Update troubleshoot.md

Product Backlog Item 7976945: RE: Error propagation for scenarios in install/enable commands in guest agent

Author: axelgMS

articles/virtual-machines/extensions/troubleshoot.md

@@ -59,6 +59,7 @@ Extensions:  {
 ```
 
 ## Troubleshooting extension failures
+
 ### Rerun the extension on the VM
 If you are running scripts on the VM using Custom Script Extension, you could sometimes run into an error where VM was created successfully but the script has failed. Under these conditions, the recommended way to recover from this error is to remove the extension and rerun the template again.
 Note: In future, this functionality would be enhanced to remove the need for uninstalling the extension.
@@ -70,3 +71,28 @@ Remove-AzVMExtension -ResourceGroupName $RGName -VMName $vmName -Name "myCustomS
 
 Once the extension has been removed, the template can be re-executed to run the scripts on the VM.
 
+### Trigger a new GoalState to the VM
+You might notice that an extension hasn't been executed, or is failing to execute because of a missing "Windows Azure CRP Certificate Generator" (that certificate is used to secure the transport of the extension's protected settings).
+That certificate will be automatically re-generated by restarting the Windows Guest Agent from inside the Virtual Machine:
+- Open the Task Manager
+- Go to the Details tab
+- Locate the WindowsAzureGuestAgent.exe process
+- Right-click, and select "End Task". The process will be automatically restarted
+
+
+You can also trigger a new GoalState to the VM, by executing an "empty update":
+
+Azure PowerShell:
+
+```azurepowershell
+$vm = Get-AzureRMVM -ResourceGroupName <RGName> -Name <VMName>  
+Update-AzureRmVM -ResourceGroupName <RGName> -VM $vm  
+```
+
+Azure CLI:
+
+```azurecli
+az vm update -g <rgname> -n <vmname>
+```
+
+If an "empty update" didn't work, you can add a new empty Data Disk to the VM from the Azure Management Portal, and then remove it later once the certificate has been added back.