Review copy errors in uploads from Azure Data Box devices
This article describes review and follow-up for errors that occasionally prevent files from uploading to the Azure cloud from an Azure Data Box device.
The error notification and options vary depending on whether you can fix the error in the current upload:
Retryable errors - You can fix many types of copy error and resume the upload. The data is then successfully uploaded in your current order.
An example of a retryable error is when Large File Shares are not enabled for a storage account that requires shares with data more than 5 TiB. To resolve this, you will need to enable this setting and then confirm to resume data copy. This type of error is referred to as a retryable error in the discussion that follows.
Non-retryable errors - These are errors that can't be fixed. For those errors, the upload pauses to give you a chance to review the errors. But the order completes without the data that failed to upload, and the data is secure erased from the device. You'll need to create a new order after you resolve the issues in your data.
An example of a non-retryable error is if a blob storage container is configured as Write Once, Read Many (WORM). Upload of any blobs that are already stored in the container will fail. This type of error is referred to as a non-retryable error in the discussion that follows.
Note
The information in this article applies to import orders only.
Upload errors notification
When a file upload fails because of an error, you'll receive a notification in the Azure portal. You can tell whether the error can be fixed by the status and options in the order overview.
Retryable errors: If you can fix the error in the current order, the notification looks similar to the following one. The current order status is Data copy halted. You can either choose to resolve the error or proceed with data erasure without making any change. If you select Resolve error, a Resolve error screen will tell you how to resolve each error. For step-by-step instructions, see Review errors and proceed.
Non-retryable errors: If the error can't be fixed in the current order, the notification looks similar to the following one. The current order status is Data copy completed with errors. Device pending data erasure. The errors are listed in the data copy log, which you can open using the Copy Log Path. For guidance on resolving the errors, see Summary of upload errors.
You can't fix these errors. The upload has completed with errors. The notification lets you know about any configuration issues you need to fix before you try another upload via network transfer or a new import order.
After you review the errors and confirm you're ready to proceed, the data is secure erased from the device. If you don't respond to the notification, the order is completed automatically after 14 days. For step-by-step instructions, see Review errors and proceed.
Review errors and proceed
How you proceed with an upload depends on whether the errors can be fixed and the current upload resumed (see Retryable errors tab), or the errors can't be fixed in the current order (see the Non-retryable errors tab).
When a retryable error occurs during an upload, you receive a notification with instructions for fixing the error. If you can't fix the error, or prefer not to, you can proceed with the order without fixing the errors.
To resolve retryable copy errors during an upload, do these steps:
Open your order in the Azure portal.
If any retryable copy errors prevented files from uploading, you'll see the following notification. The current order status will be Data copy halted.
Select Resolve error to view help for the errors.
Your screen will look similar to the one below. In the example, the Enable large file share error can be resolved by toggling Not enabled for each storage account.
The screen tells how to recover from two other copy errors: a missing storage account and a missing access key.
For each error, there's a Learn more link to get more information.
After you resolve the errors, select the check box by I confirm that the errors have been resolved. Then select Proceed.
The order status changes to Data copy error resolved. The data copy will proceed within 24 hours.
Note
If you don't resolve all of the retryable errors, this process will repeat after the data copy proceeds. To proceed without resolving any of the retryable errors, select Skip and proceed with data erasure on the Overview screen.
Summary of upload errors
Review the summary tables on the Retryable errors tab or the Non-retryable errors tab to find out how to resolve or follow up on data copy errors that occurred during your upload.
When the following errors occur, you can resolve the errors and include the files in the current data upload.
