Failed to onboard azure stack hci node - with GUI and Powershell

Question

Failed to onboard azure stack hci node - with GUI and Powershell

Samuele Provvedi 155

Hi everyone i have been trying since yesterday to do hci node onboard with azure arc. i followed the procedures given in the doc

https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-arc-register-server-permissions?tabs=powershell#assign-required-permissions-for-deployment

Both with the graphical way and with the powershell procedure with exactly the commands given in the guide

If i try from powershell i get stuck in a loop

Waiting for bootstrap to complete, Status: InProgress

NetworkConfig : NotApplicable

RemoteConfig : NotApplicable

WebProxy : NotApplicable

TimeServer : NotApplicable

HostName : NotApplicable

ArcConfiguration : NotStarted

ArtifactsUpload : NotStarted

ArcRegistration : NotStarted

ArcExtensionInstall : NotStarted

Update : NotStarted

with error AZCM0026

If I use the Web part instead I get the same error.

I would like to point out that machine hostname is resolvable by internal dns and port 443 is open for the node (inbound and outbound)

AzStackHciEnvironmentChecker.log

AzStackHciArcIntegration.log

Mounika Reddy Anumandla 7,135 Reputation points Moderator

2024-10-15T11:16:01.9233333+00:00
Hi Samuele Provvedi,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

The error message you're encountering during the Azure Arc onboarding process, indicates that one of the parameters being passed to the Invoke-AzStackHciArcInitialization command is not set correctly, leading to a failure in the script.

Ensure that all parameters being passed to the Invoke-AzStackHciArcInitialization command are correctly defined and not null.

If you are using optional parameters like -Proxy, try removing them to see if the command runs successfully without them.

Hope you have completed the following prerequisites:
https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-arc-register-server-permissions?tabs=powershell#prerequisites

If you're registering the servers as Arc resources, make sure that you have the following permissions on the resource group where the servers were provisioned:

Azure Connected Machine Onboarding

Azure Connected Machine Resource Administrator

To verify that you have these roles, follow these steps in the Azure portal:

Go to the subscription that you use for the Azure Stack HCI deployment.

Go to the resource group where you're planning to register the servers.

In the left-pane, go to Access Control (IAM).

In the right-pane, go the Role assignments. Verify that you have the Azure Connected Machine Onboarding and Azure Connected Machine Resource Administrator roles assigned. Check your Azure policies. Make sure that:

The Azure policies aren't blocking the installation of extensions.

The Azure policies aren't blocking the creation of certain resource types in a resource group.

The Azure policies aren't blocking the resource deployment in certain locations.

If you have any further queries, do let us know.
Samuele Provvedi 155 Reputation points

2024-10-15T15:52:31.2333333+00:00

Hi Mounika Reddy Anumandla

I've retied some time (3) with the parameter defined in the case show in my answer and work

the solution for me is retry the deploy

for your answer the parameter is this:

Install-Module Az.Accounts -RequiredVersion 2.13.2

Install-Module Az.Resources -RequiredVersion 6.12.0

Install-Module Az.ConnectedMachine -RequiredVersion 0.8.0

Install-Module AzsHCI.ARCinstaller

Subscription = "yy49daaa-8115-abcd-99d8-3c0fe8939aXX"

$RG = "azshciprod-002"

$Region = "West Europe" (This parameter modify in "WestEurope") could this be the reason?

$Tenant = "yy4cc6ua-e962-44f2-abcd-c4fab714f0XX"

Mounika Reddy Anumandla do you have any raccomandetion for the definition of the parameter?

is it correct to keep a space between parameter and value and put it in quotes?

I also add that from the documentation the error is AZCM0026

https://learn.microsoft.com/en-us/azure/azure-arc/servers/troubleshoot-agent-onboard

this error does not report a parameter error but a reachability error towards the azure services and local dns entries (As for the local entries I'm sure they are fine because they were created following the procedures used to create the other 3 clusters)
Samuele Provvedi 155 Reputation points

2024-10-16T15:06:02.9666667+00:00

Thank you for your response.

In my specific case, I don't have a connection managed via vpn that would allow me to use the private link, so I didn't delve into the documentation as it is not my case.

Most likely just needed to be hard headed and try again. I hypothesize that for some reason the services were not responding correctly. But that is my hypothesis.

Regards and thanks
Mounika Reddy Anumandla 7,135 Reputation points Moderator

2024-10-21T16:31:16.3766667+00:00

Hi Samuele Provvedi,

Hope you doing well!

Just checking in to see if you had a chance to see my last response. I wanted to check where do you stand with the issue.

If you have any further queries, do let us know.

If the answer is helpful, please click "Accept Answer" and "Upvote it."

2 answers

Your answer

Mounika Reddy Anumandla 7,135 Reputation points Moderator

2024-10-15T11:16:01.9233333+00:00

Hi Samuele Provvedi,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

The error message you're encountering during the Azure Arc onboarding process, indicates that one of the parameters being passed to the Invoke-AzStackHciArcInitialization command is not set correctly, leading to a failure in the script.

Ensure that all parameters being passed to the Invoke-AzStackHciArcInitialization command are correctly defined and not null.

If you are using optional parameters like -Proxy, try removing them to see if the command runs successfully without them.

Hope you have completed the following prerequisites:
https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-arc-register-server-permissions?tabs=powershell#prerequisites

If you're registering the servers as Arc resources, make sure that you have the following permissions on the resource group where the servers were provisioned:

Azure Connected Machine Onboarding

Azure Connected Machine Resource Administrator

To verify that you have these roles, follow these steps in the Azure portal:

Go to the subscription that you use for the Azure Stack HCI deployment.

