How do I update Azure Arc Connected Machine Agent With New Secret?

Seekell, Roger 46 Reputation points
2024-09-10T16:01:47.86+00:00

We've had Azure Arc on-prem connected machines for a while, and now the Client Secret that was used to join them is about to expire.

What happens when the client secret expires? Will the connected machine agent stop communicating? Do I need to update every connect machine with the new secret? How would I do that?

Azure Arc
Azure Arc
A Microsoft cloud service that enables deployment of Azure services across hybrid and multicloud environments.
406 questions
0 comments
Accepted answer
  1. Johnathan Sagar 75 Reputation points
    2024-09-20T16:36:08.1933333+00:00

    It sounds like you deployed the Connected Machine Agent via a script using a service principal, correct? The client secret is just for initial registration of the agent so your machines will continue checking into Azure Arc after the expiration. Your script however will need an updated client secret in order to register agents after the current client secret expires. To generate a new client secret:

    1. In the Azure portal, go to App registrations -> All applications
    2. Search for the ServicePrincipalID used in your script and click on the result
    3. Click Certificates & Secrets -> New client secret
    4. Set your expiration
    5. Click Add
    6. Update your script with the new client secret
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.