Category Reference
Detailed reference for all 6 validation categories in Start-AzlValidation.ps1.
| # |
Category |
Key checks |
Critical failure? |
| 1 |
Basic Network |
NIC IP-enabled, gateway ping, first node ping |
Yes |
| 2 |
DNS |
TCP/UDP 53 per DNS server, forward A-record for Azure + AD domain, reverse PTR for DC IPs |
Yes |
| 3 |
Active Directory |
TCP: LDAP 389/636, Kerberos 88, RPC 135, DNS 53 per DC; DNS SRV _ldap._tcp.dc._msdcs.<domain> |
Yes (AD path only) |
| 4 |
Endpoint Sweep |
TCP connect + HTTPS GET to all endpoints from the 3 source links |
Critical = Fail; Warning = Warn |
| 5 |
Environment Checker |
Invoke-AzStackHciConnectivityValidation + Invoke-AzStackHciNetworkValidation |
Warn if module absent |
| 6 |
Arc Integration |
Invoke-AzStackHciArcIntegrationValidation (optional — requires Az login) |
Skip if not authenticated |
Endpoint sources (Category 4)
All endpoints in config/endpoints.json trace to one of three Microsoft/Dell sources:
Which categories run per path
| Category |
AD |
Local Identity |
Networking & Firewall |
Full sweep |
| 1 Network |
✅ |
✅ |
✅ |
✅ |
| 2 DNS |
✅ |
✅ |
✅ |
✅ |
| 3 AD ports |
✅ |
❌ |
❌ |
AD sub-path only |
| 4 Endpoint sweep |
✅ |
✅ |
✅ |
✅ |
| 5 EnvChecker |
✅ |
✅ |
✅ |
✅ |
| 6 Arc |
⚠️ optional |
⚠️ optional |
⚠️ optional |
⚠️ optional |
Config keys (validation-config.json)
| Key |
Used by |
Example |
managementGateway |
Cat-1 |
"10.10.0.1" |
nodeIps |
Cat-1 |
["10.10.1.10"] |
dnsServers |
Cat-2 |
["10.10.0.10"] |
adDomainFqdn |
Cat-2, Cat-3 |
"corp.improbability.cloud" |
dcIps |
Cat-2, Cat-3 |
["10.10.0.10", "10.10.0.11"] |
nodeFqdns |
Cat-2 |
["azl-node1.corp.improbability.cloud"] |
pingTimeoutMs |
Cat-1 |
2000 |
tcpConnectTimeoutMs |
Cat-2–4 |
5000 |
keyVaultFqdn |
Cat-4 (endpoint sweep) |
"kv-vault.vault.azure.net" |
azureRegion |
Cat-5 (EnvChecker) |
"eastus" |