Migrating to and from Azure Storage

Currently, only owned items will be migrated.

 

Microsoft Azure Storage supports every source platform and every item type for storage.

 

General and Source Platform prerequisites 

You will be required to be logged in with a Microsoft account on the tenant you wish to migrate to.  

 

Destination Platform prerequisites

Setting up a Storage Bucket

1. Sign in to Microsoft Azure Home.
2. Open the Portal menu, using the Hamburger menu icon.
3. Select Storage Accounts.
4. On the Storage Accounts screen, select Create
5. On the Basic tab, enter the following information:
   • Subscription - Select the subscription for the new storage account.
   • Resource Group - Create a new resource group for this storage account, or select an existing one
   • Storage Account Name - Choose a unique name for your storage account. Storage account names must be between 3 and 24 characters in length and may contain numbers and lowercase letters only.
   • Region - Select the appropriate region for your storage account.

6. On the Advanced tab, set Access Tiers to either HOT or COOL, as required. 
7. On the Data Protection tab, you can configure data protection options for blob data in your new storage account. These options can also be configured after the storage account is created.
   • In CloudM Archive, the data retention rules can be rewritten using the Data Retention policies.
8. Once you have configured these settings, select Review + Create, and then select Create again.
9. The Storage Account will be created. This process can take a couple of minutes to complete.
10. You will need to navigate back to the Storage Accounts screen.
11. Click on the name of the newly created account in the list of Storage Accounts.
12. In the menu, scroll down and select Blob Services > Containers.
13. Now, select the + Container button,
14. In the pop up screen, enter:
    • Name - A unique name for the container
    • Public Access Level - Set to Private
    • Advanced Settings > Encryption Scope - Leave as default.
15. Click on Create.

16. On the same Storage Account page, select the Settings > Access Keys menu option.
17. In the Access Keys page, click on the name of the newly created key and then click again on the current version.
18. Select the Show Keys button at the top of the screen.
19. Copy the value in the Key 1 > Key field. You will need this value later so you should copy into a document or notepad application.

 

Setup Azure Key Value (optional - only complete if requiring encryption)

We don't require you to use encryption, but you can use the following process if it is required.

Use the same method (either using encryption or not using encryption) throughout your project to avoid issues.

1. In the Search bar at the top of the screen, enter Key Vaults and select the Key Vaults option.
2. On the Key Vaults screen, select Create.
3. Under the Basics tab, enter the Subscription, Resource Group and Name.
4. Select Create + Review, and then select Create again,
5. When the Key Vault is being created, you will be taken away from the Key Vaults section so navigate back to Key Vaults using the Search bar.
6. On the Key Vaults screen, select the newly created Key Vault.
7. Select Keys.
8. Select Generate.

9. Click on the newly created key, copy the key identifier without the version info at the end. This is the value for the CloudM Migrate Key Vault URL setting.

10. Navigate to Azure Active Directory -> App Registrations, and select New registration.

11. Fill out the details and select Register.
12. On the App Registration screen, click on the name of the newly registered application.
13. Select API permissions from the menu on the left side of the screen.

14. Select Add a permission and add either of the following:
    • User Read
    • user_impersonation

15. In the menu on the left, select the Certificates & Secrets option. 
16. Select New client secret and copy the Secret ID. This is the value for the CloudM Migrate Azure key vault client secret setting.

17. In the left side menu, select Overview, and copy the Application (client) ID for the CloudM Migrate Azure key vault client ID setting.

18. Return to Home > Key Vault,
19. Ensure that the Permission Model is set to Vault access policy,
20. Select + Add Access Policy,

21. On the Add access policy screen, make sure that the Select principal value is set to the required Application (as set in step 4 and 5),
22. Ensure that the Key Permissions field is set to Get, Decrypt, Encrypt and Unwrap Key.
23. Select Add.

 

Configure Source Platform settings

Azure Storage 

Account Details

• Domain Name – The name of the Microsoft domain to migrate to. This may be either a primary or secondary domain. 
• Storage Account Name - The name of the Azure storage account.
• Account Key - The Access Key for the Azure storage account.

 

Azure Storage Details

• Container Name - The name of the container that has been created in Microsoft Azure, under Home > Storage accounts > (Your Storage Account) > Containers.

 

 Options

•  Page Size - Page Size to use when Listing Objects in Cloud Storage.

 

Azure Key Vault Decryption Options (optional - complete if encryption required)

• Key Vault Decryption Key Url - The Url of the decryption key in Azure Key Vault.
• Client Id - Client Id used to access Azure Key Vault.
• Client Secret - Client Secret used to access Azure Key Vault.

 

Customer-Supplied Key Decryption Options (optional - complete if encryption required)

• Decryption Key File Path - The location of your decryption key file.

 

Configure Destination Platform settings 

Azure Storage 

Account Details

• Domain Name – The name of the Microsoft domain to migrate to. This may be either a primary or secondary domain. Note: you can only migrate users to one domain at a time. If you have both primary and secondary domain users, they must be processed in separate migrations.
• Storage Account Name - The name of the Azure storage account.
• Account Key - The Access Key for the Azure storage account.

 

Azure Storage Details

• Container Name - The name of the container that has been created in Microsoft Azure, under Home > Storage accounts > (Your Storage Account) > Containers.

 

Storage Options

• Max File Size - The maximum size of the files to be uploaded (bytes).
• Compress Objects - Compress the Objects before they are uploaded. Setting this to True will use less cloud storage space at the expense of slowing down the Import. 

 

Azure Key Vault Decryption Options (optional - complete if encryption required)

• Key Vault Decryption Key Url - The Url of the decryption key in Azure Key Vault.
• Client Id - Client Id used to access Azure Key Vault.
• Client Secret - Client Secret used to access Azure Key Vault.

 

Customer-Supplied Key Decryption Options (optional - complete if encryption required)

• Decryption Key File Path - The location of your decryption key file.

 

Select which items to migrate