How do I authenticate Azure Powershell on Azure VM

Question

I'm wanting to execute a Powershell script from an Azure VM to get its current public IP address (and to write this address to an evironment variable for an application to use).

My question is what the best way to authenticate the Azure Powershell environment is? On AWS credentials get 'baked' into an instance when it gets created. Does the equivalent happen with Azure Virtual Machines?

Are you running this script as part of a deployment? Or after the deployment is finished? If the former, you can pass creds in to the deployment via KeyVault... — bmoore-msft
– bmoore-msft, Commented Jul 20, 2016 at 17:26
This is a test machine which is scheduled to be stopped each night and then started again each morning. I want to run this script on startup (since a new IP address will have been allocated). — routeburn
– routeburn, Commented Jul 20, 2016 at 20:45
Ok, so two options that might work for you - 1) use an AzureAutomation runbook to start and stop on the schedule, there are some sample runbooks here: powershellgallery.com/packages/Start-AzureV2VMs and here: powershellgallery.com/packages/Stop-AzureV2VMs or 2) when you provision the VM, pass in the creds you want to use to run the script locally via KeyVault - #1 seems like a better solution for your scenario. — bmoore-msft
– bmoore-msft, Commented Aug 3, 2016 at 15:39

EvertonMc · Accepted Answer · 2016-07-20 08:04:51Z

1

You can use a Management Certificate contained in your Publish Settings file and 'bake' it yourself

Import-AzurePublishSettingsFile –PublishSettingsFile C:\Store\my.publishsettings

If you already have a certificate for management, you can store it in your vm and use it in PS

# Get management certificate from personal store
$certificate = Get-Item cert:\\CurrentUser\My\$CertificateThumbprint
if ($certificate -eq $null) {
throw “Management certificate for $SubscriptionName was not found in the users personal certificate store. Check thumbprint or install certificate”
}

# Set subscription profile
Set-AzureSubscription -SubscriptionName $SubscriptionName -SubscriptionId $SubscriptionId -Certificate $certificate

# Select subscription as the current context
Select-AzureSubscription -SubscriptionName $SubscriptionName

answered Jul 20, 2016 at 8:04

EvertonMc

3931 silver badge10 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How do I authenticate Azure Powershell on Azure VM

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related