Skip to main content
Version: 2604 (Preview)

Task 02: Prepare Machines

Runbook Azure Preview

DOCUMENT CATEGORY: Runbook SCOPE: Machine preparation for simplified provisioning PURPOSE: Boot servers into the maintenance environment and collect ownership vouchers MASTER REFERENCE: Microsoft Learn — Simplified Machine Provisioning

Status: Active

Automated Alternative — azurelocal-ztp

Instead of physically plugging in a USB drive and booting each server manually, you can use the azurelocal-ztp project to mount the maintenance-environment ISO via BMC/Redfish (iDRAC, XCC, iLO) and reboot remotely. This eliminates the need for physical access to the rack.

Overview​

In this task, you boot each server from the USB created in Task 01. The maintenance environment installs, generates a FIDO Device Onboarding (FDO) ownership voucher for each machine, and makes the machine ready to be claimed from Azure.

Repeat this process for every machine that will join the Azure Local cluster.

Prerequisites​

RequirementDetails
USB mediaCreated in Task 01
Physical accessTo the server's USB port and power button (or BMC console)
Secure BootEnabled in BIOS/UEFI
TPMEnabled in BIOS/UEFI

Step-by-Step​

Step 1: Boot from USB​

  1. Attach the USB flash drive to the server
  2. Power on the server
  3. If the server does not automatically boot from USB, access the BIOS/UEFI boot menu:
    • Press the appropriate key during POST (typically F2, F12, Delete, or Esc depending on your hardware vendor)
    • Select the USB drive as the boot device
  4. Ensure Secure Boot and TPM are enabled in BIOS/UEFI settings

Step 2: Wait for Maintenance Environment Setup​

  1. The maintenance environment installs and configures automatically
  2. The console displays "Maintenance environment setup completed successfully" when done
  3. Expect the machine to reboot twice during this process
  4. This typically takes up to 30 minutes

Step 3: Safely Disconnect USB​

After the maintenance environment setup completes, you can safely detach the USB drive and move it to the next server.

Disable USB Boot

After setup, disable USB boot in BIOS/UEFI to prevent accidental reboot from USB in the future.

Step 4: Collect Ownership Vouchers​

Collect the ownership voucher for each machine using one of two methods:

Option A — Via Configurator App:

  1. On your Windows 11 PC, open the Configurator App for Azure Local V2 (Run as Administrator)
  2. Connect to the machine using <machine-serial-number>.local or its IP address
  3. Enter the local administrator credentials:
    • Default username: edgeuser
    • Default password: Password1
  4. Download the ownership voucher
Factory Default Credentials

The credentials above (edgeuser / Password1) are Microsoft's published factory defaults for the maintenance environment. Change them at the earliest opportunity after initial connection. These credentials are replaced automatically once the Azure Stack HCI OS installs and your configured administrator credentials take effect.

Option B — From USB drive:

  1. Reattach the USB flash drive to your Windows 11 PC
  2. Navigate to \vouchers\<serial-number>\ on the USB drive
  3. Copy the .pem file (named after the machine's serial number)

Step 5: Repeat for All Machines​

Repeat Steps 1–4 for every machine in the cluster.

Validation​

  • Each machine displays "Maintenance environment setup completed successfully"
  • Ownership voucher (.pem file) collected for every machine
  • USB boot disabled in BIOS/UEFI after setup
  • All vouchers shared with the Azure portal administrator

Troubleshooting​

IssueResolution
Server does not boot from USBCheck BIOS boot order settings. Ensure USB boot is enabled and the USB is properly seated. Try a different USB port.
Maintenance setup hangsEnsure Secure Boot and TPM are enabled. Check server firmware is up to date. Power cycle and retry.
Cannot connect via Configurator AppVerify the machine's IP address or use <serial-number>.local. Ensure the Windows 11 PC is on the same network. Check that the default credentials haven't been changed.
Missing voucher on USB driveThe voucher is generated during maintenance environment setup. If the \vouchers\ folder is empty, the setup may not have completed. Re-run the process.
← Task 01: Create USB Media↑ Simplified ProvisioningTask 03: Provision from Azure →
VersionDateAuthorChanges
1.02026-05-01Azure Local CloudInitial release