locked
Cannot register with Azure Stack MarketPlace RRS feed

  • Question

  • Tried to register using my Hotmail account but found out that this scenario is not supported. I then tried to register using a user with a subscription in the directory and it still fails. Can someone please detail this procedure? I am attaching the last run of the procedure using an subscriber in the directory.

    Start Run:

    PS C:\Temp> .\RegisterWithAzureStack.ps1 -azureDirectory azurestkcmplab.onmicrosoft.com -azureSubscriptionId 04eab649-f7e0-40cd-932a-d31339edcf41 -azureSubscriptionOwner cwindom@azurestkcmplab.onmic
    soft.com

    cmdlet RegisterWithAzureStack.ps1 at command pipeline position 1
    Supply values for the following parameters:
    azureSubscriptionPassword: ************
    This script will turn marketplace syndication On and usage reporting On. You can change this by running the script using different flags. Press Enter to continue.:

    VERBOSE: Configure-BridgeIdentity.ps1 : BEGIN on WIN-KUUKIJDCKNU as AZURESTACK\Administrator
    VERBOSE: Input parameters: {
        "AzureDirectoryTenantId":  "azurestkcmplab.onmicrosoft.com",
        "ConnectToAzure":  null,
        "AzureEnvironment":  "AzureCloud",
        "AzureCredentialPath":  "C:\\Users\\ADMINI~1.AZU\\AppData\\Local\\Temp\\AzureCreds.xml"
    }
    VERBOSE: Loading cloud definition.
    VERBOSE: Progress file: 'Progress.ConfigureBridgeIdentity.xml'
    VERBOSE: Log file: 'C:\CloudDeployment\Logs\ConfigureBridgeIdentity.2017-03-09.14-19-59.0.log'
    VERBOSE: Invoking action: 'ConfigureBridgeIdentity'
    STARTING: Action 'ConfigureBridgeIdentity'
    VERBOSE: Action: Running action plan 'ConfigureBridgeIdentity'. - 3/9/2017 2:19:59 PM
    STARTING: Step 1 - Create identity application
    VERBOSE: Step: Running step 1 - Create identity application - 3/9/2017 2:19:59 PM
    VERBOSE: Task: Running interface 'ConfigureBridgeIdentity' of role 'Cloud\Fabric\AzureBridge'. Attempt #1.  - 3/9/2017 2:19:59 PM
    WARNING: Task: Interface 'ConfigureBridgeIdentity' is not a supported standard Interface. - 3/9/2017 2:19:59 PM
    STARTING: Task Cloud\Fabric\AzureBridge - ConfigureBridgeIdentity
    VERBOSE: Interface: Path to module: C:\CloudDeployment\Classes\AzureBridge\AzureBridge.psm1 - 3/9/2017 2:19:59 PM
    VERBOSE: Interface: Running interface ConfigureBridgeIdentity (Classes\AzureBridge\AzureBridge.psm1, AzureBridge:ConfigureBridgeIdentity) - 3/9/2017 2:19:59 PM
    VERBOSE: Runtime parameters are present, will use provided Azure Credentials - 3/9/2017 2:20:16 PM
    VERBOSE: Azure Subscription username: cwindom@azurestkcmplab.onmicrosoft.com - 3/9/2017 2:20:16 PM
    VERBOSE: Including tag on service principals: {"AzureStackMetadata":{"CreationDate":"\/Date(1489098016923)\/","DeploymentGuid":"e181973f-232c-459e-9f53-ee776a1ef37e"}} - 3/9/2017 2:20:17 PM
    WARNING: Task: Invocation of interface 'ConfigureBridgeIdentity' of role 'Cloud\Fabric\AzureBridge' failed:

    Function 'AzureBridge:ConfigureBridgeIdentity' in module 'Classes\AzureBridge\AzureBridge.psm1' raised an exception:

