Delete one or more backup/recovery appliances

If you have multiple backup/recovery appliances and need to delete one of them while continuing to manage other backup/recovery appliances, then it is important to ensure that no resources shared by other backup/recovery appliances are deleted.

If you are deleting the only appliance managed by a management console, then see Delete all backup/recovery appliances in a management console.

Use these instructions to delete a single backup/recovery appliance:

Remove the Backup Plan for the backup/recovery appliance to be deleted from App Manager > Applications.
Unmount all mounted images presented by the backup/recovery appliance from App Manager > Active Mounts.
Identify all the applications protected using Compute Engine snapshots and for each of these applications, and expire all backups. This step can take a long time, depending on the number of backups to expire.

Note: If you wish to preserve the Compute Engine backups, skip this step. Instead, add the OnVault pool used for metadata backups to another backup/recovery appliance, and then import—with ownership—the applications that belonged to the backup/recovery appliance being deleted.
Identify all OnVault backups for which this backup/recovery appliance is the owner, and expire all the backups for these applications. This step can take a long time, depending on the number of backups to expire.

Note: You can skip this step if the OnVault pool is not in use by any other backup/recovery appliance and you want to delete the OnVault pool and the bucket containing it. Instead, you can delete the OnVault pool and the bucket in a later step.
Note: If you wish to preserve this OnVault pool and the backups contained in it, skip this step. Instead, add this OnVault pool to another backup/recovery appliance, and then import—with ownership—the applications that belonged to the backup/recovery appliance being deleted.
Remove the backup/recovery appliance from the management console in Manage > Appliances.
Delete the backup/recovery appliance VM from Compute Engine > VM Instances in Google Cloud Console. You need to disable Deletion Protection for the instance.
Delete the firewall rule that was associated with the VM from VPC Network > Firewall in Google Cloud Console.
Delete the service account that was associated with the VM from IAM & Admin > IAM and IAM & Admin > Service Accounts in Google Cloud Console.
Delete all the keys in the keyring associated with the management console from Security > Key management in Google Cloud Console. Note that you cannot delete the keyring.
If the OnVault pool is not used by any other backup/recovery appliance—and the supporting Cloud Storage bucket is not used for any other purpose—then delete the Cloud Storage bucket from Cloud Storage > Buckets in Google Cloud Console.

Delete all backup/recovery appliances in a management console

If you have one or more backup/recovery appliances and want to delete all of them—for example, if you intend to stop using your current management console:

Remove the backup plan from all the applications on all of the backup/recovery appliances from App Manager > Applications.
Unmount all mounted images presented by all the backup/recovery appliances from App Manager > Active Mounts.
Identify all the applications protected using Cloud snapshots and for each of these applications, and expire all backups. This step can take a long time, depending on the number of backups to expire.
Identify all OnVault backups, and expire all the backups for these applications. This step can take a long time, depending on the number of backups to expire.

Note: You can skip this step if the Cloud Storage buckets supporting the OnVault pools contain no OnVault data. Instead, you delete the entire bucket in a later step.
Remove the backup/recovery appliances from the management console in Manage > Appliances.
Delete the backup/recovery appliance VMs from Compute Engine > VM Instances in Google Cloud Console. You have to disable deletion protection for each instance.
Delete the firewall rule that was associated with the VMs from VPC Network > Firewall in Google Cloud Console.
Delete the service account that was associated with the VM from IAM & Admin > IAM and IAM & Admin > Service Accounts in Google Cloud Console.
Delete all the keys in the keyring associated with the backup/recovery appliances from Security > Key management in Google Cloud Console. Note that you cannot delete the keyring.
If the supporting Cloud Storage bucket behind any OnVault pool is not used for any other purpose, delete the Cloud Storage bucket from Cloud Storage > Buckets in Google Cloud Console.