| Error message | Error description | Error resolution |
|---|---|---|
| Large file share not enabled on account | Large file shares aren't enabled on one or more storage accounts. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Large file shares are not enabled on the indicated storage accounts. Select the option highlighted to enable quota up to 100 TiB per share. |
| Storage account deleted or moved | One or more storage accounts were moved or deleted. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Storage accounts deleted or moved Storage accounts: <storage accounts list> were either deleted, or moved to a different subscription or resource group. Recover or re-create the storage accounts with the original set of properties, and then confirm to resume data copy. Learn more on how to recover a storage account. |
| Storage account location changed | One or more storage accounts were moved to a different region. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Storage accounts location changed Storage accounts: <storage accounts list> were moved to a different region. Restore the account to the original destination region and then confirm to resume data copy. Learn more on how to move storage accounts. |
| Virtual network restriction on storage account | One or more storage accounts are behind a virtual network and have restricted access. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Storage accounts behind virtual network Storage accounts: <storage accounts list> were moved behind a virtual network. Add Data Box to the list of trusted services to allow access and then confirm to resume data copy. Learn more about trusted first party access. |
| Storage account owned by a different tenant | One or more storage accounts were moved under a different tenant. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Storage accounts moved to a different tenant Storage accounts: <storage accounts list> were moved to a different tenant. Restore the account to the original tenant and then confirm to resume data copy. Learn more on how to move storage accounts. |
| Kek user identity not found | The user identity that has access to the customer-managed key wasn't found in the active directory. Resolve the error and resume data copy, or skip to data erasure and complete the order. | User identity not found Applied a customer-managed key but the user assigned identity that has access to the key was not found in the active directory. This error may occur if a user identity is deleted from Azure. Try adding another user-assigned identity to your key vault to enable access to the customer-managed key. For more information, see how to Enable the key. Confirm to resume data copy after the error is resolved. |
| Cross tenant identity access not allowed | Managed identity couldn't access the customer-managed key. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Cross tenant identity access not allowed Managed identity couldn't access the customer-managed key. This error may occur if a subscription is moved to a different tenant. To resolve this error, manually move the identity to the new tenant. Try adding another user-assigned identity to your key vault to enable access to the customer-managed key. For more information, see how to Enable the key. Confirm to resume data copy after the error is resolved. |
| Key details not found | Couldn't fetch the passkey as the customer-managed key wasn't found. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Key details not found If you deleted the key vault, you can't recover the customer-managed key. If you migrated the key vault to a different tenant, see Change a key vault tenant ID after a subscription move. If you deleted the key vault and it is still in the purge-protection duration, use the steps at Recover a key vault. If the key vault was migrated to a different tenant, use one of the following steps to recover the vault:
|
| Key vault details not found | Couldn't fetch the passkey as the associated key vault for the customer-managed key wasn't found. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Key vault details not found If you migrated the key vault to a different tenant, see Change a key vault tenant ID after a subscription move. If you deleted the key vault and it is in the purge-protection duration, use the steps in Recover a key vault. If the key vault was migrated to a different tenant, use one of the following steps to recover the vault:
|
| Key vault bad request exception | Applied a customer-managed key, but either the key access wasn't granted or was revoked, or the key vault was behind a firewall. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Key vault bad request exception Add the identity selected for your key vault to enable access to the customer-managed key. If the key vault is behind a firewall, switch to a system-assigned identity and then add a customer-managed key. For more information, see how to Enable the key. Confirm to resume data copy after the error is resolved. Configure Azure Key Vault firewalls and virtual networks |
| Encryption key expired | Couldn't fetch the passkey as the customer-managed key has expired. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Encryption key expired Enable the key version and then confirm to resume data copy. |
| Encryption key disabled | Couldn't fetch the passkey as the customer-managed key is disabled. Resolve the error and resume data copy, or skip to data erasure and complete the order. | Encryption key disabled Enable the key version and then confirm to resume data copy. |
| User assigned identity not valid | Couldn't fetch the passkey as the user assigned identity used was not valid. Resolve the error and resume data copy, or skip to data erasure and complete the order. | User assigned identity not valid Applied a customer-managed key but the user assigned identity that has access to the key is not valid. Try adding a different user-assigned identity to your key vault to enable access to the customer-managed key. For more information, see how to Enable the key. Confirm to resume data copy after the error is resolved. |
| User assigned identity not found | Couldn't fetch the passkey, WrapKey, and UnwrapKey permissions for the identity in the key vault's access policy. These permissions must remain for the lifetime of the customer-managed key. XXX Resolve the error and resume data copy, or skip to data erasure and complete the order. |
User assigned identity not found Applied a customer-managed key but the user assigned identity that has access to the key wasn't found. To resolve the error, check if:
|
| Unknown user error | An error has halted the data copy. Contact Support for details on how to resolve the error. Alternatively, you may skip to data erasure and review copy and error logs for the order for the list of files that weren't copied. | Error during data copy Data copy is halted due to an error. Contact Support for details on how to resolve the error. After the error is resolved, confirm to resume data copy. |
For more information about the data copy log's contents, see Tracking and event logging for your Azure Data Box and Azure Data Box Heavy import order.
Other REST API errors might occur during data uploads. For more information, see Common REST API error codes.