Data not available in Azure Migrate for web app on DMZ server(s)

Question

Data not available in Azure Migrate for web app on DMZ server(s)

Simon Windeler 20

Trying to collect web app data from IIS servers in a DMZ, DMZ network has it's own domain that is trusted with the production domain. Azure migrate box isn't connected to the domain, we've recently created another appliance in the DMZ network and get the same error. Software inventory is fine.

Error message

Unable to connect to server "" due to an error. The WinRM client cannot process the request. If the authentication scheme is different from Kerberos, or if the client computer is not joined to a domain, then HTTPS transport must be used or the destination machine must be added to the TrustedHosts configuration setting. Use winrm.cmd to configure TrustedHosts.

Simon Windeler 20 Reputation points

2024-10-25T15:08:46.4833333+00:00

Thanks Sadiqh, we ended up joining the appliance to the same domain, fixed the issue for some of the IIS servers but the one we were interested in comes back with a powershell issue. You can mark as resolved as I suspect it's something on the server itself causing the issue.

Powershell execution failed due to an unhandled exception. Error occured: '80131501' Message: 'You cannot call a method on a null-valued expression.'.
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-10-28T05:50:10.54+00:00

@Simon Windeler Thanks for the update. I have converted my post as answer. I would request you to "Accept Answer and Upvote" so that the relevancy of this post will improve when anyone in the community search for a similar query.

REG: Your PowerShell issue, not sure what went wrong. You may want to try updating the PS module and ensure all prerequisites are met for running PS. See if this helps resolve the issue, if not, you can check with PowerShell experts.

1 answer

Your answer

Simon Windeler 20 Reputation points

2024-10-25T15:08:46.4833333+00:00

Thanks Sadiqh, we ended up joining the appliance to the same domain, fixed the issue for some of the IIS servers but the one we were interested in comes back with a powershell issue. You can mark as resolved as I suspect it's something on the server itself causing the issue.

Powershell execution failed due to an unhandled exception. Error occured: '80131501' Message: 'You cannot call a method on a null-valued expression.'.
SadiqhAhmed-MSFT 49,326 Reputation points Microsoft Employee Moderator

2024-10-28T05:50:10.54+00:00

@Simon Windeler Thanks for the update. I have converted my post as answer. I would request you to "Accept Answer and Upvote" so that the relevancy of this post will improve when anyone in the community search for a similar query.

REG: Your PowerShell issue, not sure what went wrong. You may want to try updating the PS module and ensure all prerequisites are met for running PS. See if this helps resolve the issue, if not, you can check with PowerShell experts.

Answer 1

@Simon Windeler Thank you for contacting us!

The error message you're encountering suggests issues with the Windows Remote Management (WinRM) configuration, especially in a multi-domain environment with a DMZ.

First thing, you need to resolve WinRM Connection Issues:

Ensure that WinRM is properly configured on the IIS servers in the DMZ.
Run the following command on the IIS server to check the current WinRM configuration:

winrm get winrm/config

Secondly, Set Up TrustedHosts:

Since the Azure Migrate appliance is not joined to the domain, you need to add the IIS server(s) to the TrustedHosts list.
On the Azure Migrate appliance (or any management server trying to connect), run:
```
  winrm set winrm/config/client '@{TrustedHosts="IIS_Server_IP"}'
```
You can replace IIS_Server_IP with the actual IP address of your IIS server. If you have multiple servers, separate them with commas (e.g., "Server1_IP,Server2_IP").

If your authentication scheme requires it, configure WinRM to use HTTPS. This can enhance security and is often required when dealing with machines not in the same domain.

To configure HTTPS:

First, ensure that a valid SSL certificate is installed on the IIS server.
Then, run the following command on the IIS server to enable HTTPS for WinRM:

winrm create winrm/config/Listener?Address=*+Transport=HTTPS '@{Hostname="IIS_Server_FQDN";CertificateThumbprint="YOUR_CERT_THUMBPRINT"}'

Replace IIS_Server_FQDN with the fully qualified domain name of the IIS server and YOUR_CERT_THUMBPRINT with the thumbprint of the SSL certificate.

Ensure that the firewall on the IIS server allows traffic on the WinRM ports (default is 5985 for HTTP and 5986 for HTTPS). Also, check any network firewalls between the Azure Migrate appliance and the DMZ IIS servers.

Hope these steps help resolve your issue. If problem persist, check the WinRM logs for any additional error messages. The logs are typically located in the Event Viewer under Applications and Services Logs > Microsoft > Windows > WinRM.

If the response helped, do "Accept Answer" and up-vote it

Share via

Data not available in Azure Migrate for web app on DMZ server(s)

1 answer

Your answer