How to Activate Windows 11 AVD on Azure Stack HCI behind a Proxy

Question

Hi All,

we are running a POC for Windows 11 AVD on Azure Stack HCI in our DATA-Center.

We use a http Proxy for Internet Connection.
All the Stuff like Register Azure Stack HCI at Azure Cloud, Build AVD Host Pool works with our Proxy Config.

But there is one Problem. I could not activate Windows 11 AVD , because Connection to kms.core.windows.net is not possible via Proxy.

Is ther a solution for this problem.

Regards
Martin

Answer 1

Hello,

as already suspected, the Software Protection service cannot work with a proxy. RPC calls are used here which require a direct TCP connection. Unfortunately, this is very unpleasant because the other Azure components, like Azure Arc Agent and Azure AVD Agent, work very well via proxy.

I think Microsoft should offer a solution here.

Answer 2

Hello @Lederer, Martin ,
Welcome to Microsoft QnA.
Here are a few steps you could try to resolve this issue.

1. Exclude the kms.core.windows.net domain from the proxy configuration: If your proxy configuration allows you to exclude certain domains from being routed through the proxy, you could try adding an exception for kms.core.windows.net. This should allow Windows 11 AVD to connect to the activation server directly, bypassing the proxy.
2. Use a VPN or DirectAccess: If your organization has a VPN or DirectAccess connection to Azure, you may be able to use this connection to bypass the proxy and activate Windows 11 AVD.
3. Configure the proxy to allow the necessary traffic: If you have the necessary permissions, you may be able to configure your proxy to allow the necessary traffic for Windows activation. The specific steps for doing this will depend on the type of proxy that you are using.