Tutorial: Order an Azure Data Box Disk

Sign in to:

• The Azure portal at this URL: https://portal.azure.com to order Data Box Disk.
• Or, the Azure Government portal at this URL: https://portal.azure.us. For more details, go to Connect to Azure Government using the portal.

Take the following steps to order Data Box Disk.

1. In the upper left corner of the portal, select + Create a resource, and search for Azure Data Box. Select Azure Data Box.

   

2. Select Create.

3. Check if Data Box service is available in your region. Enter or select the following information and select Apply.

   

   Setting	Value
   Transfer type	Import to Azure
   Subscription	Select the subscription for which Data Box service is enabled. The subscription is linked to your billing account.
   Resource group	Select the resource group you want to use to order a Data Box. A resource group is a logical container for the resources that can be managed or deployed together.
   Source country/region	Select the country/region where your data currently resides.
   Destination Azure region	Select the Azure region where you want to transfer data.

4. Select Data Box Disk. The maximum capacity of the solution for a single order of five disks is 35 TB. You could create multiple orders for larger data sizes.

   

5. In Order, specify the Order details in the Basics tab. Enter or select the following information.

   Important

   Hardware encryption support for Data Box Disk is currently available for regions within the US, Europe, and Japan.

   Hardware encrypted drives are only supported when using SATA 3 connections to Linux-based systems. Software encrypted drives use BitLocker technology, and can connect Data Box disks to either Windows- or Linux-based systems using USB or SATA connections.

   Setting	Value
   Subscription	The subscription is automatically populated based on your earlier selection.
   Resource group	The resource group you selected previously.
   Import order name	Provide a friendly name to track the order. The name can have between 3 and 24 characters that can be letters, numbers, and hyphens. The name must start and end with a letter or a number.
   Number of disks per order	Enter the number of disks you would like to order. There can be a maximum of five disks per order (1 disk = 7TB).
   Disk passkey	Supply the disk passkey if you check Use custom key instead of Azure generated passkey. Provide a 12-character to 32-character alphanumeric key that has at least one numeric and one special character. The allowed special characters are @?_+. You can choose to skip this option and use the Azure generated passkey to unlock your disks.
   Disk encryption type	Select between Software (BitLocker) encryption or Hardware(Self-encrypted) options. Hardware-encrypted disks require a SATA 3 connection and are only supported for Linux-based systems.

   

6. On the Data destination screen, select the Data destination - either storage accounts or managed disks (or both).

   Caution

   Blob data can be uploaded to the archive tier, but will need to be rehydrated before reading or modifying. Data copied to the archive tier must remain for at least 180 days or be subject to an early deletion charge. Archive tier is not supported for ZRS, GZRS, or RA-GZRS accounts.

   Setting	Value
   Data destination	Choose from storage account or managed disks or both. Based on the specified Azure region, select a storage account from the filtered list of an existing storage account. Data Box Disk can be linked with only one storage account. You can also create a new General-purpose v1, General-purpose v2, or Blob storage account. Storage accounts with virtual networks are supported. To allow Data Box service to work with secured storage accounts, enable the trusted services within the storage account network firewall settings. For more information, see how to Add Azure Data Box as a trusted service. To enable support for large file shares, select Enable large file shares. To enable the ability to move blob data to the archive tier, select Enable copy to archive.
   Destination Azure region	Select a region for your storage account. Currently, storage accounts in all regions in US, West and North Europe, Canada, and Australia are supported.
   Resource group	If using Data Box Disk to create managed disks from the on-premises VHDs, you need to provide the resource group. Create a new resource group if you intend to create managed disks from on-premises VHDs. Use an existing resource group only if it was created for Data Box Disk order for managed disk by Data Box service. Only one resource group is supported.

   

   The storage account specified for managed disks is used as a staging storage account. The Data Box service uploads the VHDs to the staging storage account and then converts them into managed disks and moves to the resource groups. For more information, see Verify data upload to Azure.

   Note

   Data Box supports copying only 1 MiB aligned, fixed-size .vhd files for creating managed disks. Dynamic VHDs, differencing VHDs, .vmdk or .vhdx files are not supported.

   If a page blob isn't successfully converted to a managed disk, it stays in the storage account and you're charged for storage.

7. Select Next: Security> to continue.

   The Security screen lets you use your own encryption key.

   All settings on the Security screen are optional. If you don't change any settings, the default settings apply.

8. If you want to use your own customer-managed key to protect the unlock passkey for your new resource, expand Encryption type.

   

   Configuring a customer-managed key for your Azure Data Box Disk is optional. By default, Data Box uses a Microsoft managed key to protect the unlock passkey.

   A customer-managed key doesn't affect how data on the device is encrypted. The key is only used to encrypt the device unlock passkey.

   If you don't want to use a customer-managed key, skip to Step 14.

9. To use a customer-managed key, select Customer managed key as the key type. Then choose Select a key vault and key.

   

10. In the Select key from Azure Key Vault blade:

    • The Subscription is automatically populated.
    • For Key vault, you can select an existing key vault from the dropdown list.

    

    Or select Create new key vault if you want to create a new key vault.

