Azure Arc Enabled Servers

Azure Arc Enabled Servers installs Microsoft’s Azure Arc Agent, also called the Connected Machine agent, on a Windows system so that system can connect to Azure Arc. Microsoft publishes this System Tools package for administrators and users preparing machines for Azure Arc connectivity. The current release is 1.67.0, and the package is freeware.

Administrators use it when bringing Windows servers or other computers under Azure Arc connectivity, with the installed agent providing the connection component. For versions beginning with Connected Machine agent 1.56, it also addresses situations where the agent cannot reach Azure endpoints even though those endpoints have been allowed in the environment.

Troubleshooting requires at least one recommended TLS version to have an enabled cipher suite. For TLS 1.3, the supported suites are TLS_AES_256_GCM_SHA384 and TLS_AES_128_GCM_SHA256, while TLS 1.2 uses TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256. The connection guidance presents these suites in server-preferred order and distinguishes their forward-secrecy and elliptic-curve characteristics. These settings give administrators concrete parameters to inspect when diagnosing the agent’s access to Azure endpoints.