Home > tool > Data Export Service
Export to PDFIf the subscription to AvePoint Cloud Backup for Microsoft 365 service ends, AvePoint will retain the backup data in AvePoint storage for 15 days, subject to the terms of your service agreement. The backup data in AvePoint storage can be exported to your own storage as a paid service. You must submit an export request if you wish to export your data from AvePoint Storage.
*Note: If you have a BYOS (bring your own storage) subscription, the backup data will remain in your own storage until you delete it. You do not need to pay an export fee.
Backup data is encrypted and stored in AvePoint format rather than as pure copies of Microsoft 365 data. AvePoint offers a stand-alone export tool to convert backup data into readable content. This tool can restore Exchange Online/Microsoft 365 Group mailboxes, Public Folders, OneDrive, Teams channel conversations, Teams chats, SharePoint Online/Microsoft 365 Group/Teams/Viva Engage site collections, and Power BI workspaces from supported storage types (FTP, SFTP, Microsoft Azure Blob storage, Amazon S3 storage, Amazon S3-Compatible Storage, Dropbox, and Google Cloud Storage) to a local system as PST files. For details, refer to Restore Backup Data via This Tool.
Before data recovery, you must verify the following:
Backup data generated by AvePoint Cloud Backup is encrypted. You need an encryption key to help you convert the backup data to a plain file format during the restore job. Your tenant administrator in the AvePoint Online Services platform can export the encryption key from the AvePoint Cloud Backup interface directly.
The encryption key file will be exported separately for each object type for which you have performed a backup. To export the encryption key, complete the steps below:
Go to the AvePoint Cloud Backup for Microsoft 365 interface.
Navigate to Settings > Security > Encryption Keys.
Set a password for encryption keys and click the Apply button to apply the password. The password is used to access the encryption keys in the standalone tool. You can also configure whether to allow AvePoint Cloud Backup for Microsoft 365 to copy the encryption keys to your BYOS storage weekly.

To generate and download the encryption key for the service types that you have performed a backup with, click the Generate button to generate the key, and then click Download to download the ZIP file and save it to your local computer.
If you have performed backups or updated the password after the last time you generated the key, click Regenerate to regenerate the keys and download the file again.
Follow the instructions below to restore the backup data of Exchange Online/Microsoft 365 Group mailboxes, Public Folders, OneDrive, Teams channel conversations, Teams chats, SharePoint Online/Microsoft 365 Group/Teams/Viva Engage site collections, and Power BI workspaces using AvePoint Cloud Backup Data Export Tool.
Extract the package and find the StandaloneTool.exe file.
Double-click the StandaloneTool.exe application file. The AvePoint Cloud Backup for Microsoft Standalone Tool window appears.
Click Decrypt and Export Backup Data.
In the Backup Data Location step, select the data type that you want to export.
Then select the storage type and configure the storage information. So far, this tool has supported the following storage types.
FTP:
Host - Enter the host of the FTP server.
Port - Enter the port of the FTP server.
Folder - Enter the folder name where the backup data resides.
Username and Password - Enter the user credentials to access the FTP storage.
Extended Parameters – Enter the following extended parameters if necessary. If you have multiple parameters to enter, press Enter on the keyboard to separate the parameters. Refer to the instructions below to add parameters:
verifyindexdbsize=false – By default, Cloud Backup jobs check the index database file size when uploading index. If your FTP server does not support obtaining file size on device, you can use this parameter. This parameter is not recommended as it may risk of the index database loss.
IsRetry – Whether or not to try again when Cloud Backup fails to write the data in the physical device.
If you enter IsRetry=true, it will try again when Cloud Backup fails to write the data in the physical device.
If you enter IsRetry=false, it will not try again when Cloud Backup fails to write the data in the physical device.
RetryInterval – Customize the retry interval when the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646 (the unit is second). For example, RetryInterval=30 means that it will try to reconnect every 30 seconds.
