Merge pull request #9690 from mbifeld/main

AB#7456: Updated Serial Console Error to only be in CLI

Author: JarrettRenshaw

support/azure/virtual-machines/linux/serial-console-linux.md

@@ -11,9 +11,8 @@ ms.service: azure-virtual-machines
 ms.collection: linux
 ms.tgt_pltfrm: vm-linux
 ms.workload: infrastructure-services
-ms.date: 10/16/2025
-ms.author: jarrettr
-ms.reviewer: mbifeld
+ms.date: 09/10/2025
+ms.author: mbifeld
 ---
 
 # Azure Serial Console for Linux
@@ -89,9 +88,8 @@ By default, all subscriptions have serial console access enabled. You can disabl
 
 ### Use Serial Console with custom boot diagnostics storage account firewall enabled
 
-> [!CAUTION]
-> There's a known issue where Azure Serial Console might fail to connect when a custom boot diagnostics storage account has firewall restrictions. This issue occurs because Azure Serial Console runs in Microsoft's internal tenant, and firewall rules on the customer-managed storage account might block its access, even with correct permissions.
-> To avoid connectivity issues, [switch to managed boot diagnostics](../windows/boot-diagnostics.md#enable-boot-diagnostics-on-existing-virtual-machine) (recommended) or remove the firewall on the custom boot diagnostics storage account.
+> [!WARNING]
+> There's a known issue where Azure Serial Console might fail to connect when a custom boot diagnostics storage account has firewall restrictions when using the [az serial-console](/cli/azure/serial-console) command. To avoid connectivity issues, use Serial Console in the Azure Portal.
 
 > [!IMPORTANT]
 > By the end of 2025, Azure Serial Console will no longer utilize boot diagnostics storage accounts for establishing a connection. No customer action is required for this change. This change doesn't affect serial logs or screenshots.

support/azure/virtual-machines/windows/serial-console-errors.md

@@ -32,7 +32,7 @@ Error                             |   Mitigation
 "Azure Serial Console requires boot diagnostics to be enabled. Click here to configure boot diagnostics for your virtual machine." | Make sure that the virtual machine (VM) or VM scale set has [boot diagnostics](boot-diagnostics.md) enabled. If you use the Serial Console on a VM scale set instance, make sure that your instance has the latest model.
 "Azure Serial Console requires a virtual machine to be running. Use the Start button to start your virtual machine."  | The VM Scale Sets instance must be in a started state to access the Serial Console (your VM must not be stopped or deallocated). Make sure that your VM or VM Scale Sets instance is running, and then try again.
 "Azure Serial Console is not enabled for this subscription, contact your subscription administrator to enable." | The Azure Serial Console can be disabled at a subscription level. If you're a subscription administrator, you can [enable and disable the Azure Serial Console](./serial-console-enable-disable.md). If you aren't a subscription administrator, contact your subscription administrator for the next steps.
-A "Forbidden" response was encountered when accessing this VM's boot diagnostic storage account. | A known issue prevents Azure Serial Console from connecting if a custom boot diagnostics storage account has firewall restrictions. This issue occurs because Azure Serial Console runs in the Microsoft internal tenant. Therefore, firewall rules on the customer-managed storage account might block its access, even if it has the appropriate permissions. To avoid connectivity issues, [switch to managed boot diagnostics](boot-diagnostics.md#enable-boot-diagnostics-on-existing-virtual-machine) (recommended) or remove the firewall on the custom boot diagnostics storage account.
+A "Forbidden" response was encountered when accessing this VM's boot diagnostic storage account. | There's a known issue where Azure Serial Console might fail to connect when a custom boot diagnostics storage account has firewall restrictions when using the [az serial-console](/cli/azure/serial-console) command. To avoid connectivity issues, use Serial Console in the Azure Portal.
 You don't have the required permissions to use this VM with the serial console. Ensure you have at least Virtual Machine Contributor role permissions.| Serial console access requires that you have contributor level access on your VM or VM scale set. For more information, see the [Azure Serial Console](serial-console-overview.md) overview page.
 The storage account '' used for boot diagnostics on this VM couldn't be found. Verify that boot diagnostics is enabled for this VM, this storage account hasn't been deleted, and you have access to this storage account. | Double check that you didn't delete the boot diagnostics storage account for your VM or VM scale set.
 The serial console connection to the VM encountered an error: 'Bad Request' (400) | This error can occur if your boot diagnostics URI is incorrect. For example, "http://" instead of "https://" is used. To fix the URI, run the following command: `az vm boot-diagnostics enable --name vmName --resource-group rgName --storage https://<storageAccountUri>.blob.core.windows.net/`.

support/azure/virtual-machines/windows/serial-console-windows.md

@@ -142,9 +142,8 @@ By default, all subscriptions have serial console access enabled. You can disabl
 
 ### Use Serial Console with custom boot diagnostics storage account firewall enabled
 
-> [!CAUTION]
-> There's a known issue where Azure Serial Console might fail to connect when a custom boot diagnostics storage account has firewall restrictions. This issue occurs because Azure Serial Console runs in Microsoft's internal tenant, and firewall rules on the customer-managed storage account might block its access, even with correct permissions.
-> To avoid connectivity issues, [switch to managed boot diagnostics](boot-diagnostics.md#enable-boot-diagnostics-on-existing-virtual-machine) (recommended) or remove the firewall on the custom boot diagnostics storage account.
+> [!WARNING]
+> There's a known issue where Azure Serial Console might fail to connect when a custom boot diagnostics storage account has firewall restrictions when using the [az serial-console](/cli/azure/serial-console) command. To avoid connectivity issues, use Serial Console in the Azure Portal.
 
 > [!IMPORTANT]
 > By the end of 2025, Azure Serial Console will no longer utilize boot diagnostics storage accounts for establishing a connection. No customer action is required for this change. This change doesn't affect serial logs or screenshots.