Loading

Azure

Skip Feed
  1. Azure authentication issues

     

    Did you as me get surprised when all Azure Powershell integrations created for my Automation Platform started lightning up error messages about authentication or unverified certificates? We had the poor timing of renewing our global domain certificate the same day the error messages started surfacing. After several attempts to solve the issue with a certificate in focus the time had come to bring out the big hammer, Google... Some suggestions were to renew the certificate or remove and reinstall the certificate on the Azure AD server. Others were more on point. The solution that solved the problem for me was the following, there might be others I haven't encountered so feel free to comment on your solution. 1. The AzureAD module got resolved by simply updating the module to the latest version (with PSGallery) Install-Module AzureAD -Force???? 2. The MSOL (Microsoft online) module was resolved by updating the module as well as adding the SSL/TLS protocol (with PSGallery) Install-Module MSOnline -Force?????? 2.1 Add the following to the top part of your script to run the session with a secure protocol [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12???? More information regarding, why this error occurred can be read on Microsoft Azures website Remove TLS 1.0 and 1.1 from use with Azure Cache for Redis | Microsoft Docs   How to connect to AzureAD Connect to Office 365 PowerShell | Microsoft Docs   Thanks for reading and good luck!
    Expand Post

  2. Moving to Azure

    Morning, we are looking to move our Snow install to Azure using Azure's Site Recovery feature and moving the Snow Inventory database was ok but when we tried to move the Snow Licence Database we get the following error. 

    This database is encrypted by database master key, you need to provide valid password when adding it to the availability group. 

    Within SQL we are enabling AlwaysOn. I found a mention online that Snow doesn't support it but it was only a comment from a forum not an official statement etc. 

    Does anyone know if this is now supported and how to do it? 

    Expand Post

    • Detlev Eufinger (Flexera Software)

      Hi Mike, Unfortunately there is no support for the operation in an active / active cluster.   But you can vote here! Idea

  3. How to assign licenses with Azure Hybrid use Benefit?

    I would like to use my spare Windows server Standard licenses with active SA to license the Azure VM's we have.

    Azure VM's are inventoried in SLM, but are always shown as Datacenter installations and the amount of vcpu's is not inventoried correct in SLM. In our case we are using Azure VM's with a different versions of Windows server, but always inventoried as Datacenter or Enterprise.

    I can use the Windows Server Standard Core licenses to license these Azure VM's using the Hybrid Use Benefit. So a minimum of 8 cores per azure vm is used, in Azure I simply have to set the AHUB option on, so it is charged as a linux WM (The OS component is not charged).

    What is the best way to assign licenses in this situation in Snow license manager, are there any best practices available?

    Expand Post

    • Hi Jan, did you get an answer on this as i am also having the same issue?

  4. Educational inst.: Microsoft Imagine now Azure Dev Tools

    It is a long shot posting this here but any help would be appreciated.

    Long story short, Microsoft have moved their Microsoft Imagine Standard and Premium service into one Azure Dev Tools platform.

    Imagine Standard was for ALL students

    Imagine Premium was for STEM department students.

    The FAQ's state both the following:

    Microsoft Imagine Standard has been retired and replaced with "Microsoft Azure Dev Tools for Teaching". All current Microsoft Imagine Standard subscribers have been transitioned to Microsoft Azure Dev Tools for Teaching and will receive all the additional benefits that come with it.

    and

    Please note: the Microsoft Azure Dev Tools for Teaching subscription is only available to STEM departments and students in that department.

    Total and utter confusion over who is allowed onto the new platform. Does anyone have any information regarding this?

    Many thanks!

    Gemma

    Expand Post

    • Hi Nishant,  You will find the fields collected and the mapping in the connector user guides on the Support Portal.  Support Portal - User guide AWS connector    Support Portal - User guide Azure connector   (From what I can see, the subscription ID is not collected, but you might want to check that too.  I am not too familiar with these products.) 

  5. How to handle cloud instances that change frequently?

    Hi - new to the world of Snow and SAM, and just getting our organisation up and running with agents etc.