If you do not configure this parameter, the value is 30 seconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. You are allowed to enter any positive integer between 0 and 9. For example, RetryCount=9 represents when the network connection is interrupted. It can reconnect at most 9 times.
If you do not configure this parameter, the value is 6 by default.
Microsoft Azure Blob Storage:
Access Point - Enter the URL for the Blob Storage Service. The default URL is https://blob.core.windows.net.
Container Name - Enter the container name you wish to access.
Account Name - Enter the corresponding account name to access the specified container.
Account Key - Enter the corresponding account key to access the specified container.
Extended Parameters – Enter the following extended parameters if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters. Refer to the instructions below to add parameters.
RetryInterval – Customize the retry interval when the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646 (the unit is millisecond). For example, RetryInterval=30000 means that it will try to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. You are allowed to enter any positive integer between 0 and 9. For example, RetryCount=9 represents when the network connection is interrupted. It can reconnect at most 9 times.
If you do not configure this parameter, the value is 6 by default.
CustomizedMetadata – Configure if customized metadata or user-added metadata is supported. By default, customized metadata and user-added metadata are all supported.
CustomizedMode=Close **–**This physical device will not support customized metadata or user-added metadata.
CustomizedMode=SupportAll – This physical device will support all customized metadata and user-added metadata.
CustomizedMode=CustomizedOnly – This physical device will only support user-added metadata.
SFTP:
Host – Enter the IP address of the SFTP server.
Port – Enter the port to use to connect to this SFTP server. The default port is 22.
Root Folder – Enter the root folder that you wish to access.
Username – Enter the username used to access the root folder.
Authentication Method – Select the Password or Public Key as the authentication method.
Password – Enter the corresponding password of the user used to access the root folder.
Public Key – Enter the private key and the corresponding private key password to access the root folder.
Extended Parameters – You can also enter the following extended parameters if necessary. If you have multiple parameters to enter, press Enter on the keyboard to separate the parameters. Refer to the instructions below to add parameters:
IsRetry – Whether or not to try again when Cloud Backup fails to write the data in the physical device.
If you enter IsRetry=true, it will try again when Cloud Backup fails to write the data in the physical device.
If you enter IsRetry=false, it will not try again when Cloud Backup fails to write the data in the physical device.
RetryInterval – Customize the retry interval when the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646 (the unit is second). For example, RetryInterval=30 means that it will try to reconnect every 30 seconds.
If you do not configure this parameter, the value is 30 seconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. You are allowed to enter any positive integer between 0 and 9. For example, RetryCount=9 represents when the network connection is interrupted. It can reconnect at most 9 times.
If you do not configure this parameter, the value is 6 by default.
Amazon S3:
Bucket Name – Enter the bucket name you wish to access.
Access Key ID – Enter the corresponding access key ID to access the specified bucket. You can view the Access key ID from your AWS account.
Secret Access Key – Enter the corresponding secret key ID to access the specified bucket. You can view the Secret access key from your AWS account.
Storage Region – Select the storage region of this bucket from the drop-down menu.
Extended Parameters – Enter the following extended parameters if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters. Refer to the instructions below to add parameters.
RetryInterval – Customize the retry interval when the network connection is interrupted. Enter any positive integer between 0 and 2147483646 (the unit is millisecond). For example, RetryInterval=30000 means that it will try to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. Enter any positive integer between 0 and 9. For example, RetryCount=9 represents when the network connection is interrupted, and it can reconnect at most 9 times.
If you do not configure this parameter, the value is 6 by default.
CustomizedMetadata – Configure if customized metadata or user-added metadata is supported. By default, customized metadata and user-added metadata are all supported.
CustomizedMode=Close **–**This physical device will not support customized metadata or user-added metadata.
CustomizedMode=SupportAll – This physical device will support all customized metadata and user-added metadata.
CustomizedMode=CustomizedOnly – This physical device will only support user-added metadata.
CustomizedRegion – Configure the customized region of the physical device. For example, enter CustomizedRegion=s3.us-gov-west-1.amazonaws.com to configure the GovCloud account.
