Short-lived PIN, valid for five minutes, created from a Recovery Services vault's Properties. Hybrid backups through MARS, MABS or DPM ask for it before critical actions such as stopping protection with data deletion or changing the passphrase; Azure VM backups aren't covered.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Azure Backup security PIN in context, with comparison tables and the common traps.
Terms in this definition
- PIN
A brief secret code. The Windows Hello for Business kind is bound to a single machine and protected by its TPM, which means it stays put rather than travelling like a password does. App protection policies may additionally ask for a separate app-level code.
- Recovery Services vault
Where Azure Backup and Site Recovery keep their data; it offers soft delete, immutability and multi-user authorisation, but is the wrong choice for cheaply archiving files you already have.
- Microsoft Azure Recovery Services agent
Usually installed on on-premises Windows machines, the MARS agent sends their files, folders and system state directly into a Recovery Services vault.
- MABS
Microsoft Azure Backup Server, installed on-premises to back up workloads both locally and to Azure. Multi-user authorisation (MUA) isn't available with it.
- DPM
System Center Data Protection Manager. It and MABS are the hybrid backup servers that the Azure Backup security PIN protects.