Merge branch 'main' into release-aio-2603

Author: v-alje

articles/confidential-computing/TOC.yml

@@ -67,8 +67,6 @@
       href: migrate-nested-confidential-vms.md
     - name: Virtual Machine Metablob Disk
       href: virtual-machine-metablob-disk.md
-    - name: How to disable Virtual Machine Metablob Disk
-      href: disable-confidential-vm-metadata-blob.md
     - name: Quickly create confidential VMs
       items:
       - name: Create a Confidential VM through the Azure portal

articles/cyclecloud/index.yml

@@ -45,7 +45,7 @@ landingContent:
     linkLists:            
       - linkListType: whats-new
         links:
-          - text: CycleCloud 8.8.2 is now available (Release Notes)
+          - text: CycleCloud 8.8.3 is now available (Release Notes)
             url: release-notes.md
           - text: CycleCloud Workspace for Slurm Release Notes
             url: release-notes/ccws/release-notes.md

articles/cyclecloud/release-notes.md

@@ -2,13 +2,13 @@
 title: Current Release Notes - Azure CycleCloud 8.8.x
 description: Read the product release notes for the current Azure CycleCloud release. This article covers releases 8.8.x, 8.7.x, 8.6.x, 8.5.x, 8.4.x, 8.2.x and 8.1.x.
 author: adriankjohnson
-ms.date: 02/06/2026
+ms.date: 03/17/2026
 ms.author: adjohnso
 ---
 
 # Azure CycleCloud 8.x
 
-The current version is 8.8.2.
+The current version is 8.8.3.
 
 ## Azure CycleCloud 8.x release highlights
 
@@ -33,6 +33,7 @@ The following table lists the release notes for the individual 8.x releases:
 
 | CycleCloud Release Notes Version  | Release date  |
 | :-------------------------------: | :-----------: |
+| [**8.8.3**](release-notes/8-8-3.md) | 03/17/26 |
 | [**8.8.2**](release-notes/8-8-2.md) | 02/06/26 |
 | [**8.8.1**](release-notes/8-8-1.md) | 12/12/25 |
 | [**8.8.0**](release-notes/8-8-0.md) | 12/08/25 |

articles/cyclecloud/release-notes/8-8-3.md

@@ -0,0 +1,18 @@
+---
+title: Release Notes v8.8.3
+description: Product release notes for Azure CycleCloud v8.8.3
+author: alabonte7
+ms.date: 03/17/2026
+ms.author: alabont
+---
+
+# CycleCloud version 8.8.3
+
+The release 8.8.3 addresses several key issues including a failure in installing the CLI due to azcopy download errors.
+
+## Resolved Issues
+
+- Installing CycleCloud CLI would fail due to an error downloading azcopy
+- Nodes failed to converge in non-public clouds
+- When users' login expired or when users weren't signed-in, some CycleCloud GUI URLs didn't correctly redirect to the sign in page
+- The disabled legacy `reboot_node` command was removed from the CLI. The new `restart_node` command replaces it

articles/cyclecloud/toc.yml

@@ -267,6 +267,8 @@ items:
         href: /previous-versions/azure/cyclecloud/release-notes-previous
       - name: Older Releases
         href: /previous-versions/azure/cyclecloud/release-notes-archive
+      - name: 8.8.3 Release Notes
+        href: ./release-notes/8-8-3.md
       - name: 8.8.2 Release Notes
         href: ./release-notes/8-8-2.md
       - name: 8.8.1 Release Notes

articles/dev-box/overview-what-is-microsoft-dev-box.md

@@ -9,7 +9,7 @@ author: RoseHJM
 ms.date: 10/31/2025
 adobe-target: true
 
-#Customer intent: #Customer intent: As a platform engineer, I want to understand what Microsoft Dev Box is and how it can help developer teams, so that I can efficiently set up and use cloud development environments for my teams.
+#Customer intent: As a platform engineer, I want to understand what Microsoft Dev Box is and how it helps developer teams, so that I can efficiently set up and use cloud development environments for my teams.
 ---
 
 # What is Microsoft Dev Box?

articles/devtest/offer/how-to-change-directory-tenants-visual-studio-azure.md

@@ -1,12 +1,12 @@
 ---
-title: Change directory tenants with your individual VSS Azure subscriptions
+title: Change directory tenants with your individual Visual Studio Subscription Azure subscriptions
 description: Change directory tenants with your Azure subscriptions.
 ms.author: amast
-author: rigel512
+author: joseb-rdc
 ms.service: visual-studio-family
 ms.subservice: subscriptions
 ms.topic: how-to 
-ms.date: 10/18/2023
+ms.date: 03/20/2026
 ms.custom: devtestoffer
 ---
 
@@ -24,7 +24,7 @@ When you activate your subscription, your identity is created based on the email
 
 From here, you can either switch identities or switch directories. You might need to change your identity to access certain directories.  
 
