Azure Arc
A Microsoft cloud service that enables deployment of Azure services across hybrid and multicloud environments.
456 questions
Unable to Enable Microsoft Entra ID to SQL Server using Azure Arc
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 57.00000000000001%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Jowlin Simon
0
Reputation points
I was trying to enable the Microsoft Entra ID to an SQL Server in EC2 using the Azure Arc. I was able to successfully set it up to 5 servers but there is one server which gives me pain. I am able to setup the azure arc connections to that one server and even enabled the Microsoft Entra Admin in Azure Arc, what is odd is it is not replicating to the SQL Server, so I can add Microsoft Entra account to the SQL Server.
I reinstalled few times and did other way configuration and didn't help at all
I checked the certificates suspecting that server is not getting the configs but I am able to see the associated certificate to setup the Microsoft Entra ID.
Does anyone have any similar issues
Setup Reference
https://learn.microsoft.com/en-us/sql/sql-server/azure-arc/deployment-options?view=sql-server-ver16
{count} votes
-
Erland Sommarskog 114.2K Reputation points MVP2024-10-24T21:26:26.4666667+00:00 What does "SELECT @@version" report for that troublesome instance?
-
Jowlin Simon 0 Reputation points
2024-11-01T07:39:05.55+00:00 Hi @Erland Sommarskog - This is the version of MSSQL of the troublesome instance
Microsoft SQL Server 2022 (RTM-CU11) (KB5032679) - 16.0.4105.2 (X64) Nov 14 2023 18:33:19 Copyright (C) 2022 Microsoft Corporation Standard Edition (64-bit) on Windows Server 2022 Datacenter 10.0 <X64> (Build 20348: ) (Hypervisor)Cross checking it to other servers and I found the same version.
Microsoft SQL Server 2022 (RTM-CU11) (KB5032679) - 16.0.4105.2 (X64) Nov 14 2023 18:33:19 Copyright (C) 2022 Microsoft Corporation Standard Edition (64-bit) on Windows Server 2022 Datacenter 10.0 <X64> (Build 20348: ) (Hypervisor) -
Jowlin Simon 0 Reputation points
2024-11-01T07:42:03.4233333+00:00 Below is the version and when I cross check to other servers I have they are all the same
Microsoft SQL Server 2022 (RTM-CU11) (KB5032679) - 16.0.4105.2 (X64) Nov 14 2023 18:33:19 Copyright (C) 2022 Microsoft Corporation Standard Edition (64-bit) on Windows Server 2022 Datacenter 10.0 <X64> (Build 20348: ) (Hypervisor)
-
Erland Sommarskog 114.2K Reputation points MVP
2024-11-02T04:37:21.72+00:00 OK, I just wanted to verify that you are on a version where it works out.
I don't know too much about this, but I find this part interesting:
and even enabled the Microsoft Entra Admin in Azure Arc, what is odd is it is not replicating to the SQL Server
What they do is that they write the Entra ID Admin to the registry, and then SQL Server picks is up. I don't remember the exact key, but you can search for the username for the Entre ID Admin on the working machines to see where it is located.
Then check the problematic machine. Is the name of the Entra Admin in the same place in the registry? Is is somewhere else? Where is SQL Server reading? (Process Monitor could help here.)
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 47%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERP%3C/text%3E%3C/svg%3E)
Rahul Podila 800 Reputation points Microsoft Vendor2024-12-20T07:16:20.85+00:00 Hi @Jowlin Simon
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.
First, make sure that the SQL Server instance in question is running version 2022 (16.x) or later. This version is necessary for Microsoft Entra ID to work properly.
Next, log into the Azure portal and check if your SQL Server is connected to Azure Arc. You can find this under the Properties section for your SQL Server in Azure Arc.
If the admin settings aren’t applying, try removing and then re-adding the Microsoft Entra admin. Go to Microsoft Entra ID and Purview in Azure Arc, remove the current admin, and save your changes. Then, add the admin back and save again. This can help ensure everything is set up correctly.
Make sure you’re using service-managed certificates during the setup. This can simplify things and help avoid configuration issues.
After setting up the Microsoft Entra admin, don’t forget to grant admin consent for the application in Azure. This step is crucial for creating new logins in SQL Server with Microsoft Entra ID.
Take a look at any error messages in your logs related to authentication or connection issues. These might give you clues about what’s going wrong.
Sometimes changes take a little time to take effect, so after making adjustments, wait until you see a confirmation that everything has been saved successfully.
If you’re still having issues, consider updating your SQL Server instance to the latest patches or updates, as this can often resolve many problems.
If you have any further queries, do let us know.
Sign in to comment
Sign in to answer