Amazon S3-Compatible:
Bucket name – Enter the bucket name you wish to access.
Access key ID – Enter the corresponding access key ID to access the specified bucket.
Secret access key – Enter the corresponding secret key ID to access the specified bucket.
Endpoint – Specify the URL for the location where the data is to be stored.
*Note: The URL must begin with “http://” or “https://”.
Extended Parameters – Enter the following extended parameters if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters. Refer to the instructions below to add parameters.
Allow_Insecure_SSL – By default, the storage client expects an SSL certificate issued by a public trusted certificate authority over HTTPS transport to ensure integrity. A self-signed certificate on the storage server side will fail the certificate validation. If you choose to use a self-signed certificate, you can set the Allow_Insecure_SSL to true in the Extended parameters to bypass the certificate validation.
SignatureVersion – By default, Cloud Backup uses V4 authentication to access your storage. If you want to use V2 authentication, add SignatureVersion=V2 into the extended parameters.
RetryInterval – Customize the retry interval when the network connection is interrupted. Enter any positive integer between 0 and 2147483646 (the unit is millisecond). For example, RetryInterval=30000 means that it will try to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. Enter any positive integer between 0 and 9. For example, RetryCount=9 represents when the network connection is interrupted. It can reconnect at most 9 times.
If you do not configure this parameter, the value is 6 by default.
CustomizedMetadata – Configure if customized metadata or user-added metadata is supported. By default, customized metadata and user-added metadata are all supported.
CustomizedMode=Close – This physical device will not support customized metadata or user-added metadata.
CustomizedMode=SupportAll – This physical device will support all customized metadata and user-added metadata.
CustomizedMode=CustomizedOnly – This physical device will only support user-added metadata.
Cert_thumbprint – If you have a self-signed certificate for S3 server and only want to pass the certificate validation with a specific thumbprint, enter your thumbprint as the value of the parameter.
Virtualhosting – By default, it is set to false. If your bucket does not support using path-style domain names, you need to configure virtualhosting = true to use virtual-hosted-style domain names.
Dropbox:
Root Folder Name – Enter the name of a folder under the root folder of the Dropbox where the data resides.
Token Secret – Click Retrieve Token. Enter the e-mail address and the password of the Dropbox account in the pop-up window to log into Dropbox, and then the token will appear in this pop-up window. Enter the token in the Token Secret box.
Extended Parameters – Enter the following extended parameters if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters. Refer to the instructions below to add parameters.
RetryInterval – Customize the retry interval when the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646 (the unit is millisecond). For example, RetryInterval=30000 means that it will try to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. You are allowed to enter any positive integer between 0 and 9. For example, RetryCount=9 represents when the network connection is interrupted. It can reconnect at most 9 times.
If you do not configure this parameter, the value is 6 by default.
Google Cloud Storage:
Bucket Name – Enter the bucket name you wish to access.
Service Account Key – Click the Browse button to select and upload a service account key file in JSON format that has been generated in the Google Cloud Storage platform.
Click Next.
In the Import Encryption Key step, click Browse to browse and select the ZIP file of the encryption keys, and enter the password you set in AvePoint Cloud Backup for Microsoft 365 to access the encryption keys. This export tool will find the backup data from your storage and convert it to plain file format.

Click Next.
In the Select Data to Recover step, select the OneDrive user email addresses, Teams channel conversations, Teams chats, mailboxes, site collections, or public folders to revert them to the state of the selected recovery point.
*Note: If you want to restore all the data that has ever been backed up for the selected OneDrive, Teams channel conversations, Teams chats, mailboxes, site collections, public folders, or Power BI workspaces, including the data deleted before the recovery point, select the option above the table.
Note that a mailbox that has been recreated, not just renamed, with the same address will be regarded as a different mailbox. This might require a broader search to ensure you find all the backup data before exporting.

Click Next.
In the Select Export Location step, click Browse to select a disk or folder to store the exported data. For BYOS customers, you can choose to export the data to the Original BYOS location.
Click Next to start the export job.