Proposed Pull Request Change

📄 Document Links

View on GitHub View on Microsoft Learn

--- title: Configure on-premise disks for Azure through Hydration description: Learn how to prepare for Configuration changes via hydration process in Azure Site Recovery. author: Jeronika-MS ms.author: v-gajeronika ms.topic: concept-article ms.service: azure-site-recovery ms.date: 09/18/2025 --- # Configure on-premise disks for Azure through Hydration You have to make some changes to the VMs' configuration before the failover to ensure that the migrated VMs function properly on Azure. Azure Site Recovery handles these configuration changes via the *hydration* process. The hydration process is only performed for the versions of [operating systems supported by Azure Site Recovery](/azure/site-recovery/vmware-physical-azure-support-matrix#for-windows). Before you failover, you may need to perform the required changes manually for other operating system versions that aren't listed above. If the VM is migrated without the required changes, the VM may not boot, or you may not have connectivity to the migrated VM. The following diagram shows you that Azure Site Recovery performs the hydration process. When a user triggers *Test Failover* or *Failover*, Azure Site Recovery performs the hydration process to prepare the on-premises VM for failover to Azure. To set up the hydration process, Azure Site Recovery creates a temporary Azure VM and attaches the disks of the source VM to perform changes to make the source VM ready for Azure. The temporary Azure VM is an intermediate VM created during the failover process before the final migrated VM is created. The temporary VM will be created with a similar OS type (Windows/Linux) using one of the marketplace OS images. If the on-premises VM is running Windows, the operating system disk of the on-premises VM will be attached as a data disk to the temporary VM for performing changes. If it's a Linux server, all the disks attached to the on-premises VM will be attached as data disks to the temporary Azure VM. For more information about Hydration VM SKU selection, see [selection of SKUs for Temporary VM (Hydration VM)](#troubleshoot). Azure Site Recovery will create the network interface, a new virtual network, subnet, and a network security group (NSG) to host the temporary VM. These resources are created in the customer's subscription. If there are conflicting policies that prevent the creation of the network artifacts, Azure Site Recovery will attempt to create the temporary Azure VM in the virtual network and subnet provided as part of the replication target settings options. The virtual network must have outbound access to Storage service tag of the target region. For more information, see [Available service tags](/azure/virtual-network/service-tags-overview#available-service-tags). After the virtual machine is created, Azure Site Recovery will invoke the [Custom Script Extension](/azure/virtual-machines/extensions/custom-script-windows) on the temporary VM using the Azure Virtual Machine REST API. The Custom Script Extension utility will execute a preparation script containing the required configuration for Azure readiness on the on-premises VM disks attached to the temporary Azure VM. The preparation script is downloaded from an Azure Site Recovery owned storage account. The network security group rules of the virtual network will be configured to permit the temporary Azure VM to access the Azure Site Recovery storage account for invoking the script. >[!NOTE] >Hydration VM disks do not support Customer Managed Key (CMK). Platform Managed Key (PMK) is the default option. ## Changes performed during the hydration process The preparation script executes the following changes based on the OS type of the source VM to be migrated. You can also use this section as a guide to manually prepare the VMs for failover for operating systems versions not supported for hydration. # [Windows servers](#tab/windows) 1. **Discover and prepare the Windows OS volume**. Before performing relevant configuration changes, the preparation script will validate if the correct OS disk was selected for failover. The preparation script will look through all the attached volumes visible to the system and look for the SYSTEM registry hive file path to find the source OS volume. The following actions are performed in this step: - Mounts each partition on the OS disk attached to the temporary VM. - Looks for \Windows\System32\Config\System registry files after mounting the partition. - If the files aren't found, the partition is unmounted, and the search continues for the correct partition. - If the files aren't present on any of the partitions, it could indicate that an incorrect OS disk was selected, or the OS disk is corrupted. Azure Site Recovery will fail the failover process with an appropriate error. >[!NOTE] >This step isn't relevant if you’re manually preparing the servers for failover. 