You can temporarily run your critical applications inside the Cleanroom during a cyber event until you bring back the original production site or a new production site. After your production site is up and running, you would need to bring the new data and configuration from the Cleanroom site back into the production site by performing the following steps:
-
Make sure that the Cleanroom recovered workloads are not cleaned up as part of the automatic cleanup process. To do this, disable automatic cleanup of resources and if required move the Cleanroom workloads to a different resource group or subscription to ensure Cleanroom is clean.
-
Once the production site is securely cleaned, either ensure that it is free of ransomware or rebuilt using hardware refresh, download the DR backup set of the CommServe available in the Commvault Cloud to setup a new permanent CommServe in the production site. Use the same DR backup set that is used to recover the CommServe inside the Cleanroom.
-
Once the new production CommServe is deployed, deploy access nodes in the Azure subscription and protect the Cleanroom recovered workloads by configuring backups for workloads.
-
After the backup is completed, delete the access nodes from the Azure subscription and perform an out-of-place restore operation of the Cleanroom recovered workloads into the production site using the above configured backups to restore the latest clean data into the production.
For a list of cross-hypervisors that are supported, see Cross-Hypervisor Restores (Virtual Machine Conversion).
-
After restoring the workloads into the production site, perform a full backup of the newly restored workloads.