How to use Microsoft Virtual Machine Converter

As azure is taking of I wanted to get my teeth in. My company is in the process of uploading some key service servers from the current VCentre environment to Azure.
I won’t bore you about how to create a Azure subscription as it’s relatively strait forward.
The 2nd piece of the task was to convert a current VM to Azure. I faced difference changes here, one of the reason for this, Azure’s security is tight and MS wants to make sure that the MVMC is being performed by an authorised Azure subscriber.

In the below screen shot you can see the MVMC wants a Subscriber ID & Certificate Thumbprint.
The Subscriber ID is available from Azure Portal. However the Certificate Thumbprint wasn’t available as of course I didn’t upload a certificate Azure yet. At this point I did basic searches and everything was pointing to that I should have a Microsoft Azure Tools available from my computers Personal Certificate Store, In my case there were no certificate so I did some more research and couldn’t find much information in a single blog. So I decided to document my experience and upload it all in one section.

1
Solution
First go to your Azure Portal and collect your Subscription ID- AZURE has 2 Portal, a new portal & an Old portal, go to the OLD portal to collect the subscription ID as shown below

2

Now you need to create a certificate from your computer & upload that certificate to Azure.
For this you need the certutil.exe tool which comes with Visual Studio or Windows 7/8/8.1 Software Development Kit (SDK). At the time of writing this blog I was using Windows 8 so I downloaded the SDK for windows 8 from the below link
https://msdn.microsoft.com/en-us/windows/desktop/hh852363.aspx
After downloading I only selected & installed the below

3

Once the installation completed, you can open Windows command prompt as Administrator and navigate from command prompt to location  C:\Program Files (x86)\Windows Kits\8.0\bin\x64 for 64 bit machine or location C:\Program Files (x86)\Windows Kits\8.0\bin\x86 for 32 bit machine then type makecert.exe from command prompt and you will be presented with makecert options.

Now, type the below command in the command prompt
makecert -sky exchange -r -n “CN=certificatename” -pe -a sha1 -len 2048 -ss My “certificatename.cer”
Note: replace certificate name with your choice of name. Now execute the command as shown below

4

You can see that once the command run successfully if says succeeded & created a .cer in the same program files location as well as in your personal store as shown below

5

6

 

Now you have to export this certificate from your personal certificate store to your trusted root certificate store in the current user section, this bit is important, if you don’t do this bit they you will get error message

The certificate with thumbprint <THUMBPRINT> was not found in the personal certificate store.
OK

1) Start the MMC.exe process.
2) Click File, click Add/Remove Snap-in, and then click Certificates.
3) On the Certificates snap-in screen, click Add, and then select my user account. Click Finish, and then click OK.
4) Expand Console Root, expand Certificates – Current User, expand Personal, and then expand Certificates.
5) Right-click your Microsoft Azure certificate. By default, this is named Microsoft Azure Tools, you can name it whatever. Select All Tasks, and then click Export.
6) Click Next, and then click No, do not export the private key. Click Next.
7) On the Certificate Export Wizard screen, click DER encoded X.509 (.CER), and then click Next.
8) Type a file name, click Next, and then click Finish.
9) Expand Console Root\Certificates – Current User, expand Trusted Root Certification Authorities, and then expand Certificates.
10) Right-click Certificates, and then click Import.
11) Click Next, and then locate the file that you exported in step 8.
Follow the steps in the wizard to complete the import process. Verify that the Microsoft Azure Tools certificate now appears in both the Personal and Trusted Root Certification Authorities stores.
Return to MVMC, and then retry the Azure Connection task.

The final task is to upload your certificate to your Azure subscription profile as shown in the below screen shot, once you upload it, you will see the certificate thumbprint also as shown below and that’s all, you are set,

7

 

Now copy the thumbprint to your MVMC application and go your way to convert the machine

Leave a Reply

Your email address will not be published. Required fields are marked *