1. **Make boot and connectivity related changes**. After the source OS volume files are detected, the preparation script will load the SYSTEM registry hive into the registry editor of the temporary Azure VM and perform the following changes to ensure VM boot up and connectivity. You need to configure these settings manually if the OS version isn't supported for hydration. 1. **Validate the presence of the required drivers**. Ensure if the required drivers are installed and are set to load at **boot start**. These Windows drivers allow the server to communicate with the hardware and other connected devices. - IntelIde.sys - Atapi - Storflt - Storvsc - VMbus 1. **Set storage area network (SAN) policy to Online All**. This ensures that the Windows volumes in the Azure VM use the same drive letter assignments as the on-premises VM. By default, Azure VMs are assigned drive D: to use as temporary storage. This drive assignment causes all other attached storage drive assignments to increment by one letter. To prevent this automatic assignment, and to ensure that Azure assigns the next free drive letter to its temporary volume, set the storage area network (SAN) policy to Online All. To manually configure this setting: - On the on-premises server, open the command prompt with elevated privileges and enter **diskpart**.  - Enter SAN. If the drive letter of the guest operating system isn't maintained, Offline All or Offline Shared is returned. - At the DISKPART prompt, enter SAN Policy=OnlineAll. This setting ensures that disks are brought online, and that you can read and write to both disks.  1. **Set the DHCP start type**. The preparation script will also set the DHCP service start type as Automatic. This will enable the migrated VM to obtain an IP address and establish connectivity post-failover. Make sure the DHCP service is configured, and the status is running.  To edit the DHCP startup settings manually, run the following example in Windows PowerShell: ```powershell Get-Service -Name Dhcp Where-Object StartType -ne Automatic Set-Service -StartupType Automatic ``` 1. **Disable VMware Tools**. Make “VMware Tools” service start-type to disabled if it exists as they aren't required for the VM in Azure. >[!NOTE] >To connect to Windows Server 2003 VMs, Hyper-V Integration Services must be installed on the Azure VM. Windows Server 2003 machines don't have this installed by default. See this [article](/azure/migrate/prepare-windows-server-2003-migration?view=migrate-classic) to install and prepare for failover. 1. **Install the Windows Azure Guest Agent**. Azure Site Recovery will attempt to install the Microsoft Azure Virtual Machine Agent (VM Agent), a secure, lightweight process that manages virtual machine (VM) interaction with the Azure Fabric Controller. The VM Agent has a primary role in enabling and executing Azure virtual machine extensions that enable post-deployment configuration of VM, such as installing and configuring software. Azure Site Recovery automatically installs the Windows VM agent on Windows Server 2008 R2 and higher versions. The Windows VM agent can be manually installed with a Windows installer package. To manually install the Windows VM Agent, [download the VM Agent installer](https://go.microsoft.com/fwlink/?LinkID=394789). You can also search for a specific version in the [GitHub Windows IaaS VM Agent releases](https://github.com/Azure/WindowsVMAgent/releases). The VM Agent is supported on Windows Server 2008 (64 bit) and later. To check if the Azure VM Agent was successfully installed, open Task Manager, select the **Details** tab, and look for the process name *WindowsAzureGuestAgent.exe*. The presence of this process indicates that the VM agent is installed. You can also use [PowerShell to detect the VM agent.](/azure/virtual-machines/extensions/agent-windows#powershell)  After the aforementioned changes are performed, the system partition will be unloaded. The VM is now ready for failover. [Learn more about the changes for Windows servers.](/azure/virtual-machines/windows/prepare-for-upload-vhd-image) # [Linux servers](#tab/linux) 1. **Discover and mount Linux OS partitions**. Before performing relevant configuration changes, the preparation script will validate if the correct OS disk was selected for failover. The script will collect information on all partitions, their UUIDs, and mount points. The script will look through all these visible partitions to locate the /boot and /root partitions. The following actions are performed in this step: - Discover /root partition: - Mount each visible partition and look for etc/fstab. - If the fstab files aren't found, the partition is unmounted, and the search continues for the correct partition. - If the fstab files are found, read the fstab content to identify the root device and mount it as the base mount point. - Discover /boot and other system partitions: - Use fstab content to determine if /boot is a separate partition. If it’s a separate partition, then obtain the boot partition device name from the fstab content or look for the partition, which has the boot flag. - The script will proceed to discover and mount /boot, and other necessary partitions on “/mnt/azure_sms_root” to build the root filesystem tree required for chroot jail. Other necessary partitions include: /boot/grub/menu.lst, /boot/grub/grub.conf, /boot/grub2/grub.cfg, /boot/grub/grub.cfg, /boot/efi (for UEFI boot), /var, /lib, /etc, /usr, and others. 