Restoring from a read-only encrypted capacity tier

[RubinCompServ]

We are a cloud provider and have a shared VBR for our customers. One customer provided their own Azure Blob and asked us to use it as the Capacity Tier for their backups. We added it as the Capacity Tier and encrypted it with a password. They then mounted the Blob as Read-only on their own VBR and are unable to restore from it. They say that the backups are encrypted (which they are) but there is no way for them to decrypt them. Can a Read-only Blob only be restored from if the backups aren't encrypted?

[vnikiforov]

Hello, David,

When the customer adds the container as read-only and runs Import Backups, the wizard asks for that password, and with the correct one the backups become available for restore. So you need to hand the capacity tier encryption password to the customer.

One side note: for Azure Blob, read-only access exists only as the v13.1 option and requires an immutable container.