Set Backup on Azure Virtual Machine
Follow up on my Virtual machine blogs about
- Azure Virutal Machine’s Identity — Zero credentials solution
- Set Backup on Azure Virtual Machine
- Implement CIS Hardening Build Kit On RHEL9 — Stage 1
- Review scan report with AWS Inspector V2 — Stage 2
- [Packer] The new design to build golden images for multiple cloud platforms

Background
Azure Backup is a managed service, but I have recently encountered several issues with it. Allow me to share the findings and solutions.
What’s Azure Backup?
Azure Backup is a cost-effective, secure, one-click backup solution that’s scalable based on your backup storage needs. The centralized management interface makes it easy to define backup policies and protect a wide range of enterprise workloads, including Azure Virtual Machines, SQL and SAP databases, and Azure file shares.
It is useful and simple for us to take backup for our Virtual machine (VM) running in Azure.
Setup backup on virtual machine
Here is a step-by-step guide to setting up backup for your azure VM:
- After creating the VM, search for “backup” and choose “Standard” for non-production environments and “Enhanced” for production VMs.
- Enable backup. Once enabled, the backup will be initiated in the background. It’s typical to wait for one night to ensure the status becomes stable.
- You still need to check the backup status later. I will explain the reason behind this shortly.
- You can also view jobs to confirm if the backup was successful.

Backup job is failed
There are several reasons for a backup job to fail, discussing in this document. If you get other cases, please report.
Case #1
The operating system is not supported by Azure Backup.
I confirmed this with the Azure support team. If the operating system is not standard, such as RHEL8, Windows, etc., Azure Backup cannot back up the VM. The workaround is to back up only its storage (raw backup). I encountered this issue when trying to back up Palo Alto Panorama instances and Zscaler Cloud Connector instances because their operating systems are highly customized.
Case #2
Recently, my team implemented a feature in Azure Policy. All resource groups created in Azure need to have a tag “cost-center-id” set. Without this tag, you cannot create the resource group.
This can cause issues with the backup jobs.
When we enable Azure Backup, the backup service will automatically create a resource group called “AzureBackupRG_<region_name>_1.” However, due to the new Azure Policy feature, the backup job can fail, preventing successful VM backup.
If you find that the backup job failed on your VM, it’s possible that the resource group “AzureBackupRG_<region_name>_1” was not created successfully. If this is the case, I recommend creating it manually with the tag “cost-center-id” .
