SPN expired on Azure VMSS

[Nik5]

Hi Guys,

Can someone please help me with the exact commands to renew the SPN in checkpoint VMSS in Azure.

The SPN is already renewed on Azure. Now i am missing the commands to put the new secret in VMSS, I just want to be careful to not mess with existing template settings.

Thanks

[yairra · Accepted solution]

Hi @Nik5 

Are you looking to update the existing CME Azure controller (account) with the new SPN?
There are 2 ways to do this:
1. CME API - Use the PUT method to update the Azure account. - PUT - Update Azure account 
2. autoprov_cfg cli - Run the following command -
"autoprov_cfg set controller Azure -cn <controller_name> -aci <client_id> -acs <client_secret>"

If you need to grant the permissions for the SPN over the VMSS in Azure you can do that by adding a role assignment to the SPN in the "Access control (IAM)" section of the relevant resources in Azure portal

Feel free to reach out if you need any assistance

Thanks
Yair