Sync device time for Azure Data Box

For these versions of software, you must first install certificates on the host accessing your Data Box and then connect to the PowerShell interface of the device. When you install certificates, you can use the default certificates that the device is shipped with or bring your own certificates. In each case, the specific steps that you'll take are slightly different.

Step 1: Install certificate on host or client

Use default certificates

Follow these steps if you'll use the default certificates (shipped with the device) on Data Box.

1. In the Azure portal, go to your Data Box order resource. Go to General > Device details. On the API access to the device tab, select Download.

   

2. Copy the certificate to the host connecting to your Data Box. If using a Windows host, open Explorer. Right-click the certificate file that you copied to the host and select Install certificate.

3. Complete the installation steps through the Certificate Import Wizard. For detailed steps, see Import certificate to the client.

4. Add an entry to host file that maps the device IP address to the FQDN of the device. The format of the entry would be:

   <Device IP address> <Device serial number>.microsoftdatabox.com

   Provide the device serial number from the earlier step.

   

Use your own certificates

Follow these steps if you'll bring your own certificates on Data Box.

1. Install the signing chain certificate that you are bringing, on the host machine that you'll connect to the Data Box. Open the certificate via Explorer, right-click the file and select Install certificate.

2. Follow steps in Import certificates to client and install the certificate in Local machine/root.

3. Add an entry to the host file that maps the device IP address to the FQDN of the device. The format of the entry would be:

   <Device IP address> <Name>.<DNS domain>

   To get the Name and DNS domain for your device, in the local UI, go to the Certificates page.

4. To upload the certificates, in the local UI, go to the Certificates page. Select + Add certificates and provide your certificate. See Upload certificates.

Step 2: Connect to the PowerShell interface

1. Set $Name parameter.

   $Name = <Name>.<DNS domain>
   

   Provide the Name and DNS domain for your device from the earlier steps.

2. Add your Data Box to the TrustedHosts list using the $Name parameter. Type:

   Set-Item wsman:\localhost\Client\TrustedHosts $Name 
   

3. Get password for local UI from the Azure portal. Create a secure string containing the password.

   $Pwd = ConvertTo-SecureString <Password from Azure portal> -AsPlainText -Force 
   

4. Establish the connection.

   Enter-PSSession -ComputerName $Name -ConfigurationName Minishell -Credential ~\StorSimpleAdmin -UseSSL  
   

   Here is an example output:

   PS C:\Users\Administrator> winrm quickconfig
   WinRM service is already running on this machine.
   WinRM is already set up for remote management on this computer.
   PS C:\Users\Administrator> $Name = "by506b4b5d0790.microsoftdatabox.com"
   PS C:\Users\Administrator> Set-Item WSMan:\localhost\Client\TrustedHosts $Name -Concatenate -Force
   PS C:\Users\Administrator> Enter-PSSession -ComputerName $Name -Credential ~\StorSimpleAdmin -ConfigurationName Minishell -UseSSL
   WARNING: Please engage Microsoft Support if you need to access this interface
   to troubleshoot any potential issues you may be experiencing.
   Changes made through this interface without involving Microsoft
   Support could result in an unsupported configuration.
   [by506b4b5d0790.microsoftdatabox.com]: PS>
   

Skip certificate validation

If you are not using the certificates (we recommend that you use the certificates!), you can skip the certificate validation check by using the session options: -SkipCACheck -SkipCNCheck -SkipRevocationCheck.

Follow these steps to skip certificate validation:

1. Set $Name parameter.

   $Name = <Name>.<DNS domain>
   

2. Use session options when opening a PowerShell session.

   $sessOptions = New-PSSessionOption -SkipCACheck -SkipCNCheck -SkipRevocationCheck 
   

3. Establish the connection.

   Enter-PSSession -ComputerName $Name -ConfigurationName Minishell -Credential ~\StorSimpleAdmin -UseSSL -SessionOption $sessOptions 
   

1. Open a PowerShell session using Run as administrator.

2. Add your Data Box to the TrustedHosts list using the IP address. Type:

   Set-Item Wsman:\localhost\Client\TrustedHosts <IPv4_address for your Data Box> 
   

3. Get password for your Data Box order resource in the Azure portal.

4. Convert the password supplied in plain text to a secure string. Type:

   $Pwd = ConvertTo-SecureString <Password from Azure portal> -AsPlainText -Force 
   

5. Provide the username and password for the session and create a credential object. The default username is StorSimpleAdmin and the password you got in the earlier step.

   $Cred = New-Object System.Management.Automation.PSCredential("~\StorSimpleAdmin",$Pwd)
   

6. Start a session with the device.

   Enter-PSSession -Computer <IPv4_address for your Data Box> -ConfigurationName Minishell -Credential $Cred 
   

   Here is an example output.

   Windows PowerShell
   Copyright (C) Microsoft Corporation. All rights reserved.
   
   Try the new cross-platform PowerShell https://aka.ms/pscore6
   
   PS C:\WINDOWS\system32> Set-Item wsman:\localhost\Client\TrustedHosts "10.128.45.52"
   
   WinRM Security Configuration.
   This command modifies the TrustedHosts list for the WinRM client. The computers in the
   TrustedHosts list might not be authenticated. The client might send credential information to
    these computers. Are you sure that you want to modify this list?
   [Y] Yes  [N] No  [S] Suspend  [?] Help (default is "Y"): Y
   PS C:\WINDOWS\system32> $Pwd = ConvertTo-SecureString "Password1" -AsPlainText -Force
   PS C:\WINDOWS\system32> $Cred = New-Object System.Management.Automation.PSCredential("~\StorSimpleAdmin",$Pwd)
   PS C:\WINDOWS\system32> Enter-PSSession -Computer "10.128.45.52" -ConfigurationName Minishell -Credential $Cred
   WARNING: Please engage Microsoft Support if you need to access this interface
   to troubleshoot any potential issues you may be experiencing.
   Changes made through this interface without involving Microsoft
   Support could result in an unsupported configuration.
   [10.128.45.52]: PS>