Go to the resource group where you're planning to register the servers.

In the left-pane, go to Access Control (IAM).

In the right-pane, go the Role assignments. Verify that you have the Azure Connected Machine Onboarding and Azure Connected Machine Resource Administrator roles assigned. Check your Azure policies. Make sure that:

The Azure policies aren't blocking the installation of extensions.

The Azure policies aren't blocking the creation of certain resource types in a resource group.

The Azure policies aren't blocking the resource deployment in certain locations.

If you have any further queries, do let us know.
Samuele Provvedi 155 Reputation points

2024-10-15T15:52:31.2333333+00:00

Hi Mounika Reddy Anumandla

I've retied some time (3) with the parameter defined in the case show in my answer and work

the solution for me is retry the deploy

for your answer the parameter is this:

Install-Module Az.Accounts -RequiredVersion 2.13.2

Install-Module Az.Resources -RequiredVersion 6.12.0

Install-Module Az.ConnectedMachine -RequiredVersion 0.8.0

Install-Module AzsHCI.ARCinstaller

Subscription = "yy49daaa-8115-abcd-99d8-3c0fe8939aXX"

$RG = "azshciprod-002"

$Region = "West Europe" (This parameter modify in "WestEurope") could this be the reason?

$Tenant = "yy4cc6ua-e962-44f2-abcd-c4fab714f0XX"

Mounika Reddy Anumandla do you have any raccomandetion for the definition of the parameter?

is it correct to keep a space between parameter and value and put it in quotes?

I also add that from the documentation the error is AZCM0026

https://learn.microsoft.com/en-us/azure/azure-arc/servers/troubleshoot-agent-onboard

this error does not report a parameter error but a reachability error towards the azure services and local dns entries (As for the local entries I'm sure they are fine because they were created following the procedures used to create the other 3 clusters)
Samuele Provvedi 155 Reputation points

2024-10-16T15:06:02.9666667+00:00

Thank you for your response.

In my specific case, I don't have a connection managed via vpn that would allow me to use the private link, so I didn't delve into the documentation as it is not my case.

Most likely just needed to be hard headed and try again. I hypothesize that for some reason the services were not responding correctly. But that is my hypothesis.

Regards and thanks
Mounika Reddy Anumandla 7,135 Reputation points Moderator

2024-10-21T16:31:16.3766667+00:00

Hi Samuele Provvedi,

Hope you doing well!

Just checking in to see if you had a chance to see my last response. I wanted to check where do you stand with the issue.

If you have any further queries, do let us know.

If the answer is helpful, please click "Accept Answer" and "Upvote it."

Answer 1

Hi!

@Samuele Provvedi -Yes, the region has to be entered without spaces:

$Region = "WestEurope"

I had the very same issue and got the misleading error code "AZCM0026" until I specified the region as "WestEurope" and not "West Europe".

Here are the exact commands I used:

#Define the subscription where you want to register your server as Arc device
$Subscription = "0005dd00-d006-0a10-8000-000071300000"
#Define the resource group where you want to register your server as Arc device
$RG = "rg-weu-azshci"
#Define the region you will use to register your server as Arc device
$Region = "WestEurope"
#Define the tenant you will use to register your server as Arc device
$Tenant = "003b0000-9600-4300-9004-aa0024d00000"

Invoke-AzStackHciArcInitialization -SubscriptionID $Subscription -ResourceGroup $RG -TenantID $Tenant -Region $Region -Cloud "AzureCloud" -ArmAccessToken $ARMtoken -AccountID $id

AzureStack 23H2 with AzSHCI.ARCInstaller 1.2408.0.3053

Hope this helps!

Answer 2

Hi Samuele Provvedi,

Thank you for reaching to us back again with further information.

In PowerShell, it is correct to keep a space between the parameter and its value, and you can also put the value in quotes.
This should work for you.
Subscription = "yy49daaa-8115-abcd-99d8-3c0fe8939aXX"

$RG = "azshciprod-002"

$Region = "West Europe" (If a parameter value contains spaces, it must be enclosed in quotes).

$Tenant = "yy4cc6ua-e962-44f2-abcd-c4fab714f0XX"

As you mentioned, it indicates an error in network configuration, or some critical services are temporarily unavailable. Have you done the troubleshooting step mentioned in the document?
If the network is configured for Private Link Scope, a Private Link Scope resource ID must be provided for onboarding using the --private-link-scope parameter.

Then your command should look like below:

Invoke-AzStackHciArcInitialization -SubscriptionID $Subscription -ResourceGroup $RG -TenantID $Tenant -Region $Region -Cloud "AzureCloud" -ArmAccessToken $ARMtoken -AccountID $id -Proxy $ProxyServer --private-link-scope <Private_Link_Scope_Resource_ID>

I suggest you try the workaround and please do let us know if you have any further queries!

Thank You!

Mounika Reddy Anumandla 7,135 Reputation points Moderator

2024-10-17T09:51:19.04+00:00

Hi Samuele Provvedi,
Thanks for reaching back again. I understand your network is not configured for Private Link Scope.
Have you done the troubleshooting step:
Check if the required endpoints are reachable (for example, hostnames are resolvable, endpoints aren't blocked). The error clearly points to a networking issue than the issue with installer itself.

Thank You!
Mounika Reddy Anumandla 7,135 Reputation points Moderator

2024-10-22T10:48:59.6133333+00:00

Hi Samuele Provvedi,
Hope you doing well!

Just checking in to see if you had a chance to see my last response.

Share via

Failed to onboard azure stack hci node - with GUI and Powershell

2 answers

Your answer