Skip to content

Commit 40b4d6c

Browse files
Commented to remove Get-CertificatechainFromEndpoint example before deploy until the issue is fixed in the preview release
1 parent 274426e commit 40b4d6c

File tree

2 files changed

+8
-10
lines changed

2 files changed

+8
-10
lines changed

azure-local/manage/disconnected-operations-deploy.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -237,8 +237,7 @@ To prepare the first machine for the disconnected operations appliance, follow t
237237
1. Import the **Operations module**. Run the command as an administrator using PowerShell. Modify the path to match your folder structure.
238238
239239
```powershell
240-
Import-Module "$applianceConfigBasePath\OperationsModule\Azure.Local.DisconnectedOperations.psd1" -Force
241-
Import-Module "$applianceConfigBasePath\OperationsModule\ExternalIdentityConfigurationModule.psm1" -Force
240+
Import-Module "$applianceConfigBasePath\OperationsModule\Azure.Local.DisconnectedOperations.psd1" -Force
242241
243242
$mgmntCertFolderPath = "$certspath\ManagementEndpointCerts"
244243
$ingressCertFolderPath = "$certspath\IngressEndpointsCerts"
@@ -290,9 +289,10 @@ Populate the required parameters based on your deployment planning. Modify the e
290289
1. Populate the identity configuration object.
291290
292291
```powershell
293-
$oidcCertChain = Get-CertificateChainFromEndpoint -requestUri 'https://adfs.azurestack.local/adfs'
294-
# Omit ldapsCertChain in this preview release
292+
# Omit these in this preview release until cmdlet export of Get-CertificateChainFromEndpoint has been resolved.
293+
# $oidcCertChain = Get-CertificateChainFromEndpoint -requestUri 'https://adfs.azurestack.local/adfs'
295294
# $ldapsCertChain = Get-CertificateChainFromEndpoint -requestUri 'https://dc01.azurestack.local'
295+
296296
$ldapPassword = 'RETRACTED'|ConvertTo-SecureString -AsPlainText -Force
297297
298298
$identityParams = @{
@@ -301,14 +301,13 @@ Populate the required parameters based on your deployment planning. Modify the e
301301
RootOperatorUserPrincipalName = "[email protected]"
302302
LdapServer = "adfs.azurestack.local"
303303
LdapCredential = New-Object PSCredential -ArgumentList @("ldap", $ldapPassword)
304-
SyncGroupIdentifier = "7d67fcd5-c2f4-4948-916c-b77ea7c2712f"
305-
OidcCertChainInfo=$oidcCertChainInfo
304+
SyncGroupIdentifier = "7d67fcd5-c2f4-4948-916c-b77ea7c2712f"
306305
}
307306
$identityConfiguration = New-ApplianceExternalIdentityConfiguration @identityParams
308307
```
309308
310309
> [!NOTE]
311-
> `LdapsCertChainInfo` and `OidcCertChain` can be omitted completely for debugging or demo purposes. For information on how to get LdapsCertChainInfo and OidcCertChainInfo, see [PKI for disconnected operations](disconnected-operations-pki.md).
310+
> `LdapsCertChainInfo` and `OidcCertChain` can be omitted completely for debugging or demo purposes. For information on how to get LdapsCertChainInfo and OidcCertChainInfo, see [PKI for disconnected operations](disconnected-operations-pki.md). Please note that in this preview release, there is an issue with the Get-CertificateChainFromEndpoint not being exported as intended.
312311
313312
For more information, see [Identity for disconnected operations](disconnected-operations-identity.md).
314313

azure-local/manage/disconnected-operations-pki.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -314,11 +314,10 @@ Here's an example of how to populate the required parameters:
314314

315315
```powershell
316316
Import-Module "$applianceConfigBasePath\OperationsModule\Azure.Local.DisconnectedOperations.psd1" -Force
317-
Import-Module "$applianceConfigBasePath\OperationsModule\ExternalIdentityConfigurationModule.psm1" -Force
317+
318318
319319
$oidcCertChain = Get-CertificateChainFromEndpoint -requestUri 'https://adfs.azurestack.local/adfs'
320-
# Omit LDAPSCertChain in this preview releases
321-
# $ldapsCertChain = Get-CertificateChainFromEndpoint -requestUri 'https://dc01.azurestack.local'
320+
$ldapsCertChain = Get-CertificateChainFromEndpoint -requestUri 'https://dc01.azurestack.local'
322321
```
323322

324323
Here's an example of the output from Get-CertificateChainFromEndpoint

0 commit comments

Comments
 (0)