    Access is denied
    at Initialize-CertificateFromCA, C:\CloudDeployment\Roles\AzureBridge\AzureBridge.psm1: line 146
    at SetAzureBridgeIdentityConfiguration, C:\CloudDeployment\Roles\AzureBridge\AzureBridge.psm1: line 227
    at ConfigureBridgeIdentity, C:\CloudDeployment\Classes\AzureBridge\AzureBridge.psm1: line 41
    at <ScriptBlock>, <No file>: line 9 - 3/9/2017 2:20:18 PM
    Invoke-EceAction : Task: Invocation of interface 'ConfigureBridgeIdentity' of role 'Cloud\Fabric\AzureBridge' failed:
    Function 'AzureBridge:ConfigureBridgeIdentity' in module 'Classes\AzureBridge\AzureBridge.psm1' raised an exception:
    Access is denied
    at Initialize-CertificateFromCA, C:\CloudDeployment\Roles\AzureBridge\AzureBridge.psm1: line 146
    at SetAzureBridgeIdentityConfiguration, C:\CloudDeployment\Roles\AzureBridge\AzureBridge.psm1: line 227
    at ConfigureBridgeIdentity, C:\CloudDeployment\Classes\AzureBridge\AzureBridge.psm1: line 41
    at <ScriptBlock>, <No file>: line 9 - 3/9/2017 2:20:18 PM
    At C:\CloudDeployment\Setup\Activation\Bridge\Configure-BridgeIdentity.ps1:52 char:1
    + Invoke-EceAction -RolePath "Cloud\Fabric\AzureBridge" -ActionType "Co ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : PermissionDenied: (\\SU1FileServer...Certificate.pfx:String) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : ItemExistsUnauthorizedAccessError,Microsoft.PowerShell.Commands.TestPathCommand,CloudEngine.Cmdlets.InvokeCmdlet

    VERBOSE: Step: Status of step '1 - Create identity application' is 'Error'. - 3/9/2017 2:20:18 PM
    Invoke-EceAction : Action: Invocation of step 1 failed. Stopping invocation of action plan. - 3/9/2017 2:20:18 PM
    At C:\CloudDeployment\Setup\Activation\Bridge\Configure-BridgeIdentity.ps1:52 char:1
    + Invoke-EceAction -RolePath "Cloud\Fabric\AzureBridge" -ActionType "Co ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Unspecified error,CloudEngine.Cmdlets.InvokeCmdlet

    VERBOSE: Configure-BridgeIdentity.ps1 : END on WIN-KUUKIJDCKNU as AZURESTACK\Administrator
    STEP 1: Configure local identity completed
    VERBOSE: New-RegistrationRequest.ps1 : BEGIN on WIN-KUUKIJDCKNU as AZURESTACK\Administrator
    VERBOSE: Loading cloud definition.
    VERBOSE: Progress file: 'Progress.NewRegistrationRequest.xml'
    VERBOSE: Log file: 'C:\CloudDeployment\Logs\NewRegistrationRequest.2017-03-09.14-20-20.0.log'
    VERBOSE: Invoking action: 'NewRegistrationRequest'
    STARTING: Action 'NewRegistrationRequest'
    VERBOSE: Action: Running action plan 'NewRegistrationRequest'. - 3/9/2017 2:20:20 PM
    STARTING: Step 1 - Create registration request
    VERBOSE: Step: Running step 1 - Create registration request - 3/9/2017 2:20:20 PM
    VERBOSE: Task: Running interface 'NewRegistrationRequest' of role 'Cloud\Fabric\AzureBridge'. Attempt #1.  - 3/9/2017 2:20:20 PM
    WARNING: Task: Interface 'NewRegistrationRequest' is not a supported standard Interface. - 3/9/2017 2:20:20 PM
    STARTING: Task Cloud\Fabric\AzureBridge - NewRegistrationRequest
    VERBOSE: Interface: Path to module: C:\CloudDeployment\Classes\AzureBridge\AzureBridge.psm1 - 3/9/2017 2:20:20 PM
    VERBOSE: Interface: Running interface NewRegistrationRequest (Classes\AzureBridge\AzureBridge.psm1, AzureBridge:NewRegistrationRequest) - 3/9/2017 2:20:20 PM
    VERBOSE: Runtime parameters are present, will use provided Bridge App configuration file - 3/9/2017 2:20:27 PM
    WARNING: Task: Invocation of interface 'NewRegistrationRequest' of role 'Cloud\Fabric\AzureBridge' failed:

    Function 'AzureBridge:NewRegistrationRequest' in module 'Classes\AzureBridge\AzureBridge.psm1' raised an exception:

    Access is denied
    at NewRegistrationRequest, C:\CloudDeployment\Classes\AzureBridge\AzureBridge.psm1: line 62
    at <ScriptBlock>, <No file>: line 9 - 3/9/2017 2:20:27 PM
    Invoke-EceAction : Task: Invocation of interface 'NewRegistrationRequest' of role 'Cloud\Fabric\AzureBridge' failed:
    Function 'AzureBridge:NewRegistrationRequest' in module 'Classes\AzureBridge\AzureBridge.psm1' raised an exception:
    Access is denied
    at NewRegistrationRequest, C:\CloudDeployment\Classes\AzureBridge\AzureBridge.psm1: line 62
    at <ScriptBlock>, <No file>: line 9 - 3/9/2017 2:20:27 PM
    At C:\CloudDeployment\Setup\Activation\Bridge\New-RegistrationRequest.ps1:37 char:1
    + Invoke-EceAction -RolePath "Cloud\Fabric\AzureBridge" -ActionType "Ne ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : PermissionDenied: (\\SU1FileServer...figuration.json:String) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : ItemExistsUnauthorizedAccessError,Microsoft.PowerShell.Commands.GetContentCommand,CloudEngine.Cmdlets.InvokeCmdlet

    VERBOSE: Step: Status of step '1 - Create registration request' is 'Error'. - 3/9/2017 2:20:27 PM
    Invoke-EceAction : Action: Invocation of step 1 failed. Stopping invocation of action plan. - 3/9/2017 2:20:27 PM
    At C:\CloudDeployment\Setup\Activation\Bridge\New-RegistrationRequest.ps1:37 char:1
    + Invoke-EceAction -RolePath "Cloud\Fabric\AzureBridge" -ActionType "Ne ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Unspecified error,CloudEngine.Cmdlets.InvokeCmdlet

    VERBOSE: New-RegistrationRequest.ps1 : END on WIN-KUUKIJDCKNU as AZURESTACK\Administrator
    STEP 2: Registration request completed. Re-enter your Azure subscription credentials in the next step. Press Enter to continue.:

        Directory: C:\


    Mode                LastWriteTime         Length Name
    ----                -------------         ------ ----
    d-----         3/9/2017   2:13 PM                temp
    WARNING: Microsoft Azure PowerShell collects data about how users use PowerShell cmdlets and some problems they encounter.  Microsoft uses this information to improve our PowerShell cmdlets.
    Participation is voluntary and when you choose to participate your device automatically sends information to Microsoft about how you use Azure PowerShell.

    If you choose to participate, you can stop at any time by using Azure PowerShell as follows:
    1. Use the Disable-AzureDataCollection cmdlet to turn the feature Off. The cmdlet can be found in the AzureResourceManager module
    To disable data collection: PS > Disable-AzureDataCollection

    If you choose to not participate, you can enable at any time by using Azure PowerShell as follows:
    1. Use the Enable-AzureDataCollection cmdlet to turn the feature On. The cmdlet can be found in the AzureResourceManager module
    To enable data collection: PS > Enable-AzureDataCollection

    Select Y to enable data collection [Y/N]:
    WARNING: You choose to participate in Microsoft Azure PowerShell data collection.
    WARNING: The setting profile has been saved to the following path 'C:\Users\Administrator.AZURESTACK\AppData\Roaming\Windows Azure Powershell\AzureDataCollectionProfile.json'.

