Errors installing SentinelOne extension on Azure VM

Naushad Alam 0 Reputation points
2024-07-17T19:26:50.3733333+00:00

What I am trying to do- I am trying to install SentinalOne Extension on Azure Windows/Linux VM,

I tried using the portal as well as using CLI/Terraform, All have same outcome.

Error-

Error getting download path from management, please contact SentinelOne support". More information on troubleshooting is available at https://aka.ms/vmextensionwindowstroubleshoot

Could someone pls help on this? I have already tried searching online but could not get any valid answers or working solutions.

I doubt if even this is supported?

But then why it is available on the Azure Portal on market place ?

Please let me know if you need more details.

resource sentinelOneExtension1 'Microsoft.Compute/virtualMachine/extensions@2023-03-01' = {   name: 'SentinelOne-extension'
  parent: vmssReference
  properties: {
    autoUpgradeMinorVersion: true
    enableAutomaticUpgrade: false
    protectedSettingsFromKeyVault: {
      secretUrl: parSentinelOneAPISecretUrl
      sourceVault: {
        id: parSentinelOneKv
      }
    }
    publisher: 'SentinelOne.WindowsExtension'
    settings: {
      WindowsAgentVersion: '23.2.3.358'
      SiteToken: parSentinelOneSiteToken
    }
    suppressFailures: false
    type: 'WindowsExtension'
    typeHandlerVersion: '1.4'
  }
}

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,596 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,753 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 36,496 Reputation points Microsoft Employee
    2024-07-17T23:36:51.49+00:00

    Hi @Naushad Alam ,

    If you're having trouble integrating SentinelOne, you need to ensure that you have the correct subscription credentials documented here (including the Intune Plan 1 subscription, Global Admin Credentials, and access to the SentinelOne management console)

    This is authorized on the Intune side so I am adding the Intune tag to this thread. https://learn.microsoft.com/en-us/mem/intune/protect/sentinelone-mtd-connector-integration