Edit

Create an enclave endpoint in the Azure portal

In this how-to guide, you create an enclave endpoint in the Azure portal. Enclave endpoints define destination rules that other enclaves or transit hubs can use when creating enclave connections.

Prerequisites

Sign in to Azure

Sign in to the Azure portal.

Create an enclave endpoint

  1. Enter Azure Enclave in the search box.

  2. Under Services, select Azure Enclave.

  3. In the Azure Enclave page, select Enclaves in the left menu.

  4. On the Enclaves page, select the name of your enclave to open the enclave resource.

  5. Select Enclave Endpoints on the left navigation and then select Create.

    Screenshot showing the highlighted create button for enclave endpoints.

  6. Enter the Enclave endpoint name, such as endpoint-MyService.

  7. Under Endpoint rules, select Add.

  8. Enter the Rule Name, Destination IP addresses/CIDR range, Protocol, and Destination Port Range.

    For example, to allow traffic to an HTTPS server hosted on an Azure virtual machine (VM) in a workload, enter the VM private IP address or CIDR range, such as 10.0.2.5 or 10.0.2.0/26, select TCP, and enter 443.

    Screenshot showing the enclave endpoint creation screen with the endpoint rule dialog open.

    Note

    Enclave endpoint rules must use IPv4 destinations in the enclave virtual network. The destination CIDR must map to a subnet that is protected by a network security group.

  9. Select Review + create, validate that the details for your enclave endpoint are correct, and then select Create.

Verify the enclave endpoint

After deployment completes, return to the enclave resource and select Enclave Endpoints. Verify that the new endpoint appears in the list with a status of Succeeded.

Next steps

  • Last updated on