Can't create VM from image standard security type in Azure in runbooks

Question

Can't create VM from image standard security type in Azure in runbooks

Julien Sénéchal 6

Hello,

I've created a runbook that manages my machines automatically and deploys them via a managed image.
During the development, I had a problem during my scripting because my master machines were in TrustedLaunched SecurityType. So I recreated an image with Standard SecurityType and my script worked perfectly.

When I run the same script from the Runbook, the error comes back, but this time for Standard.
For me, it has no sense and i can't find any documentation about that problem.

Can you explain me the problem or give me a solution please ?

I tried to open a ticket on Github but Microsoft don't get back to me (https://github.com/Azure/azure-powershell/issues/23756)

Thank you in advance for your help

Issue script & Debug output

Write-Output "Creating VDI $tmpName..."
$nic = New-AzNetworkInterface -ResourceGroupName $rgName -Location $location -Name "$tmpName-NIC" -SubnetId (Get-AzVirtualNetwork -ResourceGroupName $rgName -Name $vnetName).Subnets[0].Id -NetworkSecurityGroupId (Get-AzResource -ResourceGroupName $rgName -Name $nsgName).ResourceId -Force
$tmpConfig = New-AzVMConfig -VMName "$tmpName-VM" -VMSize $masterVM.HardwareProfile.Vmsize -IdentityType "SystemAssigned"
$tmpConfig = Set-AzVMSecurityProfile -VM $tmpConfig -SecurityType "Standard"
$tmpConfig = Set-AzVMOSDisk -VM $tmpConfig -Name "$tmpName-OSDisk" -Windows -CreateOption "FromImage" 
$tmpConfig = Set-AzVMSourceImage -VM $tmpConfig -Id $masterImage.Id
$tmpConfig = Set-AzVMOperatingSystem -VM $tmpConfig -Windows -ComputerName $tmpName -Credential $creds
$tmpConfig = Set-AzVMBootDiagnostic -VM $tmpConfig -Disable
$tmpConfig = Add-AzVMNetworkInterface -VM $tmpConfig -Id $nic.Id
New-AzVM -VM $tmpConfig -ResourceGroupName $rgName -Location $location -Zone $masterVM.Zones

Error output

Error : {Managed Images are not supported for virtual machines with security type Standard.
                       ErrorCode: BadRequest
                       ErrorMessage: Managed Images are not supported for virtual machines with security type Standard.
                       ErrorTarget: 
                       StatusCode: 400
                       ReasonPhrase: 
                       OperationID: 76601d3d-d902-4b4f-b8fc-ab1f743c8f79}

kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2024-01-10T18:39:43.72+00:00
Hello, @Julien Sénéchal !

I want to make sure I am following the setup correctly:

You attempted to create a trusted launch managed image but that failed during deployment? What was the error you ran into?

You then tried again and created a managed image with standard security? This works as a script but not when run from the runbook script?

If everything works up until you try to implement this as a Runbook, I'll update the tags so that we get this in front of automation experts. If you are running into issues setting up the VM, I want to make sure we troubleshoot this from a VM perspective (and VM settings/OS disk would be the first place I would look).
Julien Sénéchal 6 Reputation points

2024-01-11T08:23:57.7833333+00:00
Hello @kobulloc-MSFT

I actually tried to deploy from a VM in TrustedLaunch but it didn't work during DEVELOPMENT. So I started with a VM in securityType Standard and since then my code works perfectly when I launch it from an Azure Shell (Powershell). But when I run it in a runbook in runtine 7.2, I get the error noted in my main message.

I've actually tried to create a VM in TrustedLaunch and run the script again from the Runbook, but I get the same error as if I'd run it from my shell. I tried to recreate another VM in security Type Standard but the problem is still the same when i run it from Runbook (no problem in the Shell). The problem is only the runbook Thank you in advance for your help
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2024-01-12T01:47:35.8833333+00:00

No worries, @Julien Sénéchal ! If everything runs perfectly from PowerShell but not when you try to run it from the runbook, then it sounds like an issue with the automation. I'll update the tags to get some automation experts to look at this.
AnuragSingh-MSFT 21,546 Reputation points Moderator

2024-01-16T10:53:20.6066667+00:00

@Julien Sénéchal, thank you for sharing detailed information for this issue. I tested the script shared in the question locally on my machine (and not in Azure Automation Runbook) and I get the same error message as posted, even for images created from standard security type VM:

Could you please re-confirm that you are able to run the script locally from your machine?

Your answer

kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2024-01-10T18:39:43.72+00:00

Hello, @Julien Sénéchal !

I want to make sure I am following the setup correctly:

You attempted to create a trusted launch managed image but that failed during deployment? What was the error you ran into?

You then tried again and created a managed image with standard security? This works as a script but not when run from the runbook script?

If everything works up until you try to implement this as a Runbook, I'll update the tags so that we get this in front of automation experts. If you are running into issues setting up the VM, I want to make sure we troubleshoot this from a VM perspective (and VM settings/OS disk would be the first place I would look).
Julien Sénéchal 6 Reputation points

2024-01-11T08:23:57.7833333+00:00

Hello @kobulloc-MSFT

I actually tried to deploy from a VM in TrustedLaunch but it didn't work during DEVELOPMENT. So I started with a VM in securityType Standard and since then my code works perfectly when I launch it from an Azure Shell (Powershell). But when I run it in a runbook in runtine 7.2, I get the error noted in my main message.

I've actually tried to create a VM in TrustedLaunch and run the script again from the Runbook, but I get the same error as if I'd run it from my shell. I tried to recreate another VM in security Type Standard but the problem is still the same when i run it from Runbook (no problem in the Shell). The problem is only the runbook Thank you in advance for your help
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2024-01-12T01:47:35.8833333+00:00

No worries, @Julien Sénéchal ! If everything runs perfectly from PowerShell but not when you try to run it from the runbook, then it sounds like an issue with the automation. I'll update the tags to get some automation experts to look at this.
AnuragSingh-MSFT 21,546 Reputation points Moderator

2024-01-16T10:53:20.6066667+00:00

@Julien Sénéchal, thank you for sharing detailed information for this issue. I tested the script shared in the question locally on my machine (and not in Azure Automation Runbook) and I get the same error message as posted, even for images created from standard security type VM:

Could you please re-confirm that you are able to run the script locally from your machine?

Share via

Can't create VM from image standard security type in Azure in runbooks

Your answer