtual machine will be assigned to the encryption policy that was assigned to the backup copy.
    NOTE:Note : If restoring to a different vCenter Server where encryption is configured using the same or a different KMS server as the source vCenter, ensure that the same storage policy is available in the destination vCenter Server for the restored virtual machine to be encrypted.
  • VMware recommends powering off the virtual machine before encryption is applied. When restoring an encrypted virtual machine as a new virtual machine or by using an Instant Access restore, disable the Power on the virtual machine when the restore completes option to ensure that the virtual machine can be encrypted by the vCenter server after the restore completes. For more information, see the artcle Encrypt an Existing Virtual Machine or Virtual Disk.
  • In order to use Hot Add transport mode, all VM proxies with access to the encrypted virtual machines datastore must be encrypted as well. For example, if encrypted virtual machines reside in an ESXi cluster, all VM proxies deployed on the cluster must also be encrypted.
  • In order to backup and restore encrypted virtualization-based security (VBS) and virtual Trusted Platform Module 2.0 (vTPM) virtual machines, vCenter 7.0 U1 or later is required.
  • For Restore to Original VM recovery operations, ensure that production VMs have the same encryption status as their backup copies. If a production VM has a different encryption status than its backup copy, Restore to Original VM recovery attempts fail with the message Encryption status of production VM and backup copy is different. To resolve this issue, change the encryption status of the production VM to match its backup copy, or perform a Create and Restore to New VM recovery instead.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\