Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions azure-local/TOC.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1491,6 +1491,8 @@ items:
href: manage/disconnected-operations-update.md
- name: Back up disconnected operations
href: manage/disconnected-operations-back-up-restore.md
- name: Restore disconnected operations
href: manage/disconnected-operations-restore.md
Copy link

Copilot AI Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This TOC line has trailing whitespace after the href value. Please remove trailing spaces to avoid YAML/markdown lint noise and unnecessary diffs.

Suggested change
href: manage/disconnected-operations-restore.md
href: manage/disconnected-operations-restore.md

Copilot uses AI. Check for mistakes.
- name: Billing
href: manage/disconnected-operations-billing.md

Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: Backup for Disconnected Operations for Azure Local
title: Backup Azure Local Disconnected Environments
description: Learn how to back up Azure Local environments running disconnected. Configure parameters and trigger backups.
author: ronmiab
ms.author: robess
Expand All @@ -18,9 +18,6 @@ This article explains the backup process for disconnected operations for Azure L

For more information, see [Disconnected operations for Azure Local](/azure/azure-local/manage/disconnected-operations-overview?view=azloc-2602&preserve-view=true).

> [!IMPORTANT]
> The restore feature is currently in development. Documentation for the restore process will be available once the feature is stable.

## Overview

The backup feature currently backs up the control plane VM data only. Associated workloads or configured clusters aren't included in the backup. Backups capture all data needed for the disconnected operations control plane VM. Because backups aren't automated, take backups regularly and before making changes to the environment.
Expand Down
107 changes: 107 additions & 0 deletions azure-local/manage/disconnected-operations-restore.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,107 @@
---
title: Restore Azure Local Disconnected Environments
description: Learn how to restore an Azure Local environment running in disconnected mode. Configure restore parameters and trigger a restore operation.
author: ronmiab
ms.author: robess
ms.date: 04/03/2026
ms.topic: concept-article
ms.service: azure-local
ms.subservice: hyperconverged
ai-usage: ai-assisted
---

# Restore for disconnected operations for Azure Local

::: moniker range=">=azloc-2602"
Copy link

Copilot AI Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The moniker range starts at ">=azloc-2602", but the feature note below says restore is only available in Azure Local 2603+. As written, the restore content will render for azloc-2602 (and also overlaps with the fallback moniker), which is misleading. Update the content moniker to start at the correct version (likely ">=azloc-2603") so it doesn’t display for 2602.

Suggested change
::: moniker range=">=azloc-2602"
::: moniker range=">=azloc-2603"

Copilot uses AI. Check for mistakes.

This article explains the restore process for disconnected operations for Azure Local environments. It provides practical steps to trigger a restore and parameter configurations to customize it. Operators need access to the [Operator subscription and role-based access control (RBAC) permissions](disconnected-operations-identity.md).

For more information, see [Disconnected operations for Azure Local](/azure/azure-local/manage/disconnected-operations-overview?view=azloc-2602&preserve-view=true).

> [!IMPORTANT]
> The restore operation supports restoring the backup to the same version of Azure local disconnected environment.
## Overview

The backup feature currently backs up only the control plane VM data. It doesn't include associated workloads or configured clusters. The restore functionality restores the control plane data from the backup. So, ensure that you configure the same version of Azure local disconnected where you restore the backup.
Comment on lines +21 to +26
Copy link

Copilot AI Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In this IMPORTANT note and the following paragraph, "Azure local" is inconsistently cased compared to "Azure Local" elsewhere in the article/title. Please standardize the product name casing (and related phrasing) so readers don’t interpret it as a different term.

Copilot uses AI. Check for mistakes.

## Why backup and restore operations?

Backup capability is critical because the Azure Local with disconnected operations virtual machine (VM) acts as the control plane. It stores authoritative metadata for subscriptions, resource groups, policies, and connected Azure Local resources. Any corruption or loss of this control plane disrupts the entire environment. Regular backups protect against catastrophic failures, infrastructure loss, or misconfigurations by capturing the control plane state at specific points in time. The restore functionality helps you get back the environment to the state which was at the time of backup.

## Prerequisites

Before you restore your system, complete these prerequisites:

- **Operator access:** Ensure your identity has the required OperatorRP RBAC role in the Operator subscription.

- **Environment Setup:** Ensure that you have a fresh Azure local Disconnected environment that you set up and that the version matches the backup version. Cross version restores aren't supported.