-If the identity you’re logged in as is associated with multiple directories, switch by selecting “Switch directory.” You'll see the directories your current identity is associated with.  
+If the identity you’re logged in as is associated with multiple directories, switch by selecting "Switch directory." You can see the directories your current identity is associated with.  
 
 ![A screenshot of the Directory and Subscription window in Azure portal.](media/how-to-change-directory-tenants-visual-studio-azure/switch-directory.png "Switch directories by selecting 'Switch directory'. Choose the directory you want.")  
 
@@ -52,28 +52,11 @@ You can see and manage your access levels within Access Control. You can also ma
 
 ![A screenshot of the Visual Studio Subscription access control page.](media/how-to-change-directory-tenants-visual-studio-azure/access-control.png "Manage access to your subscription.")
 
-## How to Change your Azure Directory Tenant
+## How to Change the Entra directory of your Azure subscription
 
-To access another Active Directory, you need an active account with the necessary permissions and access to change directory tenants. An admin within the directory tenant you wish to access can either add you as:
+To change the Entra Directory of your Azure subscription, you need to complete the following two-party request and accept workflow.
 
-* User
-* Guest  
+1. To initiate a change directory request, you need to be a subscription owner of the subscription in the source directory.
+2. To accept a change directory request, you or another party need to be an Entra admin in the destination directory.
 
-Once you’ve been added and given proper permissions, you can switch directories within your subscription.  
-
-1. Sign in and select the subscription you want to use from the [Subscriptions page in Azure portal](https://portal.azure.com/#blade/Microsoft_Azure_Billing/SubscriptionsBlade)  
-2. Select **Change Directory**
-
-    ![A screenshot a Contoso Enterprise Subscription page with Change Directory highlighted.](media/how-to-change-directory-tenants-visual-studio-azure/change-directory.png "Select Change Directory.") 
-3. A box will surface to choose the new directory  
-4. Select **Change**
-
-    > [!NOTE]
-    > If you don’t have access to the target directory it will not show. After the directory is changed for the subscription, you'll receive a success message.  
-
-    ![A screenshot of the Change Directory validation page.](media/how-to-change-directory-tenants-visual-studio-azure/change-button.png "Select the directory from the dropdown and select the Change button.")
-5. Select “Switch Directories” on the subscription page to access the new directory  
-
-  ![A screenshot of the subscriptions page with Switch Directories highlighted.](media/how-to-change-directory-tenants-visual-studio-azure/switch-directories-outlined.png "Select Switch Directories to access the new directory.")
-
-You can also access a target directory and change your tenancy by going to the target directory and adding an Admin. Follow [these instructions](/visualstudio/subscriptions/cloud-admin) on how to add an Admin to your subscription. Once that’s done, the Admin has access to both directories and can change the tenant directory for you.  
+This process requires coordination between the source and destination directories. For the complete workflow—including prerequisites, role requirements, and approval steps—visit [How to change the Entra directory of your Azure subscription](/azure/cost-management-billing/manage/subscription-change-directory).

articles/energy-data-services/concepts-reference-data-values.md

@@ -5,7 +5,7 @@ author: marielherz
 ms.author: marielherzog
 ms.service: azure-data-manager-energy
 ms.topic: overview
-ms.date: 12/18/2025
+ms.date: 02/16/2026
 ms.custom: template-concept
 ---
 
@@ -67,6 +67,17 @@ Azure Data Manager for Energy updates Reference Data Values (RDVs) by automatica
 | **OPEN** | Customer‑extended or modified entries are preserved; new OSDU® baseline entries are added without overwriting user changes. | Balances shared semantics with user‑driven extensibility. |
 | **LOCAL** | Behaviors follow the instance’s provisioning choice; custom values remain unchanged, and new OSDU® suggestions are added only if LOCAL was enabled. | Protects business‑specific meaning and avoids unintended modification. |
 
