Skip to content

Commit 3cfaa64

Browse files
committed
Merge branch 'main' into release-aio-2603
2 parents 7fe115c + 5f37852 commit 3cfaa64

197 files changed

Lines changed: 3052 additions & 1222 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

articles/app-service/environment/how-to-upgrade-preference.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ description: Configure the upgrade preference for Azure App Service Environment
55
author: seligj95
66
ms.author: jordanselig
77
ms.topic: how-to
8-
ms.date: 03/12/2026
8+
ms.date: 03/17/2026
99
ms.service: azure-app-service
1010
ms.custom:
1111
- devx-track-azurecli
@@ -35,6 +35,8 @@ When you configure automatic upgrades, the platform upgrades your App Service En
3535

3636
In smaller regions, the Early and Late upgrade preferences might be very close to each other.
3737

38+
When automatic upgrades are enabled for an App Service Environment, upgrades from other Azure dependency services are permitted outside of the regional business hours. When manual upgrades are configured, these other service upgrades are gated with the App Service upgrade deployments.
39+
3840
## Review manual upgrade options
3941

4042
When you configure manual upgrades, you receive a notification when an upgrade is available. The availability is also visible in the Azure portal. After the upgrade is available, you typically have 15 days to start the upgrade process. If you don't start the upgrade within the 15 days, the upgrade is processed with the remaining automatic upgrades in the region.

articles/app-service/overview-tls.md

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ App Service supports the following TLS versions for incoming requests to your we
4040

4141
- **TLS 1.3**. The latest and most secure version, now fully supported.
4242
- **TLS 1.2**. The default minimum TLS version for new web apps.
43-
- **TLS 1.1 and TLS 1.0**. Versions supported for backward compatibility but not recommended.
43+
- **TLS 1.1 and TLS 1.0**. These are legacy protocols and are no longer considered secure.
4444

4545
You can configure the *minimum TLS version* for incoming requests to your web app and its Source Control Manager (SCM) site. By default, the minimum is set to **TLS 1.2**.
4646

@@ -71,12 +71,7 @@ App Service uses a secure set of TLS 1.2 cipher suites to help ensure encrypted
7171

7272
### TLS 1.1 and TLS 1.0
7373

74-
TLS 1.1 and TLS 1.0 are legacy protocols and are no longer considered secure. These versions are supported on App Service only for backward compatibility and should be avoided when possible. The default minimum TLS version for new apps is TLS 1.2, and we recommend that you migrate apps that use TLS 1.1 or TLS 1.0.
75-
76-
> [!IMPORTANT]
77-
> Incoming requests to web apps and incoming requests to Azure are handled differently. App Service continues to support TLS 1.1 and TLS 1.0 for incoming requests to web apps.
78-
>
79-
> For incoming requests made directly to the Azure control plane, for example, through Azure Resource Manager or API calls, we don't recommend that you use TLS 1.1 or TLS 1.0.
74+
TLS 1.1 and TLS 1.0 are legacy protocols and are no longer considered secure. The default minimum TLS version for new apps is TLS 1.2, and we recommend that you migrate apps that use TLS 1.1 or TLS 1.0 to using TLS 1.2 or higher.
8075

8176
## Minimum TLS cipher suite
8277

articles/app-service/webjobs-sdk-how-to.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -158,7 +158,7 @@ The following table shows built-in roles that we recommend when you use triggers
158158
[Azure Service Bus Data Receiver]: ../role-based-access-control/built-in-roles.md#azure-service-bus-data-receiver
159159
[Azure Service Bus Data Sender]: ../role-based-access-control/built-in-roles.md#azure-service-bus-data-sender
160160
[Azure Service Bus Data Owner]: ../role-based-access-control/built-in-roles.md#azure-service-bus-data-owner
161-
[role-assignment-scope]: ../service-bus-messaging/service-bus-managed-service-identity.md#resource-scope
161+
[role-assignment-scope]: ../service-bus-messaging/service-bus-managed-service-identity.md#choose-the-resource-scope
162162

163163
#### Connection strings in version 2.*x*
164164

articles/azure-resource-manager/troubleshooting/common-deployment-errors.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ If your error code isn't listed, submit a GitHub issue. On the right side of the
6565
| PrivateIPAddressInReservedRange | The specified IP address includes an address range required by Azure. Change IP address to avoid reserved range. | [Private IP addresses](../../virtual-network/ip-services/private-ip-addresses.md)
6666
| PrivateIPAddressNotInSubnet | The specified IP address is outside of the subnet range. Change IP address to fall within subnet range. | [Private IP addresses](../../virtual-network/ip-services/private-ip-addresses.md) |
6767
| PropertyChangeNotAllowed | Some properties can't be changed on a deployed resource. When updating a resource, limit your changes to permitted properties. | [Update resource](/azure/architecture/guide/azure-resource-manager/advanced-templates/update-resource) |
68-
| PublicIPCountLimitReached | You've reached the limit for the number of running public IPs. Shut down unneeded resources or contact Azure support to request an increase. For example, in Azure Databricks, see [Unexpected cluster termination](/azure/databricks/kb/clusters/termination-reasons) and [IP address limit prevents cluster creation](/azure/databricks/kb/clusters/azure-ip-limit). | [Public IP address limits](../management/azure-subscription-service-limits.md#publicip-address) |
68+
| PublicIPCountLimitReached | You've reached the limit for the number of running public IPs. Shut down unneeded resources or contact Azure support to request an increase. For example, in Azure Databricks, see [IP address limit prevents cluster creation](/azure/databricks/kb/clusters/azure-ip-limit). | [Public IP address limits](../management/azure-subscription-service-limits.md#publicip-address) |
6969
| RegionDoesNotAllowProvisioning | Select a different region or submit a quota support request for **Region access**. | |
7070
| RequestDisallowedByPolicy | Your subscription includes a resource policy that prevents an action you're trying to do during deployment. Find the policy that blocks the action. If possible, change your deployment to meet the limitations from the policy. | [Resolve policies](error-policy-requestdisallowedbypolicy.md) |
7171
| ReservedResourceName | Provide a resource name that doesn't include a reserved name. | [Reserved resource names](error-reserved-resource-name.md) |

articles/azure-vmware/configure-vsan.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ After vSAN TRIM/UNMAP is enabled, you must meet certain prerequisites in order f
6868

6969
For more information about how to reclaim space for Windows and Linux systems for TRIM/UNMAP to execute, see the following VMware articles:
7070
- [How to reclaim disk space](https://knowledge.broadcom.com/external/article/340005/reclaiming-disk-space-from-thin-provisio.html)
71-
- [Learn the procedure to enable TRIM/UNMAP](https://knowledge.broadcom.com/external/article/326595/procedure-to-enable-trimunmap.html)
71+
- [Learn the procedure to enable TRIM/UNMAP](https://techdocs.broadcom.com/us/en/vmware-cis/vsan/vsan/8-0/vsan-administration/expanding-and-managing-a-vsan-cluster/vsan-file-service/reclaiming-space-with-unmap-in-vsan-distributed-file-system.html)
7272

7373
## Set VMware vSAN space efficiency
7474

articles/azure-vmware/index.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -225,6 +225,8 @@ additionalContent:
225225
links:
226226
- text: Run Command
227227
url: using-run-command.md
228+
- text: Use Set-ToolsRepo Run Command
229+
url: use-set-toolsrepo-run-command.md
228230
- text: Configure VMware Syslogs
229231
url: configure-vmware-syslogs.md
230232
- text: Send syslogs to log management solutions via Azure Logic Apps