    I'm looking to understand how organisations are tracking their cloud inventory such as AWS instances or Azure VM's. In particular, where the instances are spun up and down on a regular basis through automation. We have, for example, our development environment that has around 200 instances running spun up during the day and are then terminated in the evening. The next day a new set of instances will be spun up with completely new IP's, hostnames, MAC addresses etc.

    This is replicated throughout our environments from test, to pre-production and production (with less frequency of changes to production of course - however we still deploy fortnightly a new release through the CI/CD pipeline).

    I can't see how best to manage this scenario because if all the instances are spun up through automation (from templates) - those templates would have the Snow agent installed and we would soon start to see a LOT of computers showing up in the Snow portal, many of which would no longer be in existence.

    Is it therefore not worth deploying the agents out in this way?

    Does the AWS integration solve this in any way?

    How are you tackling this problem in your environments?

    Should we focus on only keeping a manual tracking of the AMI (templates)?

    I'd appreciate your thoughts and suggestions on this.

    Cheers,

    Baronne

    Expand Post

    • Hi Baronne, I certainly don't have all the answers to this, but is something that I am actively researching, investigating and lobbying for. In our situation we have opted not not to deploy Snow agents to AWS and Azure instances with the fear of over-inflating our SLM estate and skewing our compliance picture because this isn't a real-time view. I can tell you that the AWS integration/connector doesn't help because this will only provide you with basic discovery of the instances and not the application installed on those instances. I.e. will return the asset name, etc. but not what is installed on it. It is also restricted by AWS account, so if you have multiple accounts you will need to configure the connector for each AWS account in use. What we are doing at present is leveraging other solutions like Cloud Health to retrieve detailed information about what cloud instances are out there, their usage, configuration, consumption and cost. Other solutions like Tanium are also really good if you want to interrogate what is in use and have a mechanism to manage patching and updates, etc. FYI - I am lobbying for connectors for these types of 3rd party solutions too. Overall, because of the ethereal nature of cloud estates there is still a large proportion of the work that is manual interrogation and interpretation of the software usage. Our organisation is working with Snow and Tanium to try find a solution to this ever present challenge. Hope that helps shed some light - or at a minimum reassure you that you are not alone with this. BR, Tyrone
      Expand Post

  6. Snow agent on azure machines

    Hi,

    Currently the Azure Discovery connector, if I understand it correctly, only gathers HW data. 

     

     

    So my question is if it's possible to deploy the Snow Inventory Agent on the azure machines as well, in order to fetch both HW and SW?

    If my the response to my above question is yes, I'm also wondering if it's possible to have a azure 'mid' inventory server that all azure machines reports to, which then sends the data to the 'ordinary' inventory server? (so that all azure machines don't have to communicate to the primary endpoint themselves).

    Furthermore, if the answer is yes to my first question again, is it possible to have a lower quarantine days value for the azure machines separated from the 'ordinary' machines?

    Thanks in advance,

    Dennis

    Expand Post

    • Community Manager (Flexera Software)

      Hi Dennis, thank you for posting this question. 1) Yes, it is possible to equip Azure machines with our Snow Inventory Agent, as long as they meet the system requirements for the inventory agent. 2) Yes, it is possible to route inventory agent data through a so called 'Service Gateway', which is located in a remote location. In your case, this would be a separate machine inside Azure. All Azure computers would report to this machine and would not require a connection to the Inventory Master Server. Only the Service Gateway would need to establish a connection outside of Azure to access the Inventory Master Server. Please see this architecture diagram for a clear picture of the possible setup. If you have further questions, please do not hesitate to ask. /marcel
      Expand Post

    • Sebastiano Bonfiglio (Flexera Software)

      Hi Peter, I'm not able to provide you with a screenshot of the actual data, but the connector provides data for the "Cloud Server that are not Inventoried" report. This will give you an overview of your servers in Azure which do not have a Snow Agent installed. Best, Sebastiano

End of Feed
8 Chatter Feed Items
ALL CONVERSATIONS
UNSOLVED
ARTICLES
13 Posts

Related Topics

    Loading
    Azure | Flexera