Sync release-local-disconnectednew with main

sethmanheim · web-flow · commit 73422661297f · 2025-07-07T08:50:54.000-07:00
diff --git a/azure-local/TOC.yml b/azure-local/TOC.yml
@@ -225,13 +225,6 @@ items:
         href: deploy/deployment-azure-arc-gateway-use-without-proxy.md
   - name: Deploy using local identity with Key Vault
     href: deploy/deployment-local-identity-with-key-vault.md
-  - name: Deploy SDN
-    items:
-    - name: Using Express scripts
-      href: deploy/sdn-express-23h2.md
-    - name: Using Windows Admin Center
-      href: deploy/sdn-wizard-23h2.md  
-  
   - name: Deploy workloads
     items:
     - name: Run AKS on Azure Local
diff --git a/azure-local/faq.yml b/azure-local/faq.yml
@@ -44,7 +44,7 @@ sections:
           
       - question: Are there bandwidth or latency requirements between Azure Local and the cloud?
         answer: |
-          Yes. Limited-bandwidth connections like rural T1 lines or satellite/cellular connections are adequate for Azure Local to sync. The minimum required connectivity is 10 Mb per day. More services might require extra bandwidth, especially to replicate or back up whole VMs, download large software updates, or upload verbose logs for analysis and monitoring in the cloud.
+          Yes. Limited-bandwidth connections like rural T1 lines or satellite/cellular connections are adequate for Azure Local to sync. The minimum required connectivity is 10 Mbit. More services might require extra bandwidth, especially to replicate or back up whole VMs, download large software updates, or upload verbose logs for analysis and monitoring in the cloud.
 
       - question: Does Azure Local require continuous connectivity to the cloud?
         answer: |
diff --git a/azure-local/known-issues.md b/azure-local/known-issues.md
@@ -23,15 +23,15 @@ For more information about new features in this release, see [What's new for Azu
 
 ## Known issues for version 2506
 
-For the 2506 release of Azure Local, Microsoft released two security updates: one for existing deployments and another for new deployments. The following table provides information about different deployment types, their corresponding security updates, and OS builds:
+For the 2506 release of Azure Local, Microsoft released two security updates, each aligned with a specific OS build. The following table provides the specific versions and their OS builds:
 
-| Deployment type  | Solution version  | OS build  |
+| Solution version  | OS build  |
 |---------|---------|---------|
-| Existing deployments    | 11.2506.1001.28          | 25398.1665         |
-| New deployments    | 12.2506.1001.29         | 26100.4349        |
+| 11.2506.1001.28          | 25398.1665         |
+| 12.2506.1001.29         | 26100.4349        |
 
 > [!IMPORTANT]
-> The new deployments of this software use the **12.2506.1001.29** build. You can also update an existing deployment from 2504 using **11.2506.1001.28**.
+> The new deployments of this software use the **12.2506.1001.29** build. You can also update an existing deployment from 2505 using **11.2506.1001.28**.
 
 Release notes for this version include the issues fixed in this release, known issues in this release, and release note issues carried over from previous versions.
 
diff --git a/azure-local/manage/manage-secure-baseline.md b/azure-local/manage/manage-secure-baseline.md
@@ -5,7 +5,7 @@ author: alkohli
 ms.author: alkohli
 ms.topic: how-to
 ms.service: azure-local
-ms.date: 06/23/2025
+ms.date: 07/03/2025
 ---
 
 # Manage security defaults for Azure Local
@@ -118,7 +118,7 @@ The following table describes security settings that can be configured on your A
 
 | Feature area | Feature     |Description           | Supports drift control? |
 |--------------|-------------|----------------------|---------------------------------|
-| Governance                 | [Security baseline](.././concepts/secure-baseline.md)            | Maintains the security defaults on each node. Helps protect against changes.  | Yes                             |
+| Governance                 | [Security baseline](#view-and-download-security-settings)            | Maintains the security defaults on each node. Helps protect against changes.  | Yes                             |
 | Credential protection      | [Windows Defender Credential Guard](/windows/security/identity-protection/credential-guard/credential-guard)     | Uses virtualization-based security to isolate secrets from credential-theft attacks. | Yes                             |
 | Application control        | [Windows Defender Application control](/windows/security/threat-protection/windows-defender-application-control/wdac-and-applocker-overview#windows-defender-application-control)           | Controls which drivers and apps are allowed to run directly on each node.           | No                              |
 | Data at-rest encryption    | [BitLocker for OS boot volume](/windows/security/information-protection/bitlocker/bitlocker-overview)          | Encrypts the OS startup volume on each node.                                        | No                              |
diff --git a/azure-local/release-information-23h2.md b/azure-local/release-information-23h2.md
@@ -62,6 +62,9 @@ If your cluster supports [Solution Builder Extension software updates](./update/
 
 The following tables summarize the release information for Azure Local across all supported versions. All dates are listed in ISO 8601 format: *YYYY-MM-DD*.
 