    

    Then, on the Create key vault screen, enter the resource group and a key vault name. Ensure that Soft delete and Purge protection are enabled. Accept all other defaults, and select Review + Create.

    

    Review the information for your key vault, and select Create. Wait for a couple minutes for key vault creation to complete.

    

11. The Select a key blade will display your selected key vault.

    

    If you want to create a new key, select Create new key. You must use an RSA key. The size can be 2048 or greater. Enter a name for your new key, accept the other defaults, and select Create.

    

    You're notified when the key has been created in your key vault. Your new key is selected on the Select a key blade.

12. Select the Version of the key to use, and then choose Select.

    

    If you want to create a new key version, select Create new version.

    

    Choose settings for the new key version, and select Create.

    

    The Encryption type settings on the Security screen show your key vault and key.

    

13. Select a user identity that you use to manage access to this resource. Choose Select a user identity. In the panel on the right, select the subscription and the managed identity to use. Then choose Select.

    A user-assigned managed identity is a stand-alone Azure resource that can be used to manage multiple resources. For more information, see Managed identity types.

    If you need to create a new managed identity, follow the guidance in Create, list, delete, or assign a role to a user-assigned managed identity using the Azure portal.

    

    The user identity is shown in Encryption type settings.

    

14. In the Contact details tab, select Add address and enter the address details. Select Validate address. The service validates the shipping address for service availability. If the service is available for the specified shipping address, you receive a notification to that effect.

    If you have chosen self-managed shipping, see Use self-managed shipping.

    

    Specify valid email addresses as the service sends email notifications regarding any updates to the order status to the specified email addresses.

    We recommend that you use a group email so that you continue to receive notifications if an admin in the group leaves.

15. Review the information in the Review + Order tab related to the order, contact, notification, and privacy terms. Check the box corresponding to the agreement to privacy terms.

16. Select Order. The order takes a few minutes to be created.

Use these Azure CLI commands to create a Data Box Disk job.

Prepare your environment for the Azure CLI

• Use the Bash environment in Azure Cloud Shell. For more information, see Quickstart for Bash in Azure Cloud Shell.

  

• If you prefer to run CLI reference commands locally, install the Azure CLI. If you're running on Windows or macOS, consider running Azure CLI in a Docker container. For more information, see How to run the Azure CLI in a Docker container.

  • If you're using a local installation, sign in to the Azure CLI by using the az login command. To finish the authentication process, follow the steps displayed in your terminal. For other sign-in options, see Sign in with the Azure CLI.

  • When you're prompted, install the Azure CLI extension on first use. For more information about extensions, see Use extensions with the Azure CLI.

  • Run az version to find the version and dependent libraries that are installed. To upgrade to the latest version, run az upgrade.

1. To create a Data Box Disk order, you need to associate it with a resource group and provide a storage account. If a new resource group is needed, use the az group create command to create a resource group as shown in the following example:

   az group create --name databox-rg --location westus
   

2. As with the previous step, you can use the az storage account create command to create a storage account if necessary. The following example uses the name of the resource group created in the previous step:

   az storage account create --resource-group databox-rg --name databoxtestsa
   

3. Next, use the az databox job create command to create a Data Box job with using the SKU parameter value DataBoxDisk. The following example uses the names of the resource group and storage account created in the previous steps:

   az databox job create --resource-group databox-rg --name databoxdisk-job --sku DataBoxDisk \
       --contact-name "Mark P. Daniels" --email-list markpdaniels@contoso.com \
       --phone=4085555555–-city Sunnyvale --street-address1 "1020 Enterprise Way" \
       --postal-code 94089 --country US --state-or-province CA --location westus \
       --storage-account databoxtestsa --expected-data-size 1
   

4. If needed, you can update the job using the az databox job update. The following example updates the contact information for a job named databox-job.

   az databox job update -g databox-rg --name databox-job \
      --contact-name "Larry Gene Holmes" --email-list larrygholmes@contoso.com
   

   The az databox job show command allows you to display a job's information as shown in the following example:

   az databox job show --resource-group databox-rg --name databox-job
   

   To display all Data Box jobs for a particular resource group, use the az databox job list command as shown:

   az databox job list --resource-group databox-rg
   

   A job can be canceled and deleted by using the az databox job cancel and az databox job delete commands, respectively. The following examples illustrate the use of these commands:

   az databox job cancel –resource-group databox-rg --name databox-job --reason "New cost center."
   az databox job delete –resource-group databox-rg --name databox-job
   

5. Finally, you can use the az databox job list-credentials command to list the credentials for a particular Data Box job:

   az databox job list-credentials --resource-group "databox-rg" --name "databoxdisk-job"
   

After the order is created, the device is prepared for shipment.

To cancel this order using the Azure portal, navigate to the Overview section and select Cancel from the command bar.

You can only cancel and order while it's being processed for shipment. The order can't be canceled after processing is complete.

To delete a canceled order, go to Overview and select Delete from the command bar.

A job can be canceled using the Azure CLI. Using the az databox job cancel and az databox job delete commands to cancel and delete the job, respectively. The following examples illustrate the use of these commands:

az databox job cancel –resource-group databox-rg --name databox-job --reason "Billing to new cost center."
az databox job delete –resource-group databox-rg --name databox-job