Decommission Backup and DR Service

This page explains how to decommission the Backup and DR Service. Decommissioning Backup and DR involves the following steps:

1. Delete backup/recovery appliances
2. Delete the management console
3. Disable APIs

Delete backup/recovery appliances

Use these instructions to delete the backup/recovery appliances:

1. Remove the backup plan from all the applications on all of the backup/recovery appliances from App Manager > Applications. See Remove backup plan management of an application for instructions.

2. Unmount all mounted images presented by all backup/recovery appliances from App Manager > Active Mounts. See Unmount active images for instructions.

3. Identify all Compute Engine applications protected and for each of these applications, expire all backups. This step can take a long time, depending on the number of backups to expire. See Manage image expiration for instructions.

4. Identify all OnVault backups, and expire all the backups for these applications. This step can take a long time, depending on the number of backups to expire.

   Note: You can skip this step if the Cloud Storage buckets supporting the OnVault pools contain no OnVault data. Instead, you delete the entire bucket in a later step.

5. Remove the backup/recovery appliances from the management console in Manage > Appliances. See Remove a backup/recovery appliance from the management console for instructions.

6. Delete the backup/recovery appliance VMs from Compute Engine > VM Instances in Google Cloud console. You have to disable deletion protection for each instance.

7. Delete the firewall rule that was associated with the VMs from VPC Network > Firewall in Google Cloud console.

8. Delete the service account that was associated with the VM from IAM & Admin > IAM and IAM & Admin > Service Accounts in Google Cloud console.

9. Delete all the keys in the keyring associated with the backup/recovery appliances from Security > Key management in Google Cloud console. Note: You cannot delete the keyring.

10. If the supporting Cloud Storage bucket behind any OnVault pool is not used for any other purpose, delete the Cloud Storage bucket from Cloud Storage > Buckets in Google Cloud console.

Delete the management console

Use these instructions to delete the management console.

1. In the Google Cloud console, click the menu icon on the top left of the screen.
2. Navigate to Operations and select Backup and DR Service.
3. From the Login to the management console page, click the three dots, and select Delete management console.

Disable APIs

After you have deleted the backup/recovery appliances and the management console, you can disable the Backup and DR Service API. During the deployment of Backup and DR, you may have enabled the following APIs. If you do not need any of these APIs for other operations in a project, you may disable them.

The following table lists the APIs that you have enabled during the deployment of Backup and DR Service:

API	Service name
Compute Engine	compute.googleapis.com
Cloud Resource Manager	cloudresourcemanager.googleapis.com
Workflows	workflows.googleapis.com
Cloud Key Management Service (KMS)	cloudkms.googleapis.com
Identity and Access Management IAM	iam.googleapis.com
Cloud Logging	logging.googleapis.com

Follow the below instructions to disable the enabled APIs.

1. In the Google Cloud console, click the menu icon on the top left of the screen.
2. Navigate to APIs & Services.
3. Select the API that you want to disable. For example, Backup and DR Service API.
4. Click Manage.
5. Click Disable API.
6. Click Disable in the confirmation dialog box.