This article describes an important update to Azure Backup for Microsoft Azure Recovery Services (MARS) Agent version to 2.0.9262.0, that is used both by Microsoft Azure Backup and the Microsoft Azure Site Recovery service to transport data to Azure.
This update includes two new features to improve the resiliency of the Recovery Services Agent.
Save MARS agent passphrase securely to Azure Key Vault is now generally available.
MARS Agent from Azure Backup requires a passphrase provided by the user to encrypt the backups sent to and stored on Azure Recovery Services Vault. This passphrase is not shared with Microsoft and needs to be saved in a secure location to ensure that the backups can be retrieved if the server backed up with MARS goes down.
You can now save the MARS passphrase securely to Azure Key Vault from the console during a new registration or a change passphrase operation. Learn more.
Addition security for operations
If you have security settings for on-premises backups on in the vault, with MARS version 2.0.9262.0 and later, the operations of removing a volume from MARS file/folder backup, adding a new exclusion setting for an existing volume, reducing retention duration, and moving to a less-frequent backup schedule are also protected with a security pin for additional security. Learn more.
Note: These preview features are not yet enabled for System Center Data Protection Manager (DPM) & Microsoft Azure Backup Server (MABS).
Apart from the new features mentioned above, this update includes the following changes:
Ability to view expiry time and retention type for all recovery points.
From the MARS agent console, go to Status Pane, under Available Recovery Points click View Details to list all available recovery points.
Ability to stop protection and retain data by policy.
This option will stop all future backup jobs from protection. Learn more.
Azure Backup service will continue to expire existing recovery points according to the policy configured.
You'll be able to restore the backed-up data for unexpired recovery points.
If you decide to resume protection, then you can use the Re-enable backup schedule option. After that, data will be retained based on the new retention policy.
To apply this update, download and install the Microsoft Azure Recovery Services agent from the Microsoft Download Center.
Note The version for this update of Microsoft Azure Recovery Services agent is 2.0.9262.0.
For more information about how to download Microsoft support files, see the following Microsoft Knowledge Base article:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Applying the update to multiple servers
Perform the following steps to update multiple servers from the Azure portal
Download the installer for the update from the link in this section.
Navigate to the Recovery Services Vault where your servers are registered.
On the left-side Settings blade, select Backup Infrastructure in the Manage section.
Select Protected Servers under Management Servers, and then select Azure Backup Agent as the Backup Management Type.
On the blade that appears, select a server for which the agent version is earlier than 2.0.9262.0.
On the server detail blade, select Connect. This will download a Remote Desktop Connection file that you can use to connect to the server, copy the downloaded agent to the server, and then update it.
After you finish updating, you can select other servers that have agent versions that are earlier than 2.0.9262.0, and update the agents on those servers.
If you are using Windows Server 2008 (SP2 and R2 SP1, any SKU), you have to restart the computer after you apply this update. Users that have installed MARS Agent on other Windows Server versions don’t have to restart the computer after they apply this update.
If you use System Center Data Protection Manager (SC DPM) or Microsoft Azure Backup Server (MABS) ensure that you are on the latest Update Rollup for the product.
Windows Server 2008 and 2008 R2 are at end of support. Please plan to update these servers to newer operating systems to ensure backup support with the upcoming versions of MARS.