You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Azure Instance Metadata Service (IMDS) is a REST API that's available at a well-known, non-routable IP address (`169.254.169.254`). You can only access it from within the VM. Communication between the VM and IMDS never leaves the host. HTTP clients must bypass web proxies within the VM when querying IMDS. IMDS IP address (`169.254.169.254`) must be handled in the same manner as the `168.63.129.16` IP address. For additional information, read about the[Azure Instance Metadata Service (IMDS)](/azure/virtual-machines/instance-metadata-service)
13
+
The Azure Instance Metadata Service (IMDS) is a REST API that's available at a well-known, non-routable IP address (`169.254.169.254`). You can access the API only from within the virtual machine (VM). Communication between the VM and IMDS never leaves the host. HTTP clients must bypass web proxies within the VM when they query IMDS. The IMDS IP address (`169.254.169.254`) must be handled in the same manner as the `168.63.129.16` IP address. For more information, see[Azure Instance Metadata Service (IMDS)](/azure/virtual-machines/instance-metadata-service)
14
14
15
-
IMDS problems on Azure virtual machines (VMs) can occur because of configuration, certificate, or connectivity issues. Microsoft provides a script-based tool to help diagnose and resolve most activation-related problems.
15
+
IMDS problems on Azure VMs can occur because of configuration, certificate, or connectivity issues. Microsoft provides a script-based tool to help diagnose and resolve most activation-related problems.
16
16
17
17
## Overview
18
18
19
-
This PowerShell script verifies the attestation signature provided by the Azure Instance Metadata Service (IMDS). It ensures that the certificate used in attestation is valid and trustedby attempting to build a complete certificate chain. This process helps confirm the integrity and authenticity of an Azure VM’s identity. The script is also available via Run Command.
19
+
This PowerShell script confirms the attestation signature that's provided by the Azure Instance Metadata Service (IMDS). The script makes sure that the certificate that's used in attestation is valid and trusted. It performs this action by trying to build a complete certificate chain. This process helps confirm the integrity and authenticity of an Azure VM’s identity. The script is also available through the Run command.
20
20
21
21
## Key features
22
22
@@ -43,25 +43,24 @@ You can run the tool in any of the following manners.
43
43
44
44
Download the scripts from GitHub, and then run them manually. To access the scripts, follow the resource links in the previous sections.
45
45
46
-
47
-
### 2. Use Azure Run Command
46
+
### 2. Use Azure Run command
48
47
49
-
- Navigate to your VM in the Azure portal: > **Operations** > **Run Command**.
48
+
- Navigate to your VM in the Azure portal: **Operations** > **Run Command**.
50
49
- Select the script from the list (see the following screenshot).
51
50
52
-
:::image type="content" source="media/windows-vm-imds-tool/windows-vm-imds-tool-portal-runcmd.png" alt-text="Azure portal view Run Command example." lightbox="media/windows-vm-imds-tool/windows-vm-imds-tool-portal-runcmd.png":::
51
+
:::image type="content" source="media/windows-vm-imds-tool/windows-vm-imds-tool-portal-runcmd.png" alt-text="Azure portal view Run command example." lightbox="media/windows-vm-imds-tool/windows-vm-imds-tool-portal-runcmd.png":::
53
52
54
53
> [!NOTE]
55
54
> Alternatively, you can run these commands by using a command-line interface (CLI) tool, Windows PowerShell, or Windows on ARM.
56
55
57
-
### 3. Use prepackaged Run Command scripts
56
+
### 3. Use prepackaged Run command scripts
58
57
59
58
For more information, see [Run scripts in your Windows VM by using action Run Commands](/azure/virtual-machines/windows/run-command).
60
59
61
60
## Recommended workflow
62
61
63
-
1. Run **IMDS Cert Check** to verify activation status and detect common issues.
64
-
2. Apply the suggested fixes or refer to the official documentation for advanced troubleshooting.
62
+
1. Run **IMDS Cert Check** to verify the activation status and detect common issues.
63
+
2. Apply the suggested fixes, or refer to the official documentation for advanced troubleshooting.
65
64
66
65
## Additional resources
67
66
@@ -71,4 +70,4 @@ For more information, see [Run scripts in your Windows VM by using action Run Co
0 commit comments