Add TSG to fix x509 authentication between NC and Hosts after Solution Update#275
Open
arudell wants to merge 12 commits intoAzure:mainfrom
Open
Add TSG to fix x509 authentication between NC and Hosts after Solution Update#275arudell wants to merge 12 commits intoAzure:mainfrom
arudell wants to merge 12 commits intoAzure:mainfrom
Conversation
…pdate Add troubleshooting guide for NcHostAgent connectivity failure to Network Controller ApiService following Azure Local solution updates. The issue is caused by missing NetworkControllerNodeNames registry key on Hyper-V hosts, which prevents certificate rotation from propagating to NC VMs. Mitigation steps include: - Validating and populating the registry key on all hosts - Verifying local admin permissions on NC VMs - Running Start-SdnServerCertificateRotation for short-term recovery Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Break the Root Cause into distinct sub-sections: 1. Missing NetworkControllerNodeNames registry key 2. HCI admin user not in Local Administrators on NC VMs 3. Code defect in certificate rotation logic (fix in progress) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Adds a new Azure Local Networking (SDN Express / Network Controller) troubleshooting guide for a post–solution update failure where NcHostAgent cannot authenticate/connect to the NC ApiService, and links it from the Networking README so it’s discoverable.
Changes:
- Added a new TSG documenting symptoms, root causes, and mitigation steps for x509/auth failures between NC and hosts after solution update certificate rotation.
- Updated the Networking README to include the new TSG under the SDN Express section.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.
| File | Description |
|---|---|
TSG/Networking/SDN-Express/Troubleshoot-SDNExpress-NcHostAgent-Unable-To-Connect-ApiService-After-Solution-Update.md |
New TSG describing the issue and providing diagnostic/resolution steps (including PowerShell guidance). |
TSG/Networking/README.md |
Adds a TOC entry linking to the new troubleshooting guide. |
…-Unable-To-Connect-ApiService-After-Solution-Update.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…-Unable-To-Connect-ApiService-After-Solution-Update.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…://github.com/arudell/AzureLocal-Supportability into tsg/networking/nchost-agent-apiservice-update
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request adds new troubleshooting documentation for a critical SDN Express issue where
NcHostAgentis unable to connect to theApiServiceafter a solution update. The documentation outlines the problem, root causes, and provides step-by-step resolution guidance. The main changes are:Documentation Additions:
Troubleshoot-SDNExpress-NcHostAgent-Unable-To-Connect-ApiService-After-Solution-Update.md, which covers symptoms, root causes, and resolutions for theNcHostAgentconnection issue following solution updates.README.mdto include a link to the new troubleshooting document, making it easier to find and reference.