How do I update Azure Arc Connected Machine Agent With New Secret?

Question

We've had Azure Arc on-prem connected machines for a while, and now the Client Secret that was used to join them is about to expire.

What happens when the client secret expires? Will the connected machine agent stop communicating? Do I need to update every connect machine with the new secret? How would I do that?

Answer 1

It sounds like you deployed the Connected Machine Agent via a script using a service principal, correct? The client secret is just for initial registration of the agent so your machines will continue checking into Azure Arc after the expiration. Your script however will need an updated client secret in order to register agents after the current client secret expires. To generate a new client secret:

1. In the Azure portal, go to App registrations -> All applications
2. Search for the ServicePrincipalID used in your script and click on the result
3. Click Certificates & Secrets -> New client secret
4. Set your expiration
5. Click Add
6. Update your script with the new client secret