Unable to add server to Azure Arc - AZCM0081

Question

Hi

I'm just dipping my toe into using Azure Arc. I've tried adding a couple of servers but keep getting error "AZCM0081: Failed to get MSI Certificate from HIS"

The troubleshooting says to delete the resource from Azure and try again but it's not in Azure yet as it won't let me add it. Can someone help at all?

Thanks in advance

C

Answer 1

It sounds like you might have some of the public endpoints blocked.

https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/hybrid/arc-enabled-servers/eslz-arc-servers-connectivity
https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agent-windows-troubleshoot

Answer 2

I have a feeling @Andrew Blumhardt is correct.
I’d suggest creating a VM in Azure and instllalling the Arc agent there first.
Then work downwards to on-prem, assuming that’s what you’re trying to do.

Answer 3

Thanks Andrew, I hadn't registered the resource providers as per here - https://learn.microsoft.com/en-us/azure/azure-arc/servers/prerequisites but your link took me to the page so I'm marking yours as the answer :)

Answer 4

Follow up: I registered a windows 2022 server with Arc, using the basic onboarding script and ran into the same error.

In order to correct it I went to my resource group IAM settings and added these roles to my user:
"Azure Connected Machine Onboarding"
"owner"
(You only need one of them)

Here's the important point from Andrew's links:
"To onboard machines, you must have the Azure Connected Machine Onboarding or Contributor role for the resource group in which the machines will be managed."