You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Tutorial: Use SSH to access the payShield manager for your payment HSM
15
15
16
-
After you [Create an Azure Payment HSM](create-payment-hsm.md), you can create a virtual machine on the same virtual network and use it to access the Thales payShield manager.
16
+
After you [create an Azure Payment HSM](create-payment-hsm.md), you can create a virtual machine on the same virtual network and use it to access the Thales payShield manager.
17
17
18
18
In this tutorial, you learn how to:
19
19
20
20
> [!div class="checklist"]
21
21
> * Create a subnet for your virtual machine
22
22
> * Create a virtual machine
23
-
> * Test Connectivity to your VM, and from the VM to your payment HSM
24
-
> * Log into the VM to access the payShield manager
23
+
> * Test connectivity to your VM, and from the VM to your payment HSM
24
+
> * Log in to the VM to access the payShield manager
25
25
26
-
To complete this tutorial you need:
26
+
To complete this tutorial, you need:
27
27
28
28
- The name of your payment HSM's virtual network.
29
29
- The address space of your virtual network (for example, "10.0.0.0/16").
@@ -32,7 +32,7 @@ To complete this tutorial you need:
32
32
33
33
# [Azure CLI](#tab/azure-cli)
34
34
35
-
Create a subnet for your virtual machine, on the same virtual network as your payment HSM, using the Azure CLI [az network vnet subnet create](/cli/azure/network/vnet/subnet#az-network-vnet-subnet-create) command. You must provide a value to the--address-prefixes argument that falls within the VNet's address space, but differs from the payment HSM subnet addresses.
35
+
Create a subnet for your virtual machine, on the same virtual network as your payment HSM, using the Azure CLI [az network vnet subnet create](/cli/azure/network/vnet/subnet#az-network-vnet-subnet-create) command. You must provide a value to the`--address-prefixes` argument that falls within the VNet's address space, but differs from the payment HSM subnet addresses.
Next, configure a subnet for your virtual machine, on the same virtual network as your payment HSM, using the Azure PowerShell [New-AzVirtualNetworkSubnetConfig](/powershell/module/az.network/new-azvirtualnetworksubnetconfig) command. You must provide a value to the `--address-prefixes` argument that falls within the VNet's address space, but differs from the payment HSM subnet addresses.
55
+
Next, configure a subnet for your virtual machine, on the same virtual network as your payment HSM, using the Azure PowerShell [New-AzVirtualNetworkSubnetConfig](/powershell/module/az.network/new-azvirtualnetworksubnetconfig) command. You must provide a value to the `-AddressPrefix` argument that falls within the VNet's address space, but differs from the payment HSM subnet addresses.
@@ -82,7 +82,7 @@ Create your VM subnet using either Azure CLI or Azure PowerShell. You can use th
82
82
83
83
# [Azure CLI](#tab/azure-cli)
84
84
85
-
Create a VM on your new subnet, using the Azure CLI [az vm create](/cli/azure/vm#az-vm-create) command. (In this example we create a Linux VM, but you could also create a Windows VM by augmenting the instructions found at [Create a Windows virtual machine with the Azure CLI](/azure/virtual-machines/windows/quick-create-cli).)
85
+
Create a VM on your new subnet, using the Azure CLI [az vm create](/cli/azure/vm#az-vm-create) command. This example creates a Linux VM, but you can also create a Windows VM by augmenting the instructions found at [Create a Windows virtual machine with the Azure CLI](/azure/virtual-machines/windows/quick-create-cli).
86
86
87
87
```azurecli-interactive
88
88
az vm create \
@@ -95,17 +95,17 @@ az vm create \
95
95
--generate-ssh-keys
96
96
```
97
97
98
-
Make a note of where the public SSH key is saved, and the value for "publicIpAddress".
98
+
Note where the public SSH key is saved, and the value for "publicIpAddress".
99
99
100
100
# [Azure PowerShell](#tab/azure-powershell)
101
101
102
-
To create a VM on your new subnet, first set your credentials with the [Get-Credential](/powershell/module/microsoft.powershell.security/get-credential) cmdlet. Provide a username of "azureuser" and a password of your choice, saving the object as $cred.