+> [!IMPORTANT]
+> The new deployments of this software use the **12.2506.1001.29** build. You can also update an existing deployment from 2505 using **11.2506.1001.28**.
+
 #### [OS build 25398.xxxx](#tab/OS-build-25398-xxxx)
 
 | Solution version | OS build | Security update | What's new | Known issues |
diff --git a/azure-local/update/import-discover-updates-offline-23h2.md b/azure-local/update/import-discover-updates-offline-23h2.md
@@ -43,6 +43,7 @@ For more information on the release cadence, see [Azure Local release informatio
 
 | OS Build     | Download URI       | SHA256                          |
 |--------------|--------------------|---------------------------------|
+| 25398.1665   | [11.2506.1001.28](https://azurestackreleases.download.prss.microsoft.com/dbazure/AzureLocal/CombinedSolutionBundle/11.2506.1001.28/CombinedSolutionBundle.11.2506.1001.28.zip) <br><br> Availability date: <br><br> 2025-07-02 | 18975A06372192DD7249B5DCF8844EA0A68AD08B1C9F3C554FABF79EA74CB290 |
 | 25398.1611   | [11.2505.1001.22](https://azurestackreleases.download.prss.microsoft.com/dbazure/AzureLocal/CombinedSolutionBundle/11.2505.1001.22/CombinedSolutionBundle.11.2505.1001.22.zip) <br><br> Availability date: <br><br> 2025-05-28 | AB2C7CE74168BF9FD679E7CE644BC57A20A0A3A418C5E8663EBCF53FC0B45113 |
 | 25398.1551   | [11.2504.1001.19](https://azurestackreleases.download.prss.microsoft.com/dbazure/AzureLocal/CombinedSolutionBundle/11.2504.1001.19/CombinedSolutionBundle.11.2504.1001.19.zip) <br><br> Availability date: <br><br> 2025-04-21  | 7658C5CBAE241951C786D06D35E8B09A1160FDC5E9B8CAEDEB374ECC22A2CB68 |
 | 25398.1486   | [10.2503.0.13](https://azurestackreleases.download.prss.microsoft.com/dbazure/AzureLocal/CombinedSolutionBundle/10.2503.0.13/CombinedSolutionBundle.10.2503.0.13.zip) <br><br> Availability date: <br><br> 2025-03-31 | BAA0CEB0CF695CCCF36E39F70BF2E67E0B886B91CDE97F8C2860CE299E2A5126 |
@@ -51,6 +52,7 @@ For more information on the release cadence, see [Azure Local release informatio
 
 | OS Build     | Download URI       | SHA256                          |
 |--------------|--------------------|---------------------------------|
+| 26100.4349   | [12.2506.1001.29](https://azurestackreleases.download.prss.microsoft.com/dbazure/AzureLocal/CombinedSolutionBundle/12.2506.1001.29/CombinedSolutionBundle.12.2506.1001.29.zip) <br><br> Availability date: <br><br> 2025-07-02 | C8227DF98F97FDE807A2B711206A1FE23531340DC717F89CDA7A324BA0B316C7 |
 | 26100.4061   | [12.2505.1001.23](https://azurestackreleases.download.prss.microsoft.com/dbazure/AzureLocal/CombinedSolutionBundle/12.2505.1001.23/CombinedSolutionBundle.12.2505.1001.23.zip) <br><br> Availability date: <br><br> 2025-05-28 | 29E5F6732D9B1BD4E0C2667F6FB1D7F43ADF78B4AEA8E34486C7F03DD46D155C |
 
 ---
diff --git a/azure-local/whats-new.md b/azure-local/whats-new.md
@@ -21,10 +21,10 @@ This article lists the various features and improvements that are available in A
 
 There are two 2506 releases for June. Here are the details of each release:
 
-|Solution version  |OS version |Deployment  |
-|---------|---------|---------|
-|12.2506.1001.29 |  26100.4349        | New deployments only.        |
-|11.2506.1001.28  | 25398.1665        | Existing deployments only.        |
+|Solution version  | OS version |
+|---------|---------|
+|12.2506.1001.29 |  26100.4349  |
+|11.2506.1001.28  | 25398.1665  |
 
 For more information, see [Release information summary](./release-information-23h2.md).
 
@@ -41,16 +41,14 @@ This release has the following features and improvements:
         Existing deployments of Azure Local continue to use OS version **25398.1665**. For more information, see [Release information summary](./release-information-23h2.md).
 
     - If you purchased Integrated System or Premier solution hardware from the [Azure Local Catalog](https://aka.ms/AzureStackHCICatalog) through your preferred Microsoft hardware partner, the OS should be preinstalled. Work with your Original Equipment Manufacturer (OEM) to get the OS image compatible with **12.2506** and driver compatible with OS version **26100.4349** or Windows Server 2025.
-
-    - The new OS media uses consistent device naming (CDN) if the hardware supports it and ensures consistent network adapter naming.
     
 - **.NET updates**: This build uses .NET version **8.0.17** for both .NET Runtime and ASP.NET Core. For more information, see [Download .NET 8.0](https://dotnet.microsoft.com/download/dotnet/8.0).
 
 - **Software-Defined Networking (SDN) enabled by Azure Arc (Preview)**: Azure Local now supports creating Networking Security Groups (NSGs), configuring Network Security Rules, and assigning them to logical networks and network interfaces. This provides a consistent networking experience across your cloud and edge environment. For more information, see [Software-Defined Networking (SDN) enabled by Azure Arc](./concepts/sdn-overview.md).
 
 - **Deployment changes**: To ensure consistent validation before you deploy Azure Local, deployment validators for Microsoft On-premises Cloud and Azure resource bridge are now a part of environment checker.
 
-- **Overprovisioning alert**: An alert is added to indicate if a cluster is overprovisioned. Make sure to acknowledge the alert warning before you update as VM workloads are paused during the update run.
+- **Overprovisioning alert**: A warning is shown prior to starting an update if an Azure Local instance is overprovisioned. This alert indicates there is insufficient compute capacity (memory) to live migrate workloads during an update. You must acknowledge this alert before proceeding with an update, as VM workloads will be paused due to the lack of available compute or memory capacity.
 
 - **Security improvements**:
     - **New security baseline**: The 2506 release introduces a security baseline with 407 evaluated rules, a 25% increase from the previous 324. Key improvements include:
