Data egress with Azure Storage Explorer#

Important

You must be able to receive a secure email. We use the Egress secure email service, which is free to setup for receiving secure emails.

Important

You must know the public IP address(es) that are used by the people in your organisation who will be downloading the data. Talk to your IT team if you’re not sure what these are.

  1. Send your IP address(es) and email address to the 🧑‍💻 Trusted research data manager

  2. Download and install Azure Storage Explorer

  3. Wait until you receive a secure email containing a secure access token, which has read and list privileges, allowing you to download the files.

  4. Open Azure Storage Explorer and click the socket image on the left hand side

    Azure Storage Explorer connection

  5. On Select Resource, choose Blob container

  6. On Select Connection Method, choose Shared access signature URL (SAS) and hit Next

    Connect with SAS token

  7. On Enter Connection Info:

    • Set the Display name to “egress” (or choose an informative name)

    • Copy the Blob SAS URL from your Azure portal session into the Blob container SAS URL box and hit Next

  8. On the Summary page, hit Connect

  9. On the left hand side, the connection should show up under Local & Attached > Storage Accounts > (Attached Containers) > Blob Containers > ingress (SAS)

  10. You should now be able to securely download the data from the Safe Haven’s output volume by highlighting the relevant file(s) and hitting the Download button

  11. Let the 🧑‍💻 Trusted research data manager team know whether egress was successful, asking for help if something went wrong