102
+
To create a VM on your new subnet, first set your credentials with the [Get-Credential](/powershell/module/microsoft.powershell.security/get-credential) cmdlet. Provide a username of "azureuser" and a password of your choice, and save the object as $cred.
103
103
104
104
```azurepowershell-interactive
105
105
$cred = Get-Credential
106
106
```
107
107
108
-
Now create your VM using the Azure PowerShell [New-AzVm](/powershell/module/az.compute/new-azvm) command. (In this example we create a Linux VM, but you could also create a Windows VM by augmenting the instructions found at [Create a Windows virtual machine with the Azure PowerShell](/azure/virtual-machines/windows/quick-create-powershell).)
108
+
Next, create your VM using the Azure PowerShell [New-AzVm](/powershell/module/az.compute/new-azvm) command. This example creates a Linux VM, but you can also create a Windows VM by augmenting the instructions found at [Create a Windows virtual machine with the Azure PowerShell](/azure/virtual-machines/windows/quick-create-powershell).
109
109
110
110
```azurepowershell-interactive
111
111
New-AzVm `
@@ -122,7 +122,7 @@ New-AzVm `
122
122
-SshKeyName "myVM_key"
123
123
```
124
124
125
-
Make a note of where the private SSH key is saved, and the value for "FullyQualifiedDomainName".
125
+
Note where the private SSH key is saved, and the value for "FullyQualifiedDomainName".
126
126
127
127
# [Portal](#tab/azure-portal)
128
128
@@ -142,16 +142,16 @@ To create a VM on your new subnet:
142
142
143
143
## Test connectivity
144
144
145
-
To access connectivity to your virtual machine, and from your VM to the management NIC IP (10.0.0.4) and host NIC IP, SSH into your VM. Connect to either the public IP address (for example, [email protected]) or the fully qualified domain name (for example, [email protected])
145
+
To test connectivity to your virtual machine, and from your VM to the management NIC IP (10.0.0.4) and host NIC IP, SSH into your VM. Connect to either the public IP address (for example, [email protected]) or the fully qualified domain name (for example, [email protected])
146
146
147
147
> [!NOTE]
148
-
> If created your VM using Azure PowerShell, the Azure portal, or if you did not ask Azure CLI to autogenerate ssh keys when you created the VM, you must supply the private key to the ssh command using the `-i` flag (for example, `ssh -i "path/to/sshkey" azureuser@<publicIpAddress-or-FullyQualifiedDomainName>`). The private key **must** be protected ("chmod 400 myVM_key.pem").
148
+
> If you created your VM using Azure PowerShell, the Azure portal, or if you didn't ask Azure CLI to autogenerate SSH keys when you created the VM, you must supply the private key to the SSH command using the `-i` flag (for example, `ssh -i "path/to/sshkey" azureuser@<publicIpAddress-or-FullyQualifiedDomainName>`). The private key **must** be protected ("chmod 400 myVM_key.pem").
Now go to a browser on your local machine and open`https://localhost:44300` to access the payShield manager.
194
+
Open a browser on your local machine and go to`https://localhost:44300` to access the payShield manager.
195
195
196
196
:::image type="content" source="./media/payshield-manager.png" alt-text="Screenshot of the payShield manager for Azure Payment HSM.":::
197
197
198
-
Here you can commission the device, install or generate LMKs, test the API, and so on. Follow payShield documentation, and contact Thales support if any issues related to payShield commission, setup, and API testing.
198
+
From the payShield manager, you can commission the device, install or generate LMKs, and test the API. Follow payShield documentation, and contact Thales support for any issues related to payShield commission, setup, and API testing.
199
199
200
200
## Next steps
201
201
202
-
Advance to the next article to learn how to remove a commissioned payment HSM through the payShield manager.
202
+
Learn how to remove a commissioned payment HSM through the payShield manager.
203
203
> [!div class="nextstepaction"]
204
204
> [Remove a commissioned payment HSM](remove-payment-hsm.md)
0 commit comments