[Autogenerated] Now the exam might ask you about updating the certificate if we
come in here and look at the properties of the connection.
It is a secure connection but we're using a self signed
certificate that has no certification path.
Besides after 60 days it's not going to work anyway.
So what you'll want to do is install the appropriate TLS SsL certificate
in the local computer certificate store on your server and what you'll
need is the thumbprint of that certificate.
So if we go to details, thumb print and copy that data out,
we then can rerun the package.
Okay,
step through next and we'll do a change and we can use are locally
installed Gateway ssL certificate here by pasting the thumbprint and
clicking change to commit that change,
click finish Now if I do a hard refresh it's giving me a not secure
error because I actually kind of cheated a little bit.
I am using my own certificate here but if we take a look at it,
it's just another self signed certificate.
But that's the idea,
that's the exam alert and certainly that's important
from a real world perspective as well.
Last thing I want to demo here is show you how you can begin to integrate
your Windows Admin center with your Azure subscription.
So from the all connections view,
if we go to add and scroll down to Azure VMS when you click add
the first thing you'll be required to do is register your Windows
admin center instance with Azure.
So let's click and we'll copy our authentication code here and do a
browser based device log on flow let me click next I'll provide my
Azure Active Directory credentials, password,
confirm that?
Yes, I'm trying to sign into the admin center now I can close this window,
verify my tenant id and determine what kind of
service principle we're going to use,
I'm going to choose create new in this case and this is going
to create a service principal identity,
basically a registered application for this instance,
this gateway instance of Windows Admin center and it will then have
privileges or be able to delegate on your behalf.
You're signed in privileges into Azure so let's click connect, click sign in.
If you get an error,
you may need to go over to the settings page and make sure that you've
consented preferably on behalf of your organization,
the access that as your active directory needs from you.
So now that I've done that,
let me come back to all connections and let's try the Azure
VM connection one more time I'll browse to my subscription
my at 800 R G resource group.
I now have access to my various virtual machines I'm going to grab VM
to in this case and I can connect either via private or public
endpoint depending upon how I've configured it.
I'm going over the internet so I'm going to need the public endpoint
although I started us here by attempting to add an Azure VM I really if I
were to do this over again would have you go to settings first account and
sign into Azure consent on behalf of your organization and then come back
and go ahead and add in the Azure VM. It's a cleaner way to do it.