Create and Upload Management certificate to Azure

Hello Everyone,

Recently, one of my customers need to Migrate some VMWARE virtual machines to Azure using Microsoft Virtual Machine Converter, one option is available in MVMC tool is to upload the VHD direct to azure without need a Hyper-v, So as usual i installed the MVMC tool, i filled all required info, but suddenly the wizard ask me for the Azure subscription ID and the certificate thumbprint ! as below:

Microsoft Virtual Machine Manager

Microsoft Virtual Machine Manager

So as usual i opened Google and searched about how to create a certificate in azure, i found a Microsoft article URL : https://msdn.microsoft.com/en-us/library/azure/gg551722.aspx

I opened the article but unfortunately the content is no longer available:

Microsoft Article

Microsoft Article

I chose NO answered the question “Was this page helpful?” hahaha and start another search again in this topic.

so i spent many hours to bring to you the conclusion about how to create a management certificate and upload it to azure.

Let’s begin 🙂

The process is easy, Install MakeCer.exe tool from Microsoft, you can install this tool from the Windows Software deployment kit tool, to install the SDK installer follow this link: https://www.microsoft.com/click/services/Redirect2.ashx?CR_EAC=300105886

After you install the Deployment kit run the setup, choose the installation path and click Next:

11

Here, Click Next:

22

Accept The agreement and click Next:

33

Choose Windows app certification Kit only, Finally click install and wait until the installation finish:

44

 

Now open CMD, navigate to the path of the MakeCert.exe tool:

The default path for Makecert.exe tool is : C:\Program Files (x86)\Windows Kits\8.1\bin\x64

The Command to create new certificate will be:

makecert.exe -sky exchange -r -n “CN=Azure” -pe -a sha256 -len 2048 -ss My “AzureCert.cer”

You can choose any name in the CN option and AzureCert.cer name.

CMD input should be like below snapshot:

55

After you got the succeeded result as shown in above snapshot, a new certificate will be created in the same folder of the  MakeCert.exe tool.

Now copy the certificate, and import it to personal folder in local user certificate, to do this:

Open MMC from Run and click OK:

Run

Run

Press CTRL+M, Add the certificates snap-ins, click on Add button:

66

Choose my user account option, and click Finish:

77

Expand the certificate tree, then expand the personal folder, right click and choose all task, Choose import option:

88

Below is the steps to import the certificate:

99

1010

11111212

After the import succeed, take the same certificate and import it to azure, open you azure portal, go to setting option:

q

Choose Management Certificate:

w

Click in Upload button in the bottom of the page, then choose the certificate:

e

Wait a while, the certificate will be imported and appear in the portal a shown in below snapshots:

r

 

 

 

t

 

Finally, Now you can use the certificate and it’s thumbprint 🙂

Blogger …

Ahmad Yasin (MCSA office 365, MCSE : Messaging, Azure Certified)

Ahmad Yasin (MCSA office 365, MCSE : Messaging, Azure Certified)

Ahmad Yasin in a Microsoft Cloud Engineer and the publisher of
AzureDummies blog. He also hold many certificates in office 365
and windows azure including Developing Microsoft Azure Solutions, Implementing Microsoft Azure Infrastructure Solutions
and MCSA office 365.

Find Ahmad at Facebook and LinkedIn

 

 

Leave a Reply

Your email address will not be published. Required fields are marked *