Failed to connect Azure Arc from on premises linux server

Borappa, (Nayaka) 51

Connected machine agent is installed successfully
Connectivity method: Priviate endpoint
server details: Linux Redhat 7

ERROR Message:

----------------------

ERROR Unable to obtain a token for deletion operation. Please wait a minute and try again. Error="DeviceCodeCredential: unable to resolve an endpoint: server response error:\n context deadline exceeded"
INFO Exit Code: AZCM0041: Failed To Get Access Token
INFO For troubleshooting, see https://aka.ms/arc/azcmerror
FATAL DeviceCodeCredential: unable to resolve an endpoint: server response error: context deadline exceeded

1 answer

Martin Dimovski 1,616 Reputation points MVP

2022-09-15T07:37:31.643+00:00
Hi,

Thank you for posting the question to the Q&A forum.

From the error message AZCM0041, there are 3 possibilities.

Credentials wrong

The account doesn't have access to the needed tenant or subscription

If you are using Service principal the Client ID is wrong or the Secret is expired

These are the possibilities that usually pop up with this error message. So kindly I would like to ask you to check first this.

I hope the above information can help you.

If the ANSWER is helpful, please click "Accept Answer" and upvote it. Thanks
Please sign in to rate this answer.
Borappa, (Nayaka) 51 Reputation points

2022-09-15T07:44:28.643+00:00

Thank you so much for the quick response. Please advise.

Credentials wrong

Access Code not yet generated on output to use the credentials to connect

The account doesn't have access to the needed tenant or subscription

I have contributor role and it has been activated for azure subscription level

If you are using Service principal the Client ID is wrong or the Secret is expired

Currently not using "Service principal "

Martin Dimovski 1,616 Reputation points MVP

2022-09-15T13:26:55.857+00:00

In this case, i would say to try with the Global admin role, because is going in the private endpoint and is adding a new server so it may be that is something with the Roles ..

Martin Dimovski 1,616 Reputation points MVP

2022-09-21T07:29:21.387+00:00

@Borappa, (Nayaka) I tested the scenario and the problem is in the permissions. So this to work you will need to add your admin account to the Resource Group- Access control (you can add as owner of the RG or as Azure Onboarding) for me this worked.

I hope the above information can help you.

If the ANSWER is helpful, please click "Accept Answer" and upvote it. Thanks

Borappa, (Nayaka) 51 Reputation points

2022-09-21T08:13:33.677+00:00

when we tested the connectivity from target we got below error: does it affect
Command: azcmagent check --location japaneast --enable-pls-check --verbose

ENDPOINT |REACHABLE |PRIVATE |TLS |PROXY
https://agentserviceapi.guestconfiguration.azure.com |true |true |TLS 1.2 |not used
https://dc.services.visualstudio.com |true |false |TLS 1.2 |not used
https://gbl.his.arc.azure.com |true |true |TLS 1.3 |not used
https://japaneast-gas.guestconfiguration.azure.com |true |true |TLS 1.2 |not used
https://je.his.arc.azure.com |true |true |TLS 1.3 |not used
https://login.microsoftonline.com |false |false |unknown |not used
https://login.windows.net |false |false |unknown |not used
https://management.azure.com |false |false |unknown |not used
https://pas.windows.net |false |false |unknown |not used
[root@scjpapp01005 ~]#
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Failed to connect Azure Arc from on premises linux server

1 answer

Your answer