Creating Microsoft Azure Accounts for non-Immutable Backup Repositories

Veeam Backup&Replication supports different types of storage accounts.

Storage account type	Supported services	Supported performance tiers	Supported access tiers
General-purpose V2	Blob (block blobs only)	Standard	Cool: for infrequently accessed data. Hot: for frequently accessed data. Archive: for rarely accessed data. It can be set only on the blob level and supported in Archive Tier object storage systems. For Azure Blob storage, Veeam Backup & Replication will use the access tier that you specified at the Container step of the New Object Storage wizard. For Azure Archive storage, Veeam Backup & Replication will use the access tier specified at the Access Tier step of the New Object Storage wizard.
BlobStorage	Blob (block blobs only)	Standard
General-purpose V1	Blob (block blobs only)	Standard	N/A
BlockBlob Storage	Blob (block blobs only)	Premium	N/A

1.Sign in to the Azure portal with a global admin account.

https://portal.azure.com

2.
On the Azure services page, select +Create resource.

3.Select Storage on the Create a resource page, and click Create at Storage account.

4.In the Basics tab, under Project details, make sure the correct subscription is selected.

5. Select Create new resource group and type name for the new Resource group.

6.Under Instance details, type the name for the new storage account.

7. Select the Region for the new storage account.

8. Select Azure Blob Storage or Azure Data Lake Storage Gen 2 as Primary service.

9.Select Standard as Performance.

10. Select Locally-redundant storage (LRS).

Note:

Veeam Backup & Replication supports all types of Azure Storage redundancy.

11.Click Next.

12.In the Advanced tab, under Security, keep the default settings.

13.Under Security, ensure that unselect Enable hierarchical Namespace.

14.Under Access protocols, keep the default settings.

15.Under Blob storage, select Cool as Access tier.

16.Under Azure files, keep the default settings.

17. Click Next.

18.In the Networking tab, under the Networking connectivity, select Enable public access from all networks.

19.When a customer has an ExpressRoute or Site-to-Site VPN connecting directly on-premises to Azure, you can create private endpoints for the storage account and turn off the public endpoint. Ensures the BLOB container is only accessible over the organization’s site.

20.Under the Network routing, keep the default settings and click Next.

21.In the Data protection tab, under Recovery, unselect Enable Point-in-time restore for containers.

22. Unselect Enable soft delete for blobs.

23. Unselect Enable soft delete for containers.

24. Unselect Enable soft delete for file shares.

25.Under Tracking, unselect Enable versioning for blobs.

26. Unselect Enable blob change feed.

27.Under Access control, unselect Enable version-level immutability support.

28.Click Next.

29.In the Encryption tab, under the Encryption type, select Microsoft-managed keys (MMK).

30. Under Enable support for customer-managed keys, select Blobs and files only.

31. Ensure unselect Enable infrastructure encryption.

32.Click Next.

33.In the Tags tab, you can specify the Resource Manager tags on the Tags tab to help organize your Azure resources.

34.Click Next.

35.In the Review + create tab, click Create.

36.Creating the new storage account and clicking Go to the resource may take a few minutes.

37.On the newly created storage account page, under Security + networking, select Access keys.

38.On the Access keys page, under key1, select Show Key and copy the storage account name and key of key1. We need them for Veeam storage repository settings later.