articles/azure-vmware/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -350,6 +350,8 @@ items:
350350
items:
351351
- name: Run Command
352352
href: using-run-command.md
353+
- name: Use Set-ToolsRepo Run Command
354+
href: use-set-toolsrepo-run-command.md
353355
- name: Configure VMware syslogs
354356
href: configure-vmware-syslogs.md
355357
- name: Send syslogs to log management solutions via Azure Logic Apps
Lines changed: 71 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,71 @@
1+
---
2+
title: Set-ToolsRepo Run Command in Azure VMware Solution
3+
description: Use Set-ToolsRepo Run Commands in Azure VMware Solution
4+
ms.topic: how-to
5+
ms.service: azure-vmware
6+
ms.custom: engagement-fy26
7+
ms.date: 3/17/2026
8+
# Customer intent: As a cloud administrator, I want to execute Set-ToolsRepo Run Commands in an Azure VMware Solution, so that I can utilize a specific VMware Tools version.
9+
---
10+
11+
# Set-ToolsRepo Run Command
12+
In this article, learn how to use the Set-ToolsRepo Run Command from end-to-end, how to download and host the correct GuestStore version of the VMware Tools zip file, how we run the AVS Run Command, and how you can validate success.
13+
14+
## When to use Set-ToolsRepo Run Command
15+
This Run Command should be used to make a specific VMware Tolls version available for VM guest tools installation and upgrades in an Azure VMware Solution private cloud. When you want to centrally publish the GuestStore version of the VMware tools ZIP file to the vSAN central Tools location so that all relevant hosts can reference the package.
16+
17+
## Prerequisutes
18+
- A publicly accessible HTTP/HTTPS URL that points to the GuestStore version of the VMware Tools zip file (provided by the customer). The URL must be reachable from the Azure VMware Solution Run Command execution environment.
19+
- Permission to execute Azure VMware Solution Run Command packages in the Azure portal for the target private cloud.
20+
- The ZIP contents must include a VMware Tools payload directory in the expected layout.
21+
22+
### Expected ZIP Content
23+
The ZIP file you upload must contain the versioned folder under the following section: **vmware/apps/vmtools/windows64/vmtools-\<version>/**.
24+
The folder name must follow the format **vmtools-\<version>** (For example, **vmtools-12.4.0**).
25+
26+
## Tools ZIP URL
27+
The Set-ToolsRepo Run command accepts a publicly accessible HTTP/HTTPS URL to the GuestStore version of the VMware Tools zip file that will be published to the vSAN central Tools location.
28+
Before making any changes, validation that the URL is usable and the ZIP file can be downloaded successfully occurs.
29+
30+
- The URL uses HTTP or HTTPS and is a direct download link.
31+
- The file is reachable without interactive authentication and can be downloaded end to end.
32+
33+
## End to end workflow
34+
1. Customer downloads the required VMware Tools version.
35+
- The customer obtains the GuestStore version of the VMware Tools ZIP file for the specific version they want to publish to the vSAN central Tools location.
36+
2. Customer hosts the ZIP file at a publicly accessible HTTP/HTTPS location.
37+
- The customer must host the ZIP at a publicly accessible HTTP/HTTPS URL (for example, any web server or object storage that can serve the file without interactive authentication). They then provide that direct-download URL for use with the Run Command.
38+
>[!IMPORTANT]
39+
> The URL must be a direct download link and reachable without interactive authentication so the Run Command can retrieve the ZIP file.
40+
41+
3. Customer runs the Set-ToolsRepo Run Command.
42+
- Run the AVS Run Command and provide the ZIP URL shared in step 2. When it completes, the command output will indicate success or provide an error message.
43+
4. VMware Tools packaged is published.
44+
- Once the Run Command completes successfully, the requested VMware Tools version is available from vSAN central Tools location for the private cloud.
45+
5. Hosts are configured to use the vSAN repository
46+
- As part of the Run Command, the relavant ESXi hosts in the private cloud are updated to use vSAN central Tools location as the VMware Tools source.
47+
48+
## Validation
49+
After successful run of the Set-ToolsRepo Run Command, be sure to follow the below steps for validation.
50+
- Navigate to your vCenter client and browse the vSAN datastore. confirm the version folder exists under **GuestStore/vmware/apps/vmtools/windows64/**
51+
- Confirm the correct VMware Tools version is available to install or upgrade from within a guest test VM.
52+
- If any issues occur with the VMware Tools after a successful Run Command operation, capture the Run Command output and open a support request.
53+
54+
## Troubleshooting
55+
If the Run Command fails, the most common customer-side causes are the URL is not publicly reachable as a direct download link, or the ZIP does not contain the expected folder structure.
56+
Use the error message along with the troubleshooting steps listed below.
57+
58+
### URL or Download issues
59+
- **URL not reachable or the download fails**. Confirm the URL opens from an external network, is a direct-download link, and does not require sign-in, MFA, or time-limited tokens.
60+
- **TLS/SSL error**. Ensure the HTTPS endpoint supports modern TLS and presents a valid certificate.
61+
62+
### ZIP Structure issues
63+
- **Expected folder not found**. Ensure the ZIP contains vmware/apps/vmtools/windows64/vmtools-\<version> (including the leading vmware/ directory).
64+
- **Multiple versions in one ZIP**. Host a ZIP that contains only the single version you intend to publish, with one vmtools-\<version> folder.
65+
66+
### Datastore issues
67+
- **Service-side publish/configure error**. If the URL and ZIP structure are correct but the command still fails, capture the full Run Command output and open a support request.
68+
- **Intermittent failures**. Retry the Run Command after confirming the ZIP URL is still valid and reachable.
69+
70+
## Next step
71+
To learn more about Run Commands, see [Run Commands](using-run-command.md).

articles/cloud-services-extended-support/available-sizes.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,13 @@
22
title: Available sizes for Azure Cloud Services (extended support)
33
description: Available sizes for Azure Cloud Services (extended support) deployments
44
ms.topic: concept-article
5-
ms.service: azure-virtual-machines
5+
ms.service: azure-cloud-services-classic
66
author: gachandw
77
ms.author: gachandw
88
ms.reviewer: mimckitt
99
ms.date: 07/24/2024
10+
ms.update-cycle: 1095-days
11+
ms.custom: cloud-services-extended-support
1012
# Customer intent: "As a cloud architect, I want to select and configure VM sizes for Cloud Services (extended support) so that I can optimize performance, cost, and scalability for my workloads."
1113
---
1214

articles/cloud-services-extended-support/certificates-and-key-vault.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,13 @@
22
title: Store and use certificates in Azure Cloud Services (extended support)
33
description: Processes for storing and using certificates in Azure Cloud Services (extended support)
44
ms.topic: how-to
5-
ms.service: azure-virtual-machines
5+
ms.service: azure-cloud-services-classic
66
author: gachandw
77
ms.author: gachandw
88
ms.reviewer: mimckitt
99
ms.date: 07/24/2024
10+
ms.update-cycle: 365-days
11+
ms.custom: cloud-services-extended-support
1012
# Customer intent: As a cloud services administrator, I want to securely store and manage certificates using Key Vault so that I can enable secure communication and authentication for Azure Cloud Services (extended support) deployments.
1113
---
1214

0 commit comments

Comments
 (0)