You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/storage/file-sync/file-sync-managed-identities.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,7 +19,7 @@ When you enable this configuration, the system-assigned managed identities will
19
19
- Registered server authentication to Azure file share
20
20
- Registered server authentication to Storage Sync Service
21
21
22
-
To learn more about the benefits of using managed identities, see [Managed identities for Azure resources](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview).
22
+
To learn more about the benefits of using managed identities, see [Managed identities for Azure resources](../../entra/identity/managed-identities-azure-resources/overview.md).
23
23
24
24
To configure your Azure File Sync deployment to utilize system-assigned managed identities, please follow the guidance in the subsequent sections.
25
25
@@ -38,11 +38,11 @@ To configure your Azure File Sync deployment to utilize system-assigned managed
38
38
```
39
39
40
40
## Enable a system-assigned managed identity on your registered servers
41
-
Before you can configure Azure File Sync to use managed identities, your registered servers must have a system-assigned managed identity that will be used to access the Azure File Sync service and Azure file shares.
41
+
Before you can configure Azure File Sync to use managed identities, your registered servers must have a system-assigned managed identity that will be used to authenticate to the Azure File Sync service and Azure file shares.
42
42
43
43
To enable a system-assigned managed identity on a registered server that has the Azure File Sync v19 agent installed, perform the following steps:
44
-
- If the server is hosted outside of Azure, it must be an **Azure Arc-enabled server** to have a system-assigned managed identity. For more information on Azure Arc-enabled servers and how to install the Azure Connected Machine agent, see: [Azure Arc-enabled servers Overview](https://learn.microsoft.com/azure/azure-arc/servers/overview).
45
-
- If the server is an Azure virtual machine, **enable the system-assigned managed identity setting on the VM**. For more information, see: [Configure managed identities on Azure virtual machines](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/how-to-configure-managed-identities?pivots=qs-configure-portal-windows-vm#enable-system-assigned-managed-identity-on-an-existing-vm).
44
+
- If the server is hosted outside of Azure, it must be an **Azure Arc-enabled server** to have a system-assigned managed identity. For more information on Azure Arc-enabled servers and how to install the Azure Connected Machine agent, see: [Azure Arc-enabled servers Overview](../../azure-arc/servers/overview.md).
45
+
- If the server is an Azure virtual machine, **enable the system-assigned managed identity setting on the VM**. For more information, see: [Configure managed identities on Azure virtual machines](../../entra/identity/managed-identities-azure-resources/how-to-configure-managed-identities.md#enable-system-assigned-managed-identity-on-an-existing-vm).
46
46
47
47
> [!NOTES]
48
48
> - At least one registered server must have a system-assigned managed identity before you can configure the Storage Sync Service to use a system-assigned identity.
@@ -61,7 +61,7 @@ Verify the **LatestApplicationId** property has a GUID which indicates the serve
61
61
If the value for the **ActiveAuthType** property is **Certificate** and the **LatestApplicationId** does not have a GUID, the server does not have a system-assigned managed identity and will use shared keys to authenticate to the Azure file share.
62
62
63
63
> [!NOTE]
64
-
> Once a server is configured to use the system-assigned managed identity by following the steps in the section below, the **LatestApplicationId** property is longer used (will be empty), the **ActiveAuthType** property value will be changed to **ManagedIdentity** and the **ApplicationId** property will have the GUID for the system-assigned managed identity.
64
+
> Once a server is configured to use the system-assigned managed identity by following the steps in the section below, the **LatestApplicationId** property is longer used (will be empty), the **ActiveAuthType** property value will be changed to **ManagedIdentity** and the **ApplicationId** property will have a GUID which is the system-assigned managed identity.
65
65
66
66
## Configure your Azure File Sync deployment to use system-assigned managed identities
67
67
To configure the Storage Sync Service and registered servers to use a system-assigned managed identities, run the following command from an elevated PowerShell window:
@@ -104,6 +104,6 @@ Verify the **ApplicationId** property has a GUID which indicates the server is c
104
104
> Once the registered server(s) are configured to use a system-assigned managed identity, it can take up to one hour before the server uses the system-assigned managed identity to authenticate to the Storage Sync Service and Azure file shares.
105
105
106
106
## More Information
107
-
Once the Storage Sync Service and registered server(s) are configured to use a system-assigned managed identity, new endpoints (cloud or server) that are created will use a system-assigned managed identity to authenticate to the Azure file share.
108
-
109
-
If you experience issues, see Troubleshoot Azure File Sync managed identity issues.
107
+
Once the Storage Sync Service and registered server(s) are configured to use a system-assigned managed identity:
108
+
- New endpoints (cloud or server) that are created will use a system-assigned managed identity to authenticate to the Azure file share.
109
+
- Use the Set-AzStorageSyncServiceIdentity cmdlet anytime you need to configure additional registered servers to use managed identities.
0 commit comments