+### Expired Legal Tags and RDV Upgrades
+
+During automated RDV upgrades, Azure Data Manager for Energy validates the legal tags associated with existing reference data records before applying updates. If a data partition contains records with expired legal tags, the following behavior applies:
+
+- **Existing RDVs with expired legal tags are skipped** — The upgrade process skips updates for records whose legal tags have expired, rather than failing the entire upgrade for the data partition. These records remain at their current version until the legal tag issue is resolved.
+- **New RDVs are still added** — New reference data values introduced in the latest OSDU® milestone are added successfully, as they receive new legal tags and aren't affected by pre-existing expired tags.
+- **No data loss occurs** — Skipped records aren't deleted or modified. Once you renew or replace the expired legal tags, the records are eligible for upgrade in the next milestone cycle.
+
+> [!NOTE]
+> To ensure all reference data values are upgraded during milestone updates, verify that no legal tags in your data partitions are expired. You can identify expired legal tag validation failures in the **storage service logs** for your Azure Data Manager for Energy instance.
+
 For information on the current milestone supported by and available OSDU® services in Azure Data Manager for Energy, refer [OSDU® services available in Azure Data Manager for Energy](osdu-services-on-adme.md).
 
 ## Next steps

articles/firewall/protect-azure-virtual-desktop.md

@@ -5,7 +5,7 @@ author: duongau
 ms.service: azure-firewall
 services: firewall
 ms.topic: how-to
-ms.date: 02/05/2026
+ms.date: 03/26/2026
 ms.author: duau
 # Customer intent: As an IT administrator, I want to configure Azure Firewall for Azure Virtual Desktop, so that I can securely manage outbound access and enhance the protection of my virtual desktop environment.
 ---
@@ -16,7 +16,7 @@ Azure Virtual Desktop is a cloud virtual desktop infrastructure (VDI) service th
 
 :::image type="content" source="media/protect-windows-virtual-desktop/windows-virtual-desktop-architecture-diagram.png" alt-text="A diagram showing the architecture of Azure Firewall with Azure Virtual Desktop." lightbox="media/protect-windows-virtual-desktop/windows-virtual-desktop-architecture-diagram.png":::
 
-Follow the guidelines in this article to provide extra protection for your Azure Virtual Desktop host pool using Azure Firewall.
+Follow the guidelines in this article to provide extra protection for your Azure Virtual Desktop host pool by using Azure Firewall.
 
 ## Prerequisites
 
@@ -27,25 +27,27 @@ Follow the guidelines in this article to provide extra protection for your Azure
 To learn more about Azure Virtual Desktop terminology, see [Azure Virtual Desktop terminology](/azure/virtual-desktop/terminology).
 
 > [!WARNING]
-> Azure Virtual Desktop disconnections may occur during Azure Firewall scale-ins if all traffic is routed to the Azure Firewall using a default route. We recommend having direct access to the gateway and broker for Azure Virtual Desktop to avoid these disconnections. To resolve this issue, add a route to the route table applied to the Azure Virtual Desktop subnet with the *destination type* set to **Service tag**, the *destination service* set to **WindowsVirtualDesktop**, and the *next hop* set to **Internet**.
+> Azure Virtual Desktop disconnections can occur during Azure Firewall scale-ins if you route all traffic to the Azure Firewall by using a default route. To avoid these disconnections, make sure you have direct access to the gateway and broker for Azure Virtual Desktop. Use one of the following options based on your deployment:
+> - **Hub-and-spoke**: Add a route to the route table applied to the Azure Virtual Desktop subnet with the *destination type* set to **Service tag**, the *destination service* set to **WindowsVirtualDesktop**, and the *next hop* set to **Internet**.
+> - **Azure Virtual WAN**: Add a route to the route table applied to the subnet (spoke virtual network) that hosts the Azure Virtual Desktop workloads with the *destination type* set to **Service tag**, the *destination service* set to **WindowsVirtualDesktop**, and the *next hop* set to **Internet**.
 
 ## Host pool outbound access to Azure Virtual Desktop
 
-The Azure virtual machines you create for Azure Virtual Desktop must have access to several Fully Qualified Domain Names (FQDNs) to function properly. Azure Firewall uses the Azure Virtual Desktop FQDN tag `WindowsVirtualDesktop` to simplify this configuration. You need to create an Azure Firewall Policy and create Rule Collections for Network Rules and Applications Rules. Give the Rule Collection a priority and an *allow* or *deny* action.
+The Azure virtual machines you create for Azure Virtual Desktop must have access to several fully qualified domain names (FQDNs) to function properly. Azure Firewall uses the Azure Virtual Desktop FQDN tag `WindowsVirtualDesktop` to simplify this configuration. You need to create an Azure Firewall Policy and create rule collections for network rules and application rules. Give the rule collection a priority and an *allow* or *deny* action.
 
