Azure connection status Out Of Policy

Simon Gibson 20 Reputation points
2024-07-02T13:23:37.5233333+00:00

Hi we have an issue with our Azure connection status on two nodes saying they are out of policy. Last azure sync was 27 May 2024, i have featured updated both nodes to 22h2. time on the nodes is the same as the server. Unsure what to do next.

Azure Stack HCI
Azure Stack HCI
A hyperconverged infrastructure operating system delivered as an Azure service that provides security, performance, and feature updates.
365 questions
0 comments No comments
{count} votes

5 answers

Sort by: Most helpful
  1. deherman-MSFT 37,501 Reputation points Microsoft Employee
    2024-07-02T17:38:08.72+00:00

    @Simon Gibson

    My first recommendation would be to download and Use the Azure Stack HCI Support Diagnostic tool. This could help you isolate any configuration or connection issues that may be easily resolvable. You also will want to review the Microsoft-AzureStack-HCI/Admin Event Log for more information about the OutOfPolicy error. You can view more information about this error and troubleshooting steps here.

    Hope this helps! If you are unable to resolve the error, please let me know and we can work with you directly to further investigate.


    If you still have questions, please let us know in the "comments" and we would be happy to help you. Comment is the fastest way of notifying the experts.

    If the answer has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community.

    Thank you for helping to improve Microsoft Q&A!

    User's image

    1 person found this answer helpful.
    0 comments No comments

  2. KCC 365admin 0 Reputation points
    2024-07-03T08:21:16.4066667+00:00

    Hi

    how do i access this? Microsoft-AzureStack-HCI/Admin Event Log - via powershell or through the WAC

    on the BaseStation check

    Invoke-AzsSupportDiagnosticCheck -ProductName Registration

    The only fails were on the nodes missing updates, would this be an issue?

    ====[ Validating data from node:xxxxxx-HCI1 ]====

    [Fail] [Windows Features - All windows features installed]

    Verify that all features required for Azure Stack HCI are installed.

    Details: You are missing the following features: NetworkATC,Storage-Replica

    Documentation: https://learn.microsoft.com/en-us/azure-stack/hci/deploy/create-cluster-powershell#step-13-install-roles-and-features

    ====[ Validating data from node: xxxxxx-HCI2 ]====

    [Fail] [Windows Features - All windows features installed]

    Verify that all features required for Azure Stack HCI are installed.

    Details: You are missing the following features: NetworkATC,Storage-Replica

    Documentation: https://learn.microsoft.com/en-us/azure-stack/hci/deploy/create-cluster-powershell#step-13-install-roles-and-features

    on the registration check, one node seems to have more fails than the other

    Invoke-AzsSupportDiagnosticCheck -ProductName Registration

    ====[ Validating registration state on node: xxxxxxx-HCI1 ]====

    [Pass] [Azure Stack HCI - General registration state]

    Validate that the cluster is registered

    Details: Validation successfull

    [Fail] [Azure Stack HCI - Azure Connection state]

    Validate that the cluster is in a connected state

    Details: This Azure Stack HCI node does not seem to be connected to azure. Ensure that this node is in a connected state.

    Documentation: https://learn.microsoft.com/en-us/azure-stack/hci/deploy/troubleshoot-hci-registration

    [Pass] [Azure Arc Agent - Connection state]

    Validate that the azure arc agent is connected

    Details: Validation successfull

    [Pass] [Azure Arc Agent - Service state] Validate that all azure arc services are running Details: Validation successfull [Pass] [Azure Arc Agent - Heartbeat state] Validate that the azure arc agent has sent out a heartbeat at least a day ago Details: Validation successfull

    [Pass] [Azure Stack HCI - Arc Agent onboarded]

    Validate that all arc agent checks are passed

    Details: Validation successfull

                                                                                                                                                                  ====[ Validating registration state on node: xxxxxxxxHCI2 ]====                                                        [Pass] [Azure Stack HCI - General registration state]                                                                                 Validate that the cluster is registered                                                                                                       Details: Validation successfull                                                                                                                                                    
    ```[Fail] [Azure Stack HCI - Azure Connection state]
    
    Validate that the cluster is in a connected state
    
    Details: This Azure Stack HCI node does not seem to be connected to azure. Ensure that this node is in a connected state.
    
    Documentation: https://learn.microsoft.com/en-us/azure-stack/hci/deploy/troubleshoot-hci-registration
    
    [Pass] [Azure Arc Agent - Connection state]
    
    Validate that the azure arc agent is connected
    
    Details: Validation successfull
    
    [Fail] [Azure Arc Agent - Service state]
    
    Validate that all azure arc services are running
    
    Details: Verify that all services are in a running state: himds, gcarcservice and extensionservice
    
    [Pass] [Azure Arc Agent - Heartbeat state]
    
    Validate that the azure arc agent has sent out a heartbeat at least a day ago
    
    Details: Validation successfull
    
    [Fail] [Azure Stack HCI - Arc Agent onboarded]
    
    Validate that all arc agent checks are passed
    
    Details: There seems to be an issue with the arc agent on this node.
    
    Documentation: https://learn.microsoft.com/en-us/azure-stack/hci/deploy/troubleshoot-hci-registration
    
    [Fail] [Validation summary]
    
    Details: At least one node reported an invalid registration state.
    

  3. KCC 365admin 0 Reputation points
    2024-07-03T10:56:30.31+00:00

    Tried a unregister of the HCI and getting this error- any more ideas?

    0 comments No comments

  4. KCC 365admin 0 Reputation points
    2024-07-03T10:57:32.4833333+00:00
    0 comments No comments

  5. Vince Asta 0 Reputation points
    2024-08-28T18:27:45.19+00:00

    FYI...

    This doesn't work on 23H2. Trying to run any of these commands results in:
    Inavalid version! Please use version build 20349

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.