- **Root Certificate:** For the Restore VM, ensure that the same Root Certificate - Certificate Authority is used for the new VM Creation to ensure the trust.

Comment on lines +38 to +41
Copy link

Copilot AI Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These prerequisites have multiple capitalization/grammar issues (for example "Azure local Disconnected", "Cross version", and "new VM Creation") that make the steps harder to follow. Please standardize capitalization ("Azure Local disconnected"), use the hyphenated form ("cross-version"), and rephrase the root certificate requirement more clearly.

Copilot uses AI. Check for mistakes.
- **Server Message Block (SMB) share:** The SMB share where the backup file to restore is stored is accessible from the new environment.

- **Decryption key:** The decryption key that you stored externally is available and you need to provide it during the restore process.

- **Import restore module (required):** Before running any restore cmdlets, import the restore module from your Operations Module by using its full path:

```powershell
# Import the restore cmdlets from the Operations Module (use the full path on your system)
Import-Module "<full path to Operations Module>\Azure.Local.Restore.psm1"
```

## Trigger and monitor a backup
Copy link

Copilot AI Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Section heading says "Trigger and monitor a backup" but the section content and commands are for restore. Rename the heading to "Trigger and monitor a restore" to avoid confusing readers.

Suggested change
## Trigger and monitor a backup
## Trigger and monitor a restore

Copilot uses AI. Check for mistakes.

To trigger the restore, open an administrator PowerShell session and invoke the restore operation by passing the requested parameters. This operation initiates the restore process which runs in the background.

To trigger and monitor the restore, follow these steps:


1. Trigger the restore operation.

```powershell
Start-ApplianceRestore
```
Here's an example output:
:::image type="content" source="media/disconnected-operations/back-up-restore/trigger-restore.png" alt-text="Screenshot of the Start-ApplianceRestore command output." lightbox=" ./media/disconnected-operations/back-up-restore/trigger-restore.png":::
1. Track the restore status until it completes, where status refreshes every 30 seconds.
```powershell
Wait-ApplianceRestore
```
Here's an example output:
:::image type="content" source="media/disconnected-operations/back-up-restore/wait-appliance-restore.png" alt-text="Screenshot of Wait-ApplianceRestore command output." lightbox=" ./media/disconnected-operations/back-up-restore/wait-appliance-restore.png":::
1. Restore Completion - After a few hours, the restore operation completes. You can check the status by using the following command:
```powershell
Get-ApplianceRestore
```
Here's an example output:
:::image type="content" source="media/disconnected-operations/back-up-restore/get-appliance-restore.png" alt-text="Screenshot of the Get-ApplianceRestore command output." lightbox=" ./media/disconnected-operations/back-up-restore/get-appliance-restore.png":::
## Post restore environment mismatch
> [!IMPORTANT]
> Before you initiate a restore, the backup state and the current environment state might have differences in the workload state of the control plane data. The restore operation can cause a drift in the resource metadata.
- **Lost resources:** You cannot recover cloud-only resources that are created after the backup. You must recreate these resources.
- **Untracked Arc resources:** You need to rehydrate or re-register resources that are created after the backup and exist on the cluster but are missing in restored metadata.
- **Phantom / Resurrected resources:** You need to clean up resources that are deleted after the backup but reappear as metadata after restoring.
- **Drifted resources:** Restored environment reflects old state for resources that are updated after backup. This state might break authentication or management until remediated.
- **Azure Local cluster infra drift:** You need to repair registration and re-Arc actions for membership changes or new clusters registered after the backup.
- **Certificate expiry / rotation:** Older backups might contain expired certificates or mismatched client authentication certificate. You need manual remediation and rotation.
::: moniker-end
::: moniker range="<=azloc-2602"
Copy link

Copilot AI Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The fallback moniker range overlaps the main content moniker (both include azloc-2602), so users on 2602 can see both the restore instructions and the "2603 or later" warning. Adjust the fallback moniker to avoid overlap (for example, use "<azloc-2603", consistent with azure-local/manage/manage-secure-boot-updates.md:230).

Suggested change
::: moniker range="<=azloc-2602"
::: moniker range="<azloc-2603"

Copilot uses AI. Check for mistakes.
This feature is available only in Azure Local 2603 or later.
::: moniker-end
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.