Using the Azure Stack Hub Infrastructure Backup Service to restore configuration and service data requires a complete redeployment of Azure Stack Hub. Using infrastructure backups allows you to quickly restore identity, security, and Azure Resource Manager data after a cloud recovery deployment. The following figure describes the Azure Stack Hub recovery process.

If there is catastrophic data loss and the OEM hardware is still operational, you must redeploy Azure Stack Hub. During redeployment, you must specify the storage location and the credentials that are required to access the infrastructure backups. In this mode, there is no need to specify the services that must be restored. The Infrastructure Backup Controller injects the control plane state as part of the deployment workflow.

If there is catastrophic data loss and the OEM hardware is inoperable, you must redeploy Azure Stack Hub on new hardware. You can do a restore of control plane data at any time after the deployment takes place. However, if the Azure Stack Hub build is more than one version later than the version used in the last backup, restores are not supported.

Only use Cloud Recovery Mode to recover Azure Stack Hub if a disaster or product issue renders the solution unrecoverable. This deployment mode does not recover any of the IaaS, PaaS, or user data stored in the solution. The scope of this deployment mode is limited to restoring the following:

• Deployment inputs
• Internal identity service data (ADFS deployments)
• Federated identify configuration (ADFS deployments)
• Root certificates used by internal certificate authority
• Azure Resource Manager configuration user data, such as subscriptions, plans, offers, storage quotas, network quotas, and compute resources
• Key vault secrets and vaults
• RBAC policy assignments and role assignments

After you complete the redeployment and apply the infrastructure backups, your operators and users can log in to the Azure Stack Hub Administration Portal. They can begin restoring PaaS services, IaaS VMs, and all the user data that was previously backed up, as shown in the following figure.