-You need to create rules for each of the required FQDNs and endpoints. The list is available at [Required FQDNs and endpoints for Azure Virtual Desktop](/azure/virtual-desktop/required-fqdn-endpoint). In order to identify a specific host pool as *Source*, you can create an [IP Group](../firewall/ip-groups.md) with each session host to represent it. 
+You need to create rules for each of the required FQDNs and endpoints. The list is available at [Required FQDNs and endpoints for Azure Virtual Desktop](/azure/virtual-desktop/required-fqdn-endpoint). To identify a specific host pool as *Source*, you can create an [IP Group](../firewall/ip-groups.md) with each session host to represent it. 
 
 > [!IMPORTANT]
-> We recommend that you don't use TLS inspection with Azure Virtual Desktop. For more information, see the [proxy server guidelines](/azure/virtual-desktop/proxy-server-support#dont-use-ssl-termination-on-the-proxy-server).
+> Don't use TLS inspection with Azure Virtual Desktop. For more information, see the [proxy server guidelines](/azure/virtual-desktop/proxy-server-support#dont-use-ssl-termination-on-the-proxy-server).
 
-## Azure Firewall Policy Sample
+## Azure Firewall Policy sample
 
-All the mandatory and optional rules mentioned previously can be easily deployed in a single Azure Firewall Policy using the template published at [https://github.com/Azure/RDS-Templates/tree/master/AzureFirewallPolicyForAVD](https://github.com/Azure/RDS-Templates/tree/master/AzureFirewallPolicyForAVD).
-Before deploying into production, we recommended reviewing all the network and application rules defined, ensure alignment with Azure Virtual Desktop official documentation and security requirements. 
+You can deploy all the mandatory and optional rules mentioned previously in a single Azure Firewall Policy by using the template published at [AzureFirewallPolicyForAVD](https://github.com/Azure/RDS-Templates/tree/master/AzureFirewallPolicyForAVD).
+Before deploying into production, review all the network and application rules defined to ensure alignment with Azure Virtual Desktop official documentation and security requirements. 
 
-## Host pool outbound access to the Internet
+## Host pool outbound access to the internet
 
-Depending on your organization needs, you might want to enable secure outbound internet access for your end users. If the list of allowed destinations is well-defined (for example, for [Microsoft 365 access](/microsoft-365/enterprise/microsoft-365-ip-web-service)), you can use Azure Firewall application and network rules to configure the required access. This routes end-user traffic directly to the internet for best performance. If you need to allow network connectivity for Windows 365 or Intune, see [Network requirements for Windows 365](/windows-365/enterprise/requirements-network#allow-network-connectivity) and [Network endpoints for Intune](/mem/intune/fundamentals/intune-endpoints).
+Depending on your organization's needs, you might want to enable secure outbound internet access for your end users. If the list of allowed destinations is well-defined (for example, for [Microsoft 365 access](/microsoft-365/enterprise/microsoft-365-ip-web-service)), use Azure Firewall application and network rules to configure the required access. This configuration routes end-user traffic directly to the internet for best performance. If you need to allow network connectivity for Windows 365 or Intune, see [Network requirements for Windows 365](/windows-365/enterprise/requirements-network#allow-network-connectivity) and [Network endpoints for Intune](/mem/intune/fundamentals/intune-endpoints).
 
 If you want to filter outbound user internet traffic by using an existing on-premises secure web gateway, you can configure web browsers or other applications running on the Azure Virtual Desktop host pool with an explicit proxy configuration. For example, see [How to use Microsoft Edge command-line options to configure proxy settings](/deployedge/edge-learnmore-cmdline-options-proxy-settings). These proxy settings only influence your end-user internet access, allowing the Azure Virtual Desktop platform outbound traffic directly via Azure Firewall.
 
@@ -55,4 +57,4 @@ Admins can allow or deny user access to different website categories. Add a rule
 
 ## Next step
 
-- Learn more about Azure Virtual Desktop: [What is Azure Virtual Desktop?](/azure/virtual-desktop/overview)
+- To learn more about Azure Virtual Desktop, see [What is Azure Virtual Desktop?](/azure/virtual-desktop/overview)