1. **Discover OS Version**. Once the root partition is discovered, the script will use the following files to determine the Linux Operating System distribution and version. - RHEL: etc/redhat-release - OL: etc/oracle-release - SLES: etc/SuSE-release - Ubuntu: etc/lsb-release - Debian: etc/debian_version 1. **Install Hyper-V Linux Integration Services and regenerate kernel image**. The next step is to inspect the kernel image and rebuild the Linux init image so, that it contains the necessary Hyper-V drivers (**hv_vmbus, hv_storvsc, hv_netvsc**) on the initial ramdisk. Rebuilding the init image ensures that the VM will boot in Azure. Azure runs on the Hyper-V hypervisor. So, Linux requires certain kernel modules to run in Azure. To prepare your Linux image, you need to rebuild the initrd so that at least the hv_vmbus and hv_storvsc kernel modules are available on the initial ramdisk. The mechanism for rebuilding the initrd or initramfs image may vary depending on the distribution. Consult your distribution's documentation or support for the proper procedure. Here's one example for rebuilding the initrd by using the mkinitrd utility: 1. Find the list of kernels installed on the system (/lib/modules). 1. For each module, inspect if the Hyper-V drivers are already included. 1. If any of these drivers are missing, add the required drivers and regenerate the image for the corresponding kernel version. >[!NOTE] >This step may not apply to Ubuntu and Debian VMs as the Hyper-V drivers are built in by default. [Learn more about the changes.](/azure/virtual-machines/linux/create-upload-generic#install-kernel-modules-without-hyper-v) An illustrative example for rebuilding initrd: - Back up the existing initrd image. ```bash cd /boot sudo cp initrd-`uname -r`.img initrd-`uname -r`.img.bak ``` - Rebuild the initrd with the hv_vmbus and hv_storvsc kernel modules: ```bash sudo mkinitrd --preload=hv_storvsc --preload=hv_vmbus -v -f initrd-`uname -r`.img `uname -r` ``` Most new versions of Linux distributions have this included by default. If not included, install manually for all versions except those called out, using the aforementioned steps. 1. **Enable Azure Serial Console logging**. The script will then make changes to enable Azure Serial Console logging. Enabling console logging helps with troubleshooting issues on the Azure VM. Learn more about Azure Serial Console for Linux [Azure Serial Console for Linux - Virtual Machines | Microsoft Docs](/troubleshoot/azure/virtual-machines/serial-console-linux). Modify the kernel boot line in GRUB or GRUB2 to include the following parameters, so that all console messages are sent to the first serial port. These messages can assist Azure support with debugging any issues. ```config console=ttyS0,115200n8 earlyprintk=ttyS0,115200 rootdelay=300 ``` We also recommend removing the following parameters if they exist. ```config rhgb quiet crashkernel=auto ``` [Refer to this article](/azure/virtual-machines/linux/create-upload-generic#general-linux-system-requirements) for specific changes. 1. **Network changes for connectivity**. Based on the OS Version, the script will perform the required network changes for connectivity to the migrated VM. The changes include: 1. Move (or remove) the udev rules to avoid generating static rules for the Ethernet interface. These rules cause problems when you clone a virtual machine in Azure. An illustrative example for RedHat servers: ```bash sudo ln -s /dev/null /etc/udev/rules.d/75-persistent-net-generator.rules sudo rm -f /etc/udev/rules.d/70-persistent-net.rules ``` 1. Remove Network Manager if necessary. Network Manager can interfere with the Azure Linux agent for a few OS versions. It's recommended to make these changes for servers running RedHat and Ubuntu distributions. 