A Practical Guide to Microsoft Azure China

Azure China Overview

Azure China is a locally operated instance of Microsoft Azure in mainland China, run by 21Vianet under China’s legal and regulatory framework. It delivers many core cloud services—such as compute, storage, networking, and identity—on infrastructure located within China. This structure enables enterprises to deploy and run workloads in compliance with China’s data residency and regulatory requirements while using familiar Azure technologies.

Key capabilities:

• Compute & Storage: Virtual machines and blob/file storage services support common IaaS and PaaS scenarios.
• Networking: Virtual networks, VPN gateways, and ExpressRoute‑like connectivity options focused on China regions.
• Identity & Access: Azure Active Directory is available in China, but it works independently from global Azure. Single sign-on and federation with global tenants may behave differently.
• Databases & Analytics: Managed SQL and NoSQL databases, as well as analytics services, are offered in China, though some features and options differ from the global Azure versions.

How does Azure China differ from global Azure?

Azure China runs on the same core Microsoft technology but as a distinct cloud environment with independent operations, service availability differences, and separate identity/endpoint models. Here is a quick comparison table:

Who operates Azure China and how does it affect contracts and support?

Azure in China is operated by 21Vianet (BlueCloud). They provide local contracts, billing in RMB, and direct customer support for China-region services, while Microsoft supplies the platform technology.

A Note on Costs: While billing is in RMB, pricing is generally comparable to global regions, though it can vary based on exchange rates and specific service premiums. It is wise to verify pricing for your specific resource mix.

• Implications: Your procurement, SLAs, and support escalation paths will differ from global Azure. Contracts typically sit with the operator, so managed partners often act as the practical bridge for international customers who require bilingual support, vendor negotiation, or compliance assistance.

Can global Azure accounts access Azure China?

No. Global Azure subscriptions and identities do not automatically grant access to China-region subscriptions.

The China instance requires separate Azure China accounts and localized credential management. Identity patterns that span global and Chinese environments require explicit design. Options include dual-tenancy, federation, or identity synchronization patterns that preserve security and compliance.

Recommendation: We recommend the early creation of a China test account to validate these identity integration models.

What Azure China regions are available, and how should businesses choose?

Azure China uses mainland regions, each tied to specific data centers and operator footprints:

Decision criteria:

• Latency and user geography: Pick the region nearest to your primary users to reduce Round-Trip Time (RTT) and improve user experience.
• Service availability: Confirm that your required platform services, managed databases, and identity features are present in the chosen region.
• Compliance and data residency: Local laws or customer contracts may mandate specific regional residency.
• Partner and support coverage: Prefer regions where local partners or integrators provide proven managed services.

How to open an Azure China account and what documents are needed？

Azure China uses an operator-led onboarding model, which is different from the global Azure self-service signup flow. Account registration requires document review and verification by the local operator.

Typical requirements

To open an Azure China account directly, you usually need:

• A valid Mainland China business license

• A verified local contact

• Supporting corporate documents for operator review

Standard registration process

1. Prepare corporate documentation and designate a local contact.

2. Start registration through the Azure China onboarding pages and submit documents for operator verification.

3. Complete operator agreements and set up RMB billing.

If you do not have a Mainland China legal entity

Companies without a mainland China legal entity cannot complete the standard Azure China registration independently, and must work with a local partner or managed service provider (MSP). In some cases, the Azure China subscription is registered under the partner’s name.

When using this model, it is essential that contracts clearly define customer ownership of all data and intellectual property, as well as access rights and exit arrangements.

Is ICP registration required for sites hosted in China?

Yes. Any public-facing domain hosted on mainland China infrastructure must complete Internet Content Provider (ICP) registration with the Ministry of Industry and Information Technology (MIIT). Failure to obtain ICP registration may result in site blocking or accessibility problems. See how to get the ICP license.

Timeline & Process:

• Operator role: The China operator provides ICP guidance and submission channels.
• Partner role: Many managed partners can complete the filing on behalf of the license holder.
• Time estimate: This is not instantaneous. The process typically takes 20–30 days, so ICP planning should be part of your launch schedule, not an afterthought.

Are Microsoft services such as Microsoft 365 available with Azure China?

Yes. Microsoft 365 is available in China and, like Azure China, is operated locally as a separate instance.

Core services work, but identity integration, compliance behavior, and tenant interoperability differ from global Microsoft 365. This often impacts Azure-hosted applications that depend on email, Teams, or identity services.

Microsoft documents these differences here: Microsoft 365 operated by 21Vianet.

JET IT Services provides support for managing both China and global Microsoft 365 environments.

How should cross-border connectivity be designed between global and China environments?

Because Azure China is logically isolated, cross-border patterns must be explicit and secure.

Common approaches include:

• Private circuits or ExpressRoute-style links are available.
• Encrypted VPN tunnels for management and APIs.
• Hybrid replication for non-latency-critical data.

Network checklist:

1. Measure real-world latency and packet loss from representative user sites.
2. Use private links for production traffic between corporate networks and China regions where possible.
3. Keep frontend services local and use asynchronous replication for backups and analytics in global regions.

For operations, our global connectivity team can help with route assessment and private-circuit design . 

A Practical Migration Checklist

A compact, actionable checklist accelerates safe migration:

Common Mistakes and How to Avoid Them

• Assuming identical identity and subscription models: Plan for separate tenancy and an identity strategy that supports cross-tenant federation or synchronization.
• Treating ICP as optional: Include ICP filing in the project timeline to avoid launch interruption.
• Skipping functional parity testing: Service differences can require architecture changes or re-deployment.
• Underestimating network impact: Measure and design for cross-border latency and packet behavior prior to production.

How We Can Help

With extensive experience supporting international companies operating reliably across Greater China and APAC, JET IT Services can assist with:

• Account Setup: Coordinating with the operator (21Vianet) and completing required documentation.
• Connectivity: Designing stable cross-border networks.
• Operations: Providing managed IT services to run your deployment.
• Microsoft 365: Supporting dual environments for global and China operations.

More FAQs

1. Is OneDrive accessible in China?
   Access to OneDrive from mainland China can be intermittent. Availability depends on network routes and whether the account is on a China-operated tenant, so functional validation from representative user locations is recommended.
2. Which cloud storage services are reliably available inside China?
   Domestic object storage services such as Alibaba Cloud OSS, Tencent Cloud COS, and Huawei OBS are reliably reachable within China. Many international consumer storage endpoints can be blocked or unstable for mainland connections.
3. What are the main Chinese alternatives to Azure?
   Major local public clouds in China include Alibaba Cloud, Tencent Cloud, and Huawei Cloud, each offering broad PaaS and IaaS portfolios and strong local partner ecosystems; choice depends on service parity, partner availability, and pricing.
4. Does Azure have physical data centers in China?
   Yes. Azure has physical data centers in mainland China, operated by the local partner 21Vianet.
5. Who can assist with ICP filing?
   Local operators provide ICP guidance and submission portals, and many managed service providers or integrators can perform filing on behalf of a license holder as part of a launch package.
6. Can Azure Marketplace offers and global SKUs be used in China?
   Marketplace availability in China is limited compared with global regions; some images, third-party offers, and managed solutions may be absent or differ, so validation in a China test subscription is required.
7. How should identity synchronization be handled between global and China tenants?
   Identity patterns typically use dual-tenant design, federation, or controlled synchronization. The chosen approach should preserve security, auditability, and compliance with local data policies.
8. Are export controls or data transfer restrictions relevant?

   Yes. China’s regulatory and data residency considerations can affect export and transfer of certain data types; architecture should document data flows, encryption key residency, and applicable regulatory constraints.