How to configure boot diagnostic data for the selected network in a storage account on azure?

Question

How to configure boot diagnostic data for the selected network in a storage account on azure?

Elisha George 151

What are the prerequisites for doing this?

Could you please give me the step by step procedure for doing this?

Alan Kinane 16,951 Reputation points MVP Volunteer Moderator

2022-01-20T16:50:32.203+00:00

Boot diagnostics is set at the VM level rather than for a network. Are you looking to automate this process or just a step by step on how to set this up for virtual machines?
learn 6 Reputation points

2022-01-24T18:12:46.397+00:00

I am having the same doubt.
We enabled custom storage account for boot diagnostic data of all vms.
In that storage account when we choose "All networks" both boot diagnostic data and serial log are working.
But if we choose "Selected networks" getting error below and both boot diagnostic data and serial log are not working.

""""Error encountered while getting the screenshot or serial log file from the blob container in storage account 'boot'. Make sure you have permission and that te firewall is not blocking access to the storage account.""""

Tried adding the local ip to the firewall of the storage account also but getting the same error.

How to configure it for a selected network.

2 answers

Your answer

Alan Kinane 16,951 Reputation points MVP Volunteer Moderator

2022-01-20T16:50:32.203+00:00

Boot diagnostics is set at the VM level rather than for a network. Are you looking to automate this process or just a step by step on how to set this up for virtual machines?
learn 6 Reputation points

2022-01-24T18:12:46.397+00:00

I am having the same doubt.
We enabled custom storage account for boot diagnostic data of all vms.
In that storage account when we choose "All networks" both boot diagnostic data and serial log are working.
But if we choose "Selected networks" getting error below and both boot diagnostic data and serial log are not working.

""""Error encountered while getting the screenshot or serial log file from the blob container in storage account 'boot'. Make sure you have permission and that te firewall is not blocking access to the storage account.""""

Tried adding the local ip to the firewall of the storage account also but getting the same error.

How to configure it for a selected network.

Answer 1

Prrudram-MSFT 28,281 Microsoft Employee Moderator

Hi @Elisha George ,

Thank you for reaching out to Microsoft Q&A platform. Happy to answer your question. I can confirm that we cannot configure boot diagnostics at the network level, the option is available at the Azure VM blade.
Let me know if you have any specific reasons for looking in to options to enable it at network level

Screenshot of the Monitoring section on the Management tab under Create a virtual machine page.

Please "Accept as Answer" if any of above helped so that, it can help others in community looking for remediation for the similar issues.

learn 6 Reputation points

2022-01-24T18:12:59.72+00:00

I am having the same doubt.
We enabled custom storage account for boot diagnostic data of all vms.
In that storage account when we choose "All networks" both boot diagnostic data and serial log are working.
But if we choose "Selected networks" getting error below and both boot diagnostic data and serial log are not working.

""""Error encountered while getting the screenshot or serial log file from the blob container in storage account 'boot'. Make sure you have permission and that te firewall is not blocking access to the storage account.""""

Tried adding the local ip to the firewall of the storage account also but getting the same error.

How to configure it for a selected network.
Elisha George 151 Reputation points

2022-01-28T14:50:18.077+00:00

Hi,

we want to configure the boot diagnostics of vms for the selected network.
Because if it is selected as all network it will be available to public network
we want to avoid that.

Is there any work around for that?

Is there any possible network rules for that?

Does Microsoft is finding any solution for that ?

Answer 2

Alan Kinane 16,951 MVP Volunteer Moderator

This feature is not currently supported as the public endpoint is not accessible in the storage account. I believe the boot diagnostics image has the same limitation.

https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-errors

learn 6 Reputation points

2022-01-25T09:31:04.523+00:00

Is there any workaround for this?
We want to configure it for selected networks.
Because if selected as All networks it will be available to public. We want to avoid that.
Alan Kinane 16,951 Reputation points MVP Volunteer Moderator

2022-01-25T09:40:19.56+00:00

I don't think there is a workaround currently but please note that blob containers are not publicly available by default unless you make them so.

Please take a look at this article which explains this in more detail.

https://learn.microsoft.com/en-us/azure/storage/blobs/anonymous-read-access-prevent

Share via

How to configure boot diagnostic data for the selected network in a storage account on azure?

2 answers

Your answer