1. Uninstall this package by running the following command: An illustrative example for RedHat servers: ```bash sudo rpm -e --nodeps NetworkManager ``` 1. Backup existing NIC settings and create eth0 NIC configuration file with DHCP settings. To do this, the script will create or edit the /etc/sysconfig/network-scripts/ifcfg-eth0 file, and add the following text: An illustrative example for RedHat servers: ```config DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp TYPE=Ethernet USERCTL=no PEERDNS=yes IPV6INIT=no PERSISTENT_DHCLIENT=yes NM_CONTROLLED=yes ``` 1. Reset etc/sysconfig/network file as follows: An illustrative example for RedHat servers: ```config NETWORKING=yes HOSTNAME=localhost.localdomain ``` 1. **Fstab validation**. Azure Site Recovery will validate the entries of the fstab file and replace fstab entries with persistent volume identifiers, UUIDs wherever needed. This ensures the drive/partition name remains constant no matter the system it's attached to. - If the device name is a standard device name (say /dev/sdb1), then: - If it’s a root or boot partition, then it's replaced with UUID. - If the partition coexists with either the root or boot partition as standard partitions on the same disk, then it's replaced with UUID. - If the device name is UUID/LABEL/LV, then no changes will be done. - If it’s a network device (nfs, cifs, smbfs, and etc), then the script will comment the entry. To access it, you can uncomment the same and reboot your Azure VM. 1. **Install the Linux Azure Guest Agent**. Azure Site Recovery will attempt to install the Microsoft Azure Linux Agent (waagent), a secure, lightweight process that manages Linux & FreeBSD provisioning, and VM interaction with the Azure Fabric Controller. [Learn more](/azure/virtual-machines/extensions/agent-linux) about the functionality enabled for Linux and FreeBSD IaaS deployments via the Linux agent. Review the list of [required packages](/azure/virtual-machines/extensions/agent-linux#requirements) to install Linux VM agent. Azure Site Recovery installs the Linux VM agent automatically for RHEL 9.x, 8.x/7.x/6.x, Ubuntu 14.04/16.04/18.04/19.04/19.10/20.04, SUSE 15 SP0/15 SP1/12, Debian 9/8/7, and Oracle 7/6 when using the agentless method of VMware failover. Follow these instructions to [install the Linux Agent manually](/azure/virtual-machines/extensions/agent-linux#installation) for other OS versions. You can use the command to verify the service status of the Azure Linux Agent to make sure it's running. The service name might be **walinuxagent** or **waagent**. Once the hydration changes are done, the script will unmount all the partitions mounted, deactivate volume groups, and then flush the devices. ```bash sudo vgchange -an <vg-name> sudo lockdev –flushbufs <disk-device-name> ``` [Learn more on the changes for Linux servers.](/azure/virtual-machines/linux/create-upload-generic) --- ### Clean up the temporary VM After the necessary changes are performed, Azure Site Recovery will spin down the temporary VM and free the attached OS disks (and data disks). This marks the end of the *hydration process*. After this, the modified OS disk and the data disks that contain the replicated data are cloned. A new virtual machine is created in the target region, virtual network, and subnet, and the cloned disks are attached to the virtual machine. This marks the completion of the failover process. ### Troubleshoot | **Error Observed** | **Details** | |---------------------|-------------| | `ComputeRpVmAllocationFailed` / `SkuNotAvailableForHydrationVM` | **Selection of SKUs for Temporary VM (Hydration VM)**<br><br>During test failover/failover, Azure attempts to allocate a temporary VM (Hydration VM). The failover VM size is used if it passes the following checks:<br><br>1. **Blocklist Check** – SKUs in the Hydration blocklist (legacy SKUs, Confidential VM SKUs, SKUs without temp storage or Gen1 support) are rejected.<br> - [Allocation failures for older VM sizes](/troubleshoot/azure/virtual-machines/windows/allocation-failure#allocation-failures-for-older-vm-sizes-av1-dv1-dsv1-d15v2-ds15v2-etc)<br> - [Confidential VM options](/azure/confidential-computing/virtual-machine-options)<br>2. **Disk Count Check** – Windows: only OS disk treated as data disk; Linux: all disks treated as data disks. Hydration VM must support *Customer Disk Count + 2*.<br><br>3. **Basic SKUs** – Basic_* series deprioritized unless no better option exists.<br><br>4. **Regional/Subscription Availability** – VM size must be available in the region/subscription.<br><br>5. **Premium IO Support** – Required if customer uses Premium Storage/Disks.<br><br>6. **UltraSSD Support** – SKU must have `UltraSSDAvailable` if UltraSSD disks are used.<br><br>7. **Temp Storage Capability** – `MaxResourceVolumeMB` must be present.<br><br>8. **Generation 1 VM Support** – SKU must support Generation 1 VMs.<br><br>9. **Zonal Availability** – SKU must exist in the target zone for zonal failovers.<br><br>If no suitable failover VM size passes these checks:<br>- All SKUs in the location/subscription are evaluated.<br>- Priority is given to SKUs in the same family.<br>- If still unresolved, the first suitable SKU from the broader pool is selected.<br><br>**Important:** Validate whether the selected SKU meets these requirements by checking [Azure VM sizes documentation](/azure/virtual-machines/sizes/overview).