    Environments : {[AzureCloud, AzureCloud], [AzureChinaCloud, AzureChinaCloud], [AzureUSGovernment, AzureUSGovernment], [AzureGermanCloud, AzureGermanCloud]}
    Context      : Microsoft.Azure.Commands.Profile.Models.PSAzureContext

    Select-AzureRmSubscription : Provided subscription 04eab649-f7e0-40cd-932a-d31339edcf41 does not exist
    At C:\Temp\RegisterWithAzureStack.ps1:114 char:1
    + Select-AzureRmSubscription -SubscriptionId $azureSubscriptionId
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Set-AzureRmContext], ArgumentException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Profile.SetAzureRMContextCommand


    Confirm
    Are you sure you want to register the provider 'microsoft.azurestack'
    [Y] Yes  [N] No  [S] Suspend  [?] Help (default is "Y"): y
    Register-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run
    Login-AzureRMAccount to login.
    At C:\Temp\RegisterWithAzureStack.ps1:117 char:1
    + Register-AzureRmResourceProvider -ProviderNamespace 'microsoft.azures ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Register-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Resources.RegisterAzureProviderCmdlet

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Get-AzureRmResourceProvider : No subscription found in the context.  Please ensure that the credentials you provided are authorized to access an Azure subscription, then run Login-AzureRMAccount to
    login.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : CloseError: (:) [Get-AzureRmResourceProvider], ApplicationException
        + FullyQualifiedErrorId : Microsoft.Azure.Commands.Providers.GetAzureProviderCmdlet

    Cannot index into a null array.
    At C:\Temp\RegisterWithAzureStack.ps1:126 char:17
    + ... $result = $(Get-AzureRmResourceProvider -ProviderNamespace 'microsoft ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
        + FullyQualifiedErrorId : NullArray

    Azure Bridge Resource Provider was registered but did not become routable within the alloted time
    At C:\Temp\RegisterWithAzureStack.ps1:138 char:5
    +     throw New-Object System.InvalidOperationException("Azure Bridge R ...
    +     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : OperationStopped: (:) [], InvalidOperationException
        + FullyQualifiedErrorId : Azure Bridge Resource Provider was registered but did not become routable within the alloted time

    PS C:\CloudDeployment\Setup\Activation\Bridge>

    End Run:

    Thanks In Advance For Your Support,

    Charles Windom Sr. 


    Charles A. Windom Sr.

    Thursday, March 9, 2017 10:58 PM

Answers

  • When you are prompted for credentials the second time -- make sure you are inputting the same credentials used as a parameter for the script: a user with access to the azure subscription?

    From the error, it looks like a token was retrieved for a different AAD tenant. Is it possible to run the script using the AAD tenant beginning with 46c.. instead of 17e.. 

    Monday, March 13, 2017 8:53 PM

All replies

  • Is the user a Global Admin in the AAD?
    Friday, March 10, 2017 11:49 AM
  • And that Global Admin user should have access to an Azure Subscription. Please note that CSP subscriptions are not supported at this timeframe.

    Best regards, Mark Scholman. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Friday, March 10, 2017 12:11 PM
  • I'm also got some issues trying to register subscription using second directory performing this script  RegisterWithAzure.ps1 in STEP 3

    User in second directory has GlobalAdminRight and have assigned main subscription his TenantID - 17fe7a43-d01a-4249-be4f-cf248068399a


    VERBOSE: PUT https://management.azure.com/subscriptions/xxxxxxxx-3efc-4309-8e5b-c2c3860ecf2b/resourceGroups/acrp-d5c8dc9d-57ea-47b5-9c72-78d05b248649/providers/Microsoft.Azu
    reStack/registrations/registration-acrp-d5c8dc9d-57ea-47b5-9c72-78d05b248649?api-version=2016-01-01 with -1-byte payload
    Invoke-RestMethod : {"error":{"code":"InvalidAuthenticationTokenTenant","message":"The access token is from the wrong issuer 
    'https://sts.windows.net/17fe7a43-d01a-4249-be4f-cf248068399a/'. It must match the tenant 'https://sts.windows.net/46c98d88-e344-4ed4-8496-4ed7712e255d/' associated with 
    this subscription. Please use the authority (URL) 'https://login.windows.net/46c98d88-e344-4ed4-8496-4ed7712e255d' to get the token. Note, if the subscription is 
    transferred to another tenant there is no impact to the services, but information about new tenant could take time to propagate (up to an hour). If you just transferred 
    your subscription and see this error message, please try back later."}}
    At C:\CloudDeployment\Setup\Activation\Bridge\Register-AzureStack.ps1:176 char:37
    + ... eResponse = Invoke-RestMethod @commonRequestParams @putRegistrationRe ...
    +                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-RestMethod], WebException
        + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeRestMethodCommand

    PS C:\CloudDeployment\Setup\Activation\Bridge> 



    • Edited by aisog Friday, March 10, 2017 5:24 PM
    Friday, March 10, 2017 5:16 PM
  • When you are prompted for credentials the second time -- make sure you are inputting the same credentials used as a parameter for the script: a user with access to the azure subscription?

    From the error, it looks like a token was retrieved for a different AAD tenant. Is it possible to run the script using the AAD tenant beginning with 46c.. instead of 17e.. 

    Monday, March 13, 2017 8:53 PM
  • Hi

    It's the same tenant and the same password. When I go into Public Azure portal and log using this account in diagnostics section I see two tenats id as follow because this account have assigned subscription from the main account with id 46.....

    "tenants": [
        {
          "id": "17fe7a43-d01a-4249-be4f-cf248068399a",
          "domainName": "sdistack.onmicrosoft.com",
          "displayName": "Stack Deployments",
          "isSignedInTenant": true
        },
        {
          "id": "46c98d88-e344-4ed4-8496-4ed7712e255d",
          "domainName": "xxxx.onmicrosoft.com",
          "displayName": "xxxx Corporation",
          "isSignedInTenant": false

    In my point of view durring the seccond log when performing this script tit use the second id instead of first one event if I put still the same credentials for the same tenant. More look like a bug in such case 


    • Edited by aisog Tuesday, March 14, 2017 10:27 AM
    Tuesday, March 14, 2017 10:26 AM
  • Hi,

    We are Investigating your issue and require some logs in order to continue troubleshooting. 

    If you could, please email ascustfeedback@microsoft.com to get a workspace setup to upload your logs.  

     

    Make sure to use a Work, Organizational or Student address when contacting ascustfeedback@microsoft.comand include the thread URL in the subject.

    https://aka.ms/GetAzureStackLogs :)

     

    We apologize for any inconvenience and appreciate your time and interest in Azure Stack.

    https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-troubleshooting

    Thanks,


    Gary Gallanes

    Tuesday, March 14, 2017 7:49 PM
  • Hello,

    Quick update. We have created your Workspace and are awaiting your log files.

    We look forward to continuing this investigation and appreciate your interest in Azure Stack.

     

    TP3 Azure Stack Docs:

    https://docs.microsoft.com/en-us/azure/azure-stack/

    We apologize for any inconvenience and appreciate your time and interest in Azure Stack.

    https://azure.microsoft.com/en-us/blog/hybrid-application-innovation-with-azure-and-azure-stack/

    If you continue experience any issues with TP3 release, feel free to contact us.

    https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-troubleshooting

    https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-diagnostics

    https://aka.ms/GetAzureStackLogs

     

    Thanks,


    Gary Gallanes

    Wednesday, March 15, 2017 4:41 PM
  • Hello,

    We have a couple of questions:

    Are you running this as domain admin or AzureStack\AzureStackAdmin?

    Are you running this from MAS-CON01 or the DVM/Host?

     

    Can you try running it from the DVM/HOST with an account with domain administrator permissions and post back your results.

     

    Thanks,


    Gary Gallanes

    Thursday, March 16, 2017 3:27 PM
  • My answers, bellow:

    -              Are you running this as domain admin, AzureStack\AzureStackAdmin or an account with Domain Administrator permissions?
                    MR: I use azurestack.local\ azurestackadmin
    -              Are you running this from MAS-CON01 or the DVM/Host? 
                    MR: I run script directly on DVM/Host 
    -              Can you try running it from the DVM/HOST with an account with domain administrator permissions and post back your results?
                    MR: This is what I’m currently performing
    Wednesday, March 22, 2017 8:10 AM
  • Hi aisog, Could you execute the code below on the Host and see if you got the same access denied error as seen in your log. If so then there is something up with MAS-CA01, then we should look in that direction and troubleshoot further.

    Import-Module C:\CloudDeployment\CloudDeployment.psd1 -Force
    Import-Module -Force -ErrorAction Stop -Name "C:\CloudDeployment\Roles\WAS\WASCommon.psm1"
    
    $FQDN = 'certtest.com'
    $Certpass = ConvertTo-SecureString "test" -AsPlainText -Force
    $PFXpath = "c:\users\azurestackadmin\$FQDN.pfx"
    
    $CertInit = Initialize-CertificateFromCA -Subject $FQDN -FriendlyName $FQDN -CertPath $PFXpath -CertPassword $Certpass

    Update: The access denied from your log is because it cant save the certificate to the \\su1fileserver share path.

     CategoryInfo          : PermissionDenied: (\\SU1FileServer...Certificate.pfx:String) [Invoke

    For my deployment it tries to save it at '\\SU1FileServer\SU1_Infrastructure_1\ASResourceProvider\Cert'. Make sure you can reach that and have the correct permissions and run PowerShell with elevated permissions (runas administrator) . AzureStackAdmin should have the right permissions by default. 


    Cheers,

    Ruud
    Twitter:    Blog: AzureStack.Blog  LinkedIn:    
    Note: Please “Vote As Helpful” if you find my contribution useful or “Mark As Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.




    Wednesday, March 22, 2017 1:46 PM
  • My reply above was for the orginal topic poster 'cwindom', aisog has a directory authentication issue.

    Aisog, I had a similar issue and resolved that one by using the original EA subscription Global Admin for the script and the main original Azure AD tenant id. Other Global Admins and AzureAD instances didn't work for me.


    Cheers,

    Ruud
    Twitter:    Blog: AzureStack.Blog  LinkedIn:    
    Note: Please “Vote As Helpful” if you find my contribution useful or “Mark As Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.



    Thursday, March 23, 2017 11:09 AM
  • Hi Ruud

    Your code was executed without any issues

    VERBOSE: Create Signed Certificate policy file
    VERBOSE: Create Signed Certificate request
    VERBOSE: C:\Windows\System32\certreq.exe -New -f -q C:\Users\AZURES~1\AppData\Local\Temp\certreq\certtest_com\20170327-004006-8174338\certtest_com.inf C:\Users\AZURES~1\
    AppData\Local\Temp\certreq\certtest_com\20170327-004006-8174338\certtest_com.req
    VERBOSE: Active Directory Enrollment Policy
      {0F7D5005-C4E0-4505-9725-DC31D7A934A0}
      ldap:

    CertReq: Request Created

    VERBOSE: Submit Signed Certificate request
    VERBOSE: C:\Windows\System32\certreq.exe -Submit -config MAS-CA01.AzureStack.Local\AzureStackCertificationAuthority -f -q C:\Users\AZURES~1\AppData\Local\Temp\certreq\ce
    rttest_com\20170327-004006-8174338\certtest_com.req C:\Users\AZURES~1\AppData\Local\Temp\certreq\certtest_com\20170327-004006-8174338\certtest_com.cer
    VERBOSE: RequestId: 95
    RequestId: "95"
    Certificate retrieved(Issued) Issued

    VERBOSE: Accept Signed Certificate request
    VERBOSE: C:\Windows\System32\certreq.exe -Accept -q -machine C:\Users\AZURES~1\AppData\Local\Temp\certreq\certtest_com\20170327-004006-8174338\certtest_com.rsp
    VERBOSE: 
    VERBOSE: Performing the operation "Create File" on target "Destination: C:\users\azurestackadmin\certtest.com.pfx".
    VERBOSE: Performing the operation "Export PFX certificate" on target "
    Source(s): 
    7A080D19D2FA99DD2F12B5BD0B3741EDCACFCFFF
     Destination: C:\users\azurestackadmin\certtest.com.pfx".

    I always run PS with elevated permission and I can also reach the path \\su1Fileserver\su1_infrastructure_1\ASResourceProvider\Cert

    Monday, March 27, 2017 7:42 AM
  • The problem is  I can't use original EA subscription because it's federated account with certificate authentication and I can use this auth only on my laptop but not in setup environment.
    Monday, March 27, 2017 7:43 AM
  • Hi I have the same problem, my azure subscription use an email account that is personal account, so when i login to azure portal I choose personal account and everything is ok.

    The same email account is also present as a work federated account with ms, so when i Input this email as the azure subscription account during installation of azure stack, i get an error saying there are problem with the federation server, it can't distinguish from personal or work federated account, is there a way to tell when installing this difference?

    thanks

    Wednesday, May 24, 2017 12:40 PM
  • So I have a MSDN Azure subscription that uses the @hotmail.com. I created an Active directory in that MSDN subscription Active Directory. In that AAD I created a user, svcadmin. Can I use this user to register with Azure or do I have to use a new subscription? How do I get the account svcadmin to own the MSDN Azure subscription so I can possibly register Azure Stack with Azure?

    Thanks In Advance For Your Support,

    Charles A. Windom Sr. 


    Charles A. Windom Sr.

    Wednesday, May 31, 2017 9:44 PM
  • Hi Charles,

    I ran into same problem.

    Azure Stack looks to tenant AAD to authenticate the Subscription owner so you’ll need to either:

      

    1)Change the existing Azure Subscription Owner from your svcadmin@Hotmail.com to your Azure AD Global Admin svcadmin@YourAADTenant.onmicrosoft.com

    Instructions here: https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator

     

    Or

     

    2)Get a ‘Pay as you go’ subscription for the Azure AD Global Admin svcadmin@YourAADTenant.onmicrosoft.com

    NOTE:  I’ve had my AAD Global Admin setup with a ‘Pay as you go’ subscription for 6 months and never accumulated a charge for downloading Marketplace items (Syndication)or using Azure AD to manage accounts and authentication.

     

    We apologize for any inconvenience and appreciate your time and interest in Azure Stack.

    If you continue experience any issues with TP3 release, feel free to contact us.

        

    Azure Stack TP3R Docs:

    https://docs.microsoft.com/en-us/azure/azure-stack/

    https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-troubleshooting

    https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-diagnostics

    https://aka.ms/GetAzureStackLogs

     

    PowerShell giving you the Blues? Try my Azure Stack PowerShell Helper scripts

    AzureStack Automation: RM Module Check/Fix ver.1.2.9 plus AzureStack-Tools

    AzureStack Automation: Setup & Validate AdminStackAdmin/User ARM Endpoints

    AzureStack Automation: Validate and Set Default Image                                    

    AzureStack Automation: Register Azure Stack for Azure Marketplace Syndication

     

     Thanks,


    Gary Gallanes

    Thursday, June 1, 2017 12:36 AM
  • Hello,

    I ran into the same issue. Azure Stack looks to your tenant AAD to authenticate the Subscription owner.   I've found 2 ways of getting this to work after you have deployed Azure Stack.

      

    1)Change the existing Azure Subscription Owner from your svcadmin@Hotmail.com to your Azure AD Global Admin svcadmin@YourAADTenant.onmicrosoft.com

    Instructions here: https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator

     

    Or

     

    2)Get a ‘Pay as you go’ subscription for the Global Admin svcadmin@YourAADTenant.onmicrosoft.com

    NOTE:  I’ve had my AAD Global Admin setup with a ‘Pay as you go’ subscription for 6 months and never accumulated a charge for downloading Marketplace items (Syndication)or using Azure AD to manage accounts and authentication.

     

    We apologize for any inconvenience and appreciate your time and interest in Azure Stack.

    If you continue experience any issues with TP3 release, feel free to contact us.

        

    Azure Stack TP3R Docs:

    https://docs.microsoft.com/en-us/azure/azure-stack/

    https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-troubleshooting

    https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-diagnostics

    https://aka.ms/GetAzureStackLogs

     

    PowerShell giving you the Blues? Try my Azure Stack PowerShell Helper scripts

    AzureStack Automation: RM Module Check/Fix ver.1.2.9 plus AzureStack-Tools

    AzureStack Automation: Setup & Validate AdminStackAdmin/User ARM Endpoints

    AzureStack Automation: Validate and Set Default Image                                    

    AzureStack Automation: Register Azure Stack for Azure Marketplace Syndication

     

     Thanks,


    Gary Gallanes

    Thursday, June 1, 2017 12:40 AM
  • For my MSDN sub, I created a new user in the AAD there and gave it Subscription Owner rights on the subscription and global admin in AAD. I used that account to register stack and it worked fine.
    Friday, June